Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: wcE5efHjg0RjAzMqxcST9PK0Es2jfDJMwfiKlu+TrcI=
Subject key identifier: 8B:D3:6B:0F:36:41:16:2A:F1:1D:54:18:3C:5B:E2:73:4C:14:C4:91
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 019FAB9A5988C2CDA7CEA718167F7690A980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 1966
Signing time: Wed 29 Jul 2026 02:00:47 +0000
Manifest this update: Wed 29 Jul 2026 02:00:47 +0000
Manifest next update: Thu 30 Jul 2026 02:00:47 +0000
Files and hashes: 1: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: Az/+/fZcdS1oDo7aOHLsbmLa6NnyQsjlnokAntRIvuA=)
2: uuyf9SL1IzQsxC4GwsHv2Aqvi6I.roa (hash: bWBF8Lzkc1fXhVOcL+v1lM3xBjFclLxIjyc/HWhj0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:59:88:c2:cd:a7:ce:a7:18:16:7f:76:90:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Jul 29 02:00:47 2026 GMT
Not After : Jul 30 02:00:47 2026 GMT
Subject: CN=8bd36b0f3641162af11d54183c5be2734c14c491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:b5:8e:dd:27:b1:5e:09:e6:a9:e6:d5:83:
1d:8a:21:56:93:68:e4:6a:4c:03:e8:d7:0c:ba:5e:
5b:1d:bc:e7:52:97:68:7a:60:87:a6:5a:93:89:af:
0a:5f:1f:21:c3:5e:94:3c:8e:d0:7a:7c:73:5d:b7:
92:25:76:53:4a:66:81:4c:a8:6f:74:14:a4:b5:6f:
da:9a:72:6f:ec:a1:f3:39:f7:e0:db:f9:44:cc:45:
a9:ea:f8:97:09:49:b2:34:1a:5d:01:4f:6c:e5:09:
0e:98:1c:80:f0:e3:2f:79:8b:a8:e3:16:42:7d:b1:
91:8b:6c:41:85:af:81:01:e0:91:a6:41:76:8f:c4:
38:4f:27:ab:dc:a4:6a:80:c9:ab:cf:1d:d7:db:4a:
b9:c8:f2:e5:70:04:44:92:f5:fe:e6:9b:4d:06:38:
e4:f7:44:f4:14:71:83:f1:d0:28:1d:ca:59:15:26:
df:96:e6:17:83:a2:e4:52:17:a5:90:3e:c3:09:7d:
b8:1b:c3:1e:8c:8d:6d:8d:ba:e5:77:10:cb:f3:a3:
30:fd:48:77:84:37:8b:f3:5c:0e:31:3b:ea:85:e1:
21:6a:66:3f:61:ed:19:6d:e6:46:ee:e4:51:3d:cf:
80:9b:83:f6:c3:d7:2d:c7:4a:23:d2:37:0a:07:ac:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:6B:0F:36:41:16:2A:F1:1D:54:18:3C:5B:E2:73:4C:14:C4:91
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:48:0e:29:aa:ad:b7:bb:77:ad:28:b8:b3:2e:3c:71:44:09:
2f:82:24:e2:44:6f:92:16:6f:0e:3f:64:40:77:52:b8:33:25:
6b:e9:56:21:d6:56:8f:4c:63:62:ba:23:eb:1a:fe:b5:32:4b:
48:94:89:59:67:c7:d7:33:ad:43:a2:9a:09:89:4e:d4:03:e4:
62:d7:0d:4b:c6:88:ec:fd:69:64:ed:0a:e1:e3:81:7f:d2:6b:
57:88:c9:d1:1e:f8:6c:e1:95:d6:2b:fa:24:ee:a2:3f:23:b1:
c2:c2:2f:d2:72:26:18:c6:7a:7d:d8:db:4a:43:9c:04:8e:92:
06:08:e8:90:1a:14:ea:52:e3:7a:0e:7c:ad:49:98:ae:63:b6:
12:ec:64:c5:96:6f:99:9d:fd:fd:ed:d9:10:ab:fb:3c:47:ff:
5c:c3:78:11:b2:f1:19:40:0b:52:d6:da:66:2a:43:3c:ad:c1:
e4:89:98:72:fd:f0:db:5b:43:eb:77:4a:89:a6:a2:ab:0b:b8:
a7:c0:bb:26:56:40:6f:a8:23:ee:c5:2e:1b:74:a9:20:00:d1:
90:ce:c2:0d:0e:64:f1:e4:44:4b:dc:8d:1c:77:57:b4:43:ff:
37:ae:4e:f2:d8:2d:c6:85:06:2a:26:b6:f6:fe:9c:33:ca:ff:
9c:da:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:23 2026 by rpki-client