
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier: Hxv3RqgzrYeIYyJVFJ6t0uK6F9daskAGtRQYoSNB/GQ=
Subject key identifier: C5:FA:A8:B4:69:12:45:21:A6:DA:17:98:18:63:34:97:8D:33:42:54
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial: 019FAA1A90215095EEA363574A080F05A87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number: 04FC
Signing time: Tue 28 Jul 2026 19:01:35 +0000
Manifest this update: Tue 28 Jul 2026 19:01:35 +0000
Manifest next update: Wed 29 Jul 2026 19:01:35 +0000
Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: Xp8yNpGYAvUxBtq8s4VjjIfftqlHlY9ywgoF23BrkIY=)
2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:90:21:50:95:ee:a3:63:57:4a:08:0f:05:a8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
Validity
Not Before: Jul 28 19:01:35 2026 GMT
Not After : Jul 29 19:01:35 2026 GMT
Subject: CN=c5faa8b469124521a6da1798186334978d334254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:74:f4:58:9c:02:51:7f:54:b9:24:d7:80:
27:4c:36:fb:95:1a:b3:ac:b9:dd:9a:9c:53:f6:e4:
45:10:2f:9c:14:13:c7:be:b6:31:04:62:d9:db:81:
d8:80:0a:40:76:68:54:36:6d:b6:8a:35:cc:20:e7:
c1:12:1f:a5:68:75:fc:dd:c2:b9:74:fd:6b:29:32:
35:cc:b6:af:a2:5d:db:1a:18:23:f5:df:d2:af:1d:
a4:c4:4d:14:2a:20:4c:0a:7f:0a:94:3a:e4:e3:9b:
3e:15:d4:a0:96:01:f3:ec:ba:76:b1:20:27:17:ce:
27:b4:94:ba:a1:c0:eb:ed:58:3f:3f:2f:26:21:20:
12:89:49:d4:ab:16:10:dd:af:df:a2:45:0a:c8:6c:
0f:87:16:fe:5c:0e:b5:94:5c:e1:89:35:ad:2a:37:
80:38:03:cb:f8:b2:23:e9:6b:44:1c:bb:66:13:21:
fb:56:bb:57:63:da:05:44:5e:b4:63:56:26:1e:0f:
26:e9:e5:ad:db:0a:d4:94:b7:4c:b4:d4:00:c9:74:
d1:ab:bf:33:3e:7c:3e:c8:f0:46:32:0e:84:8a:28:
27:21:aa:8e:b9:54:3a:8d:2a:15:17:66:b1:27:9e:
43:b8:b9:b1:e7:ba:a8:2d:7a:0e:ff:8d:34:ad:97:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FA:A8:B4:69:12:45:21:A6:DA:17:98:18:63:34:97:8D:33:42:54
X509v3 Authority Key Identifier:
keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f8:fa:b0:12:ae:74:fb:99:29:94:02:bd:92:3e:52:b8:2d:
f3:52:9d:7a:4c:51:0d:e9:22:8e:73:d3:3b:31:e6:5b:cc:11:
14:92:3f:4a:03:8a:6d:de:cc:91:13:7f:61:24:37:bf:70:cf:
3e:f0:9d:9f:d3:22:f9:eb:ea:5b:99:bd:38:02:51:57:0f:2a:
4e:7a:69:78:04:95:3a:07:d5:da:24:b8:65:53:d9:70:9f:24:
0c:02:9c:b9:4a:70:f5:ef:aa:3b:69:5c:24:a7:2b:0f:83:83:
13:80:07:21:b3:ec:cf:66:55:73:9b:ea:98:d6:8a:74:b1:70:
8a:91:b1:bd:f1:df:4c:f3:e9:ef:c1:3e:87:93:af:67:b9:de:
56:51:22:04:35:87:5a:6d:a2:84:d1:57:cd:2f:83:23:62:6f:
b7:eb:45:b6:83:12:a7:dc:2f:60:2f:c3:8c:b0:12:ca:ce:40:
94:28:14:4a:24:c8:54:22:2c:fd:8b:b2:bd:45:a2:10:63:96:
80:e8:9f:56:ae:ab:f7:f2:e1:df:c1:eb:6e:68:c2:f4:ad:0f:
0f:1d:fa:ad:c6:a1:8c:3d:29:45:07:23:a0:b4:9b:b4:2c:2b:
32:3f:2e:a6:72:8e:0a:34:f8:29:3f:d1:cf:49:ed:aa:5e:6a:
e2:7a:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:49:31 2026 by rpki-client