Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: yoJv9CZh1rVzAKKB0NIgJeoL2EyNnv09I15O+o1os9o=
Subject key identifier: 56:22:CB:15:D5:9C:98:2F:42:4B:AD:D0:50:DD:74:9D:5C:4A:EF:19
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019FAA50B4F7EACE782BB6ABAF70168DDF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0C1C
Signing time: Tue 28 Jul 2026 20:00:43 +0000
Manifest this update: Tue 28 Jul 2026 20:00:43 +0000
Manifest next update: Wed 29 Jul 2026 20:00:43 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: rGZ5J385bwWZsiNvKHlBQzSm0lycKDOlhvZKhK5B4q8=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:b4:f7:ea:ce:78:2b:b6:ab:af:70:16:8d:df:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jul 28 20:00:43 2026 GMT
Not After : Jul 29 20:00:43 2026 GMT
Subject: CN=5622cb15d59c982f424badd050dd749d5c4aef19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:5b:76:36:5b:92:13:f7:21:66:0d:e6:5d:
60:c2:ea:6a:ea:8d:0f:fd:28:38:a7:59:4f:16:3f:
f6:55:f0:d9:1e:9d:e8:c4:7e:5d:d1:fb:ff:ab:58:
6a:e5:77:f1:11:12:0c:de:de:ae:c2:76:28:3c:e7:
e0:fa:d4:84:52:f4:ac:dc:0d:e4:e8:9e:ef:cf:3b:
79:5e:f5:5f:86:cf:65:72:07:ed:dc:6b:dd:f3:4f:
4e:8d:d8:29:2e:95:af:58:c6:e8:27:5e:7a:7f:08:
0b:37:86:12:60:49:69:06:fb:b0:54:ea:4d:4a:cc:
b5:8d:bc:ff:25:8e:d6:31:05:66:b2:5e:d8:eb:bc:
2e:ce:19:91:43:87:f3:d8:2a:82:64:fb:50:01:6c:
15:73:f4:4a:43:3a:86:0f:02:6b:a1:46:6d:52:a7:
b0:9e:b6:d2:5d:ae:0a:3d:70:ec:e1:65:72:cc:f2:
2a:64:59:e9:00:a0:00:9d:37:56:6e:26:e9:ab:69:
06:32:9f:73:9c:85:4b:d2:ed:21:f5:df:53:39:17:
96:fd:6b:ed:29:a1:b1:3d:98:b1:25:d2:06:c1:11:
7d:0a:0f:0f:5c:b6:29:47:c7:00:3e:b9:e5:ba:f1:
87:8a:4c:82:9e:bb:f3:c4:59:26:3c:ad:e9:4d:c4:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:22:CB:15:D5:9C:98:2F:42:4B:AD:D0:50:DD:74:9D:5C:4A:EF:19
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:40:ed:80:0d:04:62:fc:85:c6:d2:0d:fa:5c:39:ff:85:16:
f0:cc:1c:49:75:15:3e:85:34:7f:7a:3f:51:dd:18:23:4e:7e:
36:b2:64:73:0d:52:35:04:db:0a:72:7f:62:81:ec:10:5b:30:
19:8d:f3:fb:b6:6d:be:51:23:52:2c:e5:76:fd:30:4a:95:78:
21:9c:84:9f:fc:9a:18:be:46:7e:9d:1e:7b:ad:5b:4d:d9:76:
6d:b2:2e:a3:45:1a:51:9d:3b:06:04:84:2a:66:96:7f:0a:b5:
a6:be:14:e8:46:8b:77:d8:ca:d8:fc:13:af:f3:87:8b:7b:53:
af:eb:81:b6:86:06:3e:ea:c3:c0:0c:1f:a7:2d:30:fb:6a:92:
f5:ee:f3:13:45:59:8e:22:f1:0e:bc:1b:5e:d2:65:4f:be:f8:
ad:24:5f:2e:84:48:4b:c8:3c:36:93:cc:19:f9:cb:d5:35:73:
81:65:38:56:ee:f6:52:48:4b:93:c5:23:29:f3:2c:4e:58:fe:
d0:dc:1b:38:34:39:cb:5e:36:d3:02:d9:dd:a5:e8:a0:f2:14:
55:36:b0:d7:62:3c:71:f6:c1:c1:ee:c7:b0:a8:e3:7e:b8:56:
ce:9a:83:f8:96:15:70:f1:62:4b:19:01:e8:0f:23:38:83:60:
c0:4f:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:04:24 2026 by rpki-client