Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: Xie3+MNThsJtvX+fdXowa5MeVXsJUGR/Q12/cA19fy0=
Subject key identifier: 35:35:7A:0D:F5:80:61:2A:70:BC:4A:8A:3A:F3:52:D8:31:77:42:5B
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 019FAB2CCB3F9568BED302076AAA559F8C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 00:01:07 +0000
Manifest this update: Wed 29 Jul 2026 00:01:07 +0000
Manifest next update: Thu 30 Jul 2026 00:01:07 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: U1mCv9DzLnCkB3DS8QfK2brwbZQBolQAJHT+s+BgSd8=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:cb:3f:95:68:be:d3:02:07:6a:aa:55:9f:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Jul 29 00:01:07 2026 GMT
Not After : Jul 30 00:01:07 2026 GMT
Subject: CN=35357a0df580612a70bc4a8a3af352d83177425b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:6a:48:df:61:3a:b3:7b:4f:84:f7:d0:33:
28:75:aa:d4:3e:69:6a:a0:bf:e1:32:e1:e3:ab:c4:
25:d0:22:c2:4c:7d:fb:c4:32:36:51:24:8e:7f:3e:
8a:eb:16:cb:b0:c2:9e:cf:e4:12:38:a7:48:3a:26:
72:7c:27:df:a3:f5:89:94:1c:12:df:bc:73:8b:6a:
63:5f:50:a3:bd:c9:65:2d:26:5c:f5:d3:5c:d7:40:
4e:4c:71:9b:37:d3:88:31:f4:32:01:97:55:3a:6e:
bf:46:a8:d7:03:08:4f:d7:c1:44:31:2d:f7:df:e6:
5e:c0:5e:61:63:30:e6:3e:27:a1:01:64:70:16:2b:
36:05:ef:1e:91:9d:88:f0:96:b3:32:c0:23:2f:fe:
d8:fa:40:18:33:fc:5d:5c:90:a5:22:1b:ae:58:5b:
26:80:49:8a:43:d7:a1:e2:a7:96:60:34:fe:f8:44:
d4:b1:76:c6:b8:c2:e4:6e:77:be:1c:ca:34:64:f9:
34:d3:56:73:64:36:b5:89:ca:f6:3a:af:9b:31:e4:
f7:f9:33:c0:39:89:6f:a8:84:29:21:05:79:77:da:
6d:d9:22:34:96:ff:4e:bb:a6:ea:75:4d:a3:9e:7d:
7e:5e:27:10:cd:73:77:6c:78:30:3e:80:19:ba:37:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:7A:0D:F5:80:61:2A:70:BC:4A:8A:3A:F3:52:D8:31:77:42:5B
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a3:cb:ed:06:7e:4d:40:02:1e:bf:6d:75:ac:1d:ea:35:45:
4f:f4:5f:9e:8c:c6:99:34:54:24:fa:36:c9:c8:08:f4:04:ad:
45:1f:97:bf:c6:ea:e1:33:5d:9b:0c:09:5c:a9:a1:6d:a6:54:
0d:08:32:83:8b:cd:05:34:8b:fa:37:17:95:d0:89:1c:2d:67:
82:a0:3d:69:7a:27:d3:f0:b9:10:f5:18:ad:f2:96:bd:46:05:
35:e1:a8:03:c5:16:71:65:d7:81:8b:80:39:06:9f:77:96:96:
1b:b1:8d:ab:21:de:a6:a5:44:49:df:7d:d1:b3:df:5e:6d:51:
2d:8a:ed:0e:53:67:16:ac:c9:7b:4d:04:ae:02:10:ad:73:64:
b0:8b:81:87:98:e1:d7:21:a4:40:6a:18:ba:83:13:94:ef:c2:
75:ef:2a:aa:f5:5c:50:19:f2:e9:06:a0:76:d1:01:5c:b2:2d:
fb:89:34:a6:33:87:32:ee:0c:4d:02:55:fd:71:b4:ba:3a:dc:
47:65:8b:63:a6:c1:ab:9a:18:45:a7:76:30:79:2b:41:5a:a1:
cf:2b:2c:cd:bc:46:54:c7:9d:f6:ae:da:a2:e0:2d:bd:06:9a:
d8:da:00:5b:77:e2:13:89:91:80:2a:06:e7:41:e2:2e:ec:0d:
ea:0d:14:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLMs/lWi+0wIHaqpVn4wAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMGI0NGU0OTI1NDllMWI3ZGE1MzJjODBjMzQ4ODUwYzVh
NDRlODAwHhcNMjYwNzI5MDAwMTA3WhcNMjYwNzMwMDAwMTA3WjAzMTEwLwYDVQQD
EygzNTM1N2EwZGY1ODA2MTJhNzBiYzRhOGEzYWYzNTJkODMxNzc0MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg1qSN9hOrN7T4T30DModarUPmlq
oL/hMuHjq8Ql0CLCTH37xDI2USSOfz6K6xbLsMKez+QSOKdIOiZyfCffo/WJlBwS
37xzi2pjX1CjvcllLSZc9dNc10BOTHGbN9OIMfQyAZdVOm6/RqjXAwhP18FEMS33
3+ZewF5hYzDmPiehAWRwFis2Be8ekZ2I8JazMsAjL/7Y+kAYM/xdXJClIhuuWFsm
gEmKQ9eh4qeWYDT++ETUsXbGuMLkbne+HMo0ZPk001ZzZDa1icr2Oq+bMeT3+TPA
OYlvqIQpIQV5d9pt2SI0lv9Ou6bqdU2jnn1+XicQzXN3bHgwPoAZujeM0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU1eg31gGEqcLxKijrzUtgxd0JbMB8GA1UdIwQY
MBaAFH0LROSSVJ4bfaUyyAw0iFDFpE6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDct
NzIwNGI4MTEyNTBmLzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDctNzIwNGI4MTEyNTBm
LzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaPL7QZ+
TUACHr9tdawd6jVFT/RfnozGmTRUJPo2ycgI9AStRR+Xv8bq4TNdmwwJXKmhbaZU
DQgyg4vNBTSL+jcXldCJHC1ngqA9aXon0/C5EPUYrfKWvUYFNeGoA8UWcWXXgYuA
OQafd5aWG7GNqyHepqVESd990bPfXm1RLYrtDlNnFqzJe00ErgIQrXNksIuBh5jh
1yGkQGoYuoMTlO/Cde8qqvVcUBny6QagdtEBXLIt+4k0pjOHMu4MTQJV/XG0ujrc
R2WLY6bBq5oYRad2MHkrQVqhzysszbxGVMed9q7aouAtvQaa2NoAW3fiE4mRgCoG
50HiLuwN6g0UFQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:51 2026 by rpki-client