Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: p+Nk9vPWYsqDS8Rv+wzyBjawsqccKZ+/Pzp7aCkXNsc=
Subject key identifier: 2C:F6:39:A3:CC:C3:FF:3D:96:32:64:55:D2:2B:35:2C:B3:E2:56:F1
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 019FAAF535751160371B26C7EABFA0FFF20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 17C4
Signing time: Tue 28 Jul 2026 23:00:24 +0000
Manifest this update: Tue 28 Jul 2026 23:00:24 +0000
Manifest next update: Wed 29 Jul 2026 23:00:24 +0000
Files and hashes: 1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: v7TW0cX4nkOtxiTDIOFsVNJkkeIMYcaROv9wzOuRPU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:35:75:11:60:37:1b:26:c7:ea:bf:a0:ff:f2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Jul 28 23:00:24 2026 GMT
Not After : Jul 29 23:00:24 2026 GMT
Subject: CN=2cf639a3ccc3ff3d96326455d22b352cb3e256f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:cf:32:cf:08:bf:cd:a7:d7:cb:5c:9e:fd:
5d:58:d6:25:46:85:a9:93:88:db:d6:a6:55:a6:f3:
41:c0:8e:b2:54:9a:9e:d6:e3:61:67:ce:cf:66:05:
9e:ab:9c:bd:b5:d0:c2:9f:d9:30:ff:bd:76:de:0e:
e8:0a:0f:ca:50:6a:50:69:df:b6:b9:a5:91:30:e8:
51:46:eb:9f:71:a9:63:0f:4e:6c:04:25:23:6f:9f:
cb:6c:d8:9a:76:35:be:dd:0f:63:62:12:fc:78:61:
03:c2:56:f6:47:c1:0f:f9:7e:23:89:88:6c:4a:9a:
0f:12:07:97:20:ea:31:85:57:71:1e:77:ab:82:50:
0f:0f:b9:eb:7d:52:6c:17:02:74:9b:e3:0a:bf:c1:
f3:60:40:e6:11:37:7f:77:34:cd:18:17:df:dd:dd:
7b:b7:f4:27:26:dd:e2:9a:03:cd:31:b1:50:aa:92:
6e:68:54:e7:13:37:56:d8:85:3c:2f:5d:b7:af:c9:
74:57:e1:0b:d7:f0:81:38:91:c7:61:78:f3:0e:93:
4f:ce:6f:33:7c:55:50:25:55:33:15:90:fe:23:46:
ee:96:37:57:8b:4b:02:0c:6c:55:84:e3:79:4a:5a:
99:85:35:24:82:1e:f8:ca:b7:e3:4b:26:e7:5e:9c:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:39:A3:CC:C3:FF:3D:96:32:64:55:D2:2B:35:2C:B3:E2:56:F1
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fc:8c:63:52:d3:9a:17:0b:5a:2a:d8:96:10:e9:83:70:05:
83:9a:e7:86:60:30:ab:ee:16:d3:9f:0d:58:be:ca:32:66:e8:
ca:55:d4:01:1d:ba:4e:94:8b:c1:cf:f3:3a:da:82:fd:d6:c9:
df:b1:f5:a0:ab:f7:db:fa:12:50:f7:fe:b2:91:fe:23:12:de:
bb:b8:82:47:f8:59:b6:8a:e1:f7:f4:95:7b:56:5b:03:43:bc:
83:33:e2:9c:6d:8c:0f:c2:db:95:c2:08:be:fc:40:c0:77:e6:
c8:2b:19:9d:c6:b2:15:0c:e6:fd:2a:54:8a:22:e6:fb:3c:8b:
26:04:19:2d:eb:1b:a5:f2:09:74:35:fe:af:1f:b6:7e:cf:33:
8b:96:8b:d5:8f:82:c3:a3:22:10:20:f1:1f:83:8c:24:db:64:
8a:a5:fa:44:fa:b6:09:37:09:fc:b7:0c:66:fa:07:24:b3:67:
0a:ce:97:fa:17:97:88:fc:3e:56:7d:1d:cb:29:2b:cd:87:2e:
dd:88:84:b6:8d:fb:e9:4d:1c:37:4e:43:42:74:cb:df:6b:35:
ed:ff:7a:fa:17:75:11:26:63:2d:f9:bd:7b:96:a4:79:9a:ca:
6c:7c:a6:e5:77:a0:e1:a3:dd:ba:d6:4b:7f:c2:19:be:3f:ab:
0c:f6:de:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:32:57 2026 by rpki-client