Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
File: Q94YPxSj8k-bhtBE-HcphoC1Ers.mft (raw, json)
Hash identifier: 1ktyWhJNIuyjHojnnawFDl8eMr50x2AN3QNOIoLGIzk=
Subject key identifier: 7A:15:48:2D:0F:B3:C7:26:15:2D:58:9D:6C:2D:96:57:A9:34:10:A6
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial: 019FA7BDF3B200DA8912AF572F8C2313C291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
Manifest number: 083D
Signing time: Tue 28 Jul 2026 08:01:11 +0000
Manifest this update: Tue 28 Jul 2026 08:01:11 +0000
Manifest next update: Wed 29 Jul 2026 08:01:11 +0000
Files and hashes: 1: Q94YPxSj8k-bhtBE-HcphoC1Ers.crl (hash: V1FGw70OSkeH5WkSj70VapvDOisBWXfoMU7tOJXswX0=)
2: hXKR5zejn3_Hil5KhYu5iVmfXJI.asa (hash: 3GFU2TS4xAC21rEQtTrjdeWRD+az4p5iCI2PhFizOP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:f3:b2:00:da:89:12:af:57:2f:8c:23:13:c2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
Validity
Not Before: Jul 28 08:01:11 2026 GMT
Not After : Jul 29 08:01:11 2026 GMT
Subject: CN=7a15482d0fb3c726152d589d6c2d9657a93410a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:a0:ba:3b:2d:a2:b1:e8:a9:e3:6c:2d:ea:
93:41:00:68:14:21:b2:af:57:6b:bf:07:13:4d:28:
dd:e3:c6:6a:5a:a7:0d:97:f4:24:5e:99:97:1a:c3:
ba:80:93:f3:87:e4:ad:a9:64:e0:38:df:90:1c:99:
f2:23:64:ed:87:a2:76:a0:1a:aa:04:61:49:84:8e:
92:3d:e1:af:21:1c:ef:c6:26:6c:ab:ae:b2:69:a7:
8d:90:ae:ea:8f:95:16:d7:41:0a:04:4c:6c:40:c3:
6c:24:46:be:1f:ba:c5:67:3e:56:ec:f1:e0:88:84:
5e:11:95:6f:ab:e5:83:69:26:b8:79:6a:0f:24:cf:
36:fb:73:a2:01:e0:ce:7c:bd:d9:ca:da:e4:cb:e1:
de:9c:0d:3b:2c:4d:e5:ed:cb:59:38:03:00:a7:fe:
89:dd:c5:fd:ba:59:c2:f4:19:c7:d7:fd:b0:3d:5d:
6e:f6:e7:f4:f7:ad:d9:4f:4b:13:d1:8b:ae:21:ac:
c4:aa:2e:1a:11:fc:f5:2e:f5:a2:50:a0:28:e0:45:
15:8e:c8:71:bb:9d:e6:fe:34:19:44:99:f3:b0:2d:
ef:30:b3:8d:47:8d:10:39:80:96:b3:59:81:b7:1e:
99:8b:64:7c:e6:df:00:a3:5c:10:7b:00:eb:91:63:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:15:48:2D:0F:B3:C7:26:15:2D:58:9D:6C:2D:96:57:A9:34:10:A6
X509v3 Authority Key Identifier:
keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cd:2a:91:00:1e:71:65:14:0e:08:9f:94:8a:f5:1e:17:0b:
8b:b4:d4:1f:6d:98:7a:c4:7d:f7:d2:10:94:c4:e9:54:9c:c2:
05:99:2d:1a:e9:a0:87:1f:78:ad:fb:d6:79:27:d5:b2:33:a8:
88:d1:46:a1:a6:57:82:75:f6:1d:f0:44:ed:09:0e:27:03:14:
2f:fb:8e:61:17:aa:e5:3a:6a:1d:4f:b5:24:d1:1e:b7:36:21:
27:57:25:58:b1:bd:60:77:03:cf:a2:f6:90:13:f8:c8:35:e0:
0d:8c:c7:8e:9c:07:f7:4c:1c:c3:23:8d:cc:ce:0b:7c:36:8d:
2d:09:f4:2c:a1:06:4b:94:7d:f1:02:59:dc:f6:d2:bd:eb:65:
39:45:1e:84:dd:74:27:ce:66:64:f4:56:d1:81:ca:9f:65:c2:
c1:64:e3:67:9e:b1:f4:6d:2b:bb:71:54:88:3f:25:0b:c8:5d:
df:5d:e9:27:1c:5c:3f:ac:b8:67:48:5c:dd:7b:af:5b:5a:68:
85:02:9f:58:9c:26:7f:a0:41:5b:5e:57:2d:bc:24:3c:14:b3:
97:8a:94:80:58:f4:b3:fb:9e:19:0f:56:d0:d4:10:31:81:b7:
a4:81:69:b7:e9:5c:29:54:14:5d:b0:92:20:a8:d8:6a:f2:0d:
78:e1:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:57:48 2026 by rpki-client