Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
File: 02QfqO0c_D2qI6qvjDp2_oftW6s.mft (raw, json)
Hash identifier: 84UCImCIbNzeguCzu/Vf6VlURXaB/tkNPGhGY3LyIac=
Subject key identifier: 4E:72:EC:B8:FF:30:0B:F9:A5:A2:E6:EB:2B:63:5E:1C:39:54:63:51
Authority key identifier: D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
Certificate issuer: /CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Certificate serial: 019FAD1B22334F24A3A3611AFB8A5B81E305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
Manifest number: 10A4
Signing time: Wed 29 Jul 2026 09:01:04 +0000
Manifest this update: Wed 29 Jul 2026 09:01:04 +0000
Manifest next update: Thu 30 Jul 2026 09:01:04 +0000
Files and hashes: 1: 02QfqO0c_D2qI6qvjDp2_oftW6s.crl (hash: iVuGIswiNNrl8Hds7O4WZRbkjnPeClC3Il/BjprjsuM=)
2: byVdI5-pp6NIJu3UrT-3MuGaeXY.roa (hash: l8DHq/5oUA3iWZHNp7UWg+LEjnOk5a1rdRkMplixMAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:22:33:4f:24:a3:a3:61:1a:fb:8a:5b:81:e3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Validity
Not Before: Jul 29 09:01:04 2026 GMT
Not After : Jul 30 09:01:04 2026 GMT
Subject: CN=4e72ecb8ff300bf9a5a2e6eb2b635e1c39546351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:35:ea:66:f5:bc:b6:59:b9:fd:34:68:e4:
7a:44:df:8c:7f:fb:06:02:00:33:6d:7f:18:ab:6c:
8f:a0:71:8f:d3:da:e6:bd:78:df:64:3a:cc:c4:9d:
99:5a:72:f2:ec:bb:b5:f8:0e:d7:8e:2b:0e:9a:98:
1b:c9:70:64:ad:49:c7:26:db:85:38:01:7d:3e:03:
bc:8b:f8:51:89:2e:1b:37:62:80:44:c2:8c:3a:36:
da:c2:24:2b:98:70:91:32:13:23:a7:38:14:f1:f4:
32:c2:0f:58:b0:cd:75:4e:68:fa:ca:76:d1:6f:a3:
19:1f:3e:15:aa:14:06:6a:c5:62:ec:ed:5e:41:3d:
bb:29:1f:5c:9d:a2:a2:14:34:fb:fc:8c:32:b3:08:
ab:a4:01:05:b3:19:8f:a3:32:23:39:72:fd:39:91:
39:93:d1:29:48:90:52:3d:61:45:22:d1:25:94:33:
b7:20:b3:b5:3e:fb:33:57:15:d2:e7:e4:40:52:ae:
0c:7b:25:71:cf:b0:86:38:35:e4:2d:f0:9f:4e:51:
72:1f:76:26:a7:7e:d4:6f:91:cf:ef:b9:4b:ad:53:
17:0b:60:e6:4c:a8:16:0e:ba:82:33:c2:b6:6c:77:
6c:31:c9:16:93:42:b5:67:1c:0a:c2:38:70:a0:da:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:EC:B8:FF:30:0B:F9:A5:A2:E6:EB:2B:63:5E:1C:39:54:63:51
X509v3 Authority Key Identifier:
keyid:D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d5:fe:0d:70:f5:98:b8:e5:2d:80:fd:45:d8:8a:5d:0a:37:
9b:b4:18:23:c2:b0:4b:51:b5:65:f3:6f:eb:dd:9a:36:ab:9a:
ae:e9:ee:11:6b:69:81:75:a3:24:ba:f6:f7:b0:40:4f:17:6d:
db:a2:ee:90:30:77:62:51:7c:f6:ac:e3:57:76:aa:26:7c:91:
ab:05:21:d3:65:a8:40:44:ef:dc:2e:50:16:91:fe:b4:95:2f:
f2:e8:24:aa:86:5b:47:a8:a9:14:f9:8d:b1:d8:a5:10:91:40:
81:8b:51:98:b6:fe:bc:e1:23:a0:08:44:b9:90:b6:98:20:b5:
79:8a:37:17:be:92:be:8e:40:0b:25:c8:c0:27:8c:44:ab:89:
50:bf:f6:a5:a3:5c:fb:bc:b1:7e:c2:e7:91:ee:b0:ab:7a:b8:
19:10:9e:e4:7f:20:ba:45:89:1c:db:89:63:66:06:d4:3e:2e:
87:06:32:7c:81:c2:a2:dd:7c:6b:4e:c4:30:c6:4d:0c:7a:ea:
4c:d5:39:3f:83:d5:94:a8:dc:7d:9c:e8:e5:b1:a2:b9:d1:16:
57:c8:1a:e5:eb:84:ef:b1:b7:46:e0:52:15:9c:b7:0a:74:28:
2d:b6:c0:31:50:15:80:e7:d6:e5:f1:91:3f:b4:63:80:c7:6b:
da:55:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:45 2026 by rpki-client