Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: uhqNCCzc/vOVvQczEnXVFvIBp2wIfMLhpNIBVvjyJhc=
Subject key identifier: C4:2A:BF:C7:98:40:16:DC:1A:EF:9B:52:5D:2E:83:59:0E:62:D3:E7
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019FAD52028D6D052D9C272650B953F01A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 1504
Signing time: Wed 29 Jul 2026 10:01:00 +0000
Manifest this update: Wed 29 Jul 2026 10:01:00 +0000
Manifest next update: Thu 30 Jul 2026 10:01:00 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: d2cmOQ0I46aXH9SLx4x/iwg2M8U+PXfwCmpCKU4v4FQ=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:02:8d:6d:05:2d:9c:27:26:50:b9:53:f0:1a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jul 29 10:01:00 2026 GMT
Not After : Jul 30 10:01:00 2026 GMT
Subject: CN=c42abfc7984016dc1aef9b525d2e83590e62d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:50:24:6e:6e:ba:53:93:08:c7:3f:7d:1b:
5d:82:d4:3a:f0:76:78:c2:d9:1e:a1:47:bc:3e:99:
8a:84:1e:b8:ff:14:b4:cd:9a:3b:42:05:2b:ef:a2:
78:7e:97:71:13:34:ca:39:b0:84:0d:3f:52:a0:6c:
ee:3d:f4:a7:83:2d:ba:54:63:c1:b3:c4:dd:79:fc:
58:93:4a:65:93:10:7b:ab:49:05:dd:ab:74:8c:25:
ca:eb:b7:ed:be:ad:5c:c4:11:63:08:6f:b9:56:70:
2b:f9:a2:1c:b4:45:61:4f:2e:a4:ba:19:e9:cf:e4:
6e:01:56:3d:9b:50:1e:cb:e4:76:03:4c:03:c2:61:
ee:82:01:a0:04:01:dc:eb:ea:bb:06:60:18:77:b6:
82:3f:d7:f9:45:f3:9e:2a:58:21:a6:cc:8a:3a:0c:
db:e8:9a:65:dc:58:d2:3c:23:f5:e4:06:8e:56:ec:
ad:44:4b:8c:28:56:c7:d1:10:4e:78:06:a1:78:bc:
42:a1:9d:24:b8:d9:d8:45:fc:78:dc:6b:78:23:3c:
42:e9:64:bc:6d:6e:1b:72:f0:35:f0:fd:45:90:42:
79:84:38:7d:a7:53:24:c9:29:d7:31:a5:83:6c:94:
7a:43:99:49:bb:e6:0a:a9:f1:68:cb:55:bc:fe:a1:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2A:BF:C7:98:40:16:DC:1A:EF:9B:52:5D:2E:83:59:0E:62:D3:E7
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9a:6f:d2:09:fa:4f:86:37:74:72:ca:63:9e:1a:0e:88:db:
b7:93:90:d1:7a:5a:79:d2:64:33:a6:c7:ac:80:e3:cd:19:ea:
33:98:fc:9e:96:55:45:f6:22:9c:87:83:4a:67:1a:59:db:99:
0e:fd:dd:51:de:40:f9:1e:ef:7d:9a:5d:dd:ee:8f:b5:5b:0b:
79:5d:05:c5:9c:d6:02:5e:28:f5:61:28:bc:c1:9f:9d:1f:03:
39:1e:6b:1f:bb:0e:3f:4b:3d:90:85:ed:59:62:11:e9:c8:25:
1e:8b:84:23:f4:d7:e6:d9:de:db:e5:e8:65:ac:35:e3:5a:68:
29:11:ac:c0:32:f6:7d:2c:c3:5e:dc:7a:5d:e3:09:3b:3f:63:
8a:b5:6b:93:64:70:a8:96:64:81:45:8a:48:05:2a:0f:98:d0:
f0:cc:87:ad:cb:18:ae:02:fe:ab:b8:ea:98:81:47:6a:05:1b:
54:3b:63:f8:38:20:0c:4b:27:86:08:7e:cb:f9:f8:97:d6:0a:
21:b2:b1:33:f3:06:a7:85:b2:95:cb:1f:84:9b:ba:27:e1:08:
01:74:69:3c:1b:3f:1a:0a:58:5f:93:35:8d:f9:20:41:eb:e2:
dc:2c:d5:ec:7e:ca:58:0c:8a:c2:21:fe:61:8d:cc:78:b8:04:
37:7c:72:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:27:41 2026 by rpki-client