Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
File: RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft (raw, json)
Hash identifier: XVAZaTKVcR5+sc2oXqhNwOlFJZ5HM4UdvFZIdV6/17s=
Subject key identifier: F5:F9:BE:03:75:BD:62:62:49:05:75:4E:3B:72:6F:11:19:67:88:CA
Authority key identifier: 45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
Certificate issuer: /CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Certificate serial: 019FA974BA278BA8C9BFBDE3344B7AA6E41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
Manifest number: 011A
Signing time: Tue 28 Jul 2026 16:00:26 +0000
Manifest this update: Tue 28 Jul 2026 16:00:26 +0000
Manifest next update: Wed 29 Jul 2026 16:00:26 +0000
Files and hashes: 1: 9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa (hash: 55R+jdR0UJQmE1oLQNFzIpJd7w8rR1Qa8V5eWHVN66M=)
2: Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa (hash: 6I/UFrfGHL7pXTEoCzAXCGu9B83vEUFGM5JCdXCnrA0=)
3: RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl (hash: foyznIhjP0+V1gPD5opNPwOQNKq+dTX4Wk5B/nKWDCs=)
4: Rmzfw1Pn6oVl0YpHmqW6MW62cKY.roa (hash: ez1Yu6hc8zQKp0+BPfF1FCgIwY7OKVfVqthIubkAHaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:ba:27:8b:a8:c9:bf:bd:e3:34:4b:7a:a6:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Validity
Not Before: Jul 28 16:00:26 2026 GMT
Not After : Jul 29 16:00:26 2026 GMT
Subject: CN=f5f9be0375bd62624905754e3b726f11196788ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:58:39:3f:6c:3e:14:c6:46:6f:5c:7a:c3:
62:e9:81:63:ca:dd:5e:5d:a7:6f:cc:71:87:69:1a:
86:c0:21:b8:85:46:74:b1:07:1a:e0:38:e8:6a:49:
ca:9a:dc:69:65:2d:92:ac:05:b3:86:ea:e2:7a:89:
bc:43:e2:3c:df:84:5c:69:be:1d:6e:2d:52:91:97:
d7:eb:62:12:97:af:81:2a:aa:a5:2a:f1:b6:8e:28:
74:ba:b8:db:db:05:80:6a:0c:d6:76:fd:ce:12:e1:
5f:70:3e:82:46:88:0b:bd:51:4f:27:6f:d1:05:ce:
d9:80:43:b3:75:dd:52:30:75:e8:0d:65:56:84:2c:
fe:13:1e:d4:f6:ad:66:09:90:4f:65:a2:e2:f3:b5:
d4:7a:5d:26:db:97:1f:00:52:79:96:f7:4f:bb:d8:
62:2c:c1:96:f1:cf:61:93:c0:e3:0b:00:f1:1d:87:
31:02:ca:a5:50:51:c3:62:a0:04:1c:60:c4:ee:d5:
a1:5e:41:d6:37:01:96:d3:f7:94:83:5d:95:4f:88:
9e:5b:60:4c:aa:95:be:ee:56:72:27:58:1b:fa:b3:
38:64:e3:a3:da:b2:88:fe:aa:95:42:85:53:eb:60:
02:90:3f:9d:dd:48:9a:da:bc:7e:b1:e2:2f:c5:86:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:BE:03:75:BD:62:62:49:05:75:4E:3B:72:6F:11:19:67:88:CA
X509v3 Authority Key Identifier:
keyid:45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5e:2b:ff:de:8b:d4:37:df:2f:54:80:4f:11:aa:0e:41:cd:
af:e2:98:62:b8:22:e5:ec:d5:37:bd:16:9f:9a:7f:cf:d2:bc:
23:eb:a4:58:28:0c:61:b0:4b:13:ca:ae:de:ba:b2:ba:63:2e:
68:ed:40:ed:1e:22:65:77:5b:eb:06:c6:48:3a:cc:24:cf:46:
60:8a:b8:84:74:66:25:8e:63:d0:4a:8c:57:65:09:e3:50:a1:
70:4a:c1:75:30:13:c4:00:91:04:64:38:7f:65:f1:d6:95:69:
de:6e:4a:05:2b:15:32:16:f3:4a:39:bd:b4:46:f4:a4:bd:79:
6c:fc:b5:94:c1:91:1d:0d:91:66:70:f0:9c:b3:57:f2:ca:79:
a1:00:47:03:3d:60:c6:6d:5c:18:2f:b8:96:a8:90:ff:66:0a:
65:8a:5e:b2:7b:e0:a5:78:eb:4a:30:6d:f4:17:2a:4c:27:1f:
a7:a8:07:a6:c5:d0:13:8d:c8:89:99:59:b5:84:6c:38:f0:60:
53:00:b5:b8:0f:0c:dd:b7:a8:74:45:14:a6:15:5a:69:85:5d:
6c:9a:ca:56:58:49:60:70:92:23:9e:86:0b:36:fc:0c:44:89:
4b:c4:43:b4:f3:e6:92:be:fd:9e:49:c0:8f:eb:e3:f3:3f:6a:
7c:4c:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:48 2026 by rpki-client