Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: erOu/AKfYqCew81r2j2d+qdlzpce8QFEmDZy8ajYUV4=
Subject key identifier: FF:3D:11:36:CA:9D:21:1A:BE:8C:29:32:E5:38:18:E3:41:FF:FA:01
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 019FAC07F08542BA6B4D8F206433E70CCE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 0489
Signing time: Wed 29 Jul 2026 04:00:29 +0000
Manifest this update: Wed 29 Jul 2026 04:00:29 +0000
Manifest next update: Thu 30 Jul 2026 04:00:29 +0000
Files and hashes: 1: LzYZHC-rjJGbruYM23VscVWulpM.roa (hash: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: CqlJg1JadwQAbPe4lcpotNDamicMGV1/ijp19ZYLKJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:f0:85:42:ba:6b:4d:8f:20:64:33:e7:0c:ce:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Jul 29 04:00:29 2026 GMT
Not After : Jul 30 04:00:29 2026 GMT
Subject: CN=ff3d1136ca9d211abe8c2932e53818e341fffa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:ee:02:d3:08:24:2e:99:1c:6b:b0:82:5b:
78:94:cc:3b:ab:d9:e7:5d:5f:72:0c:9c:98:3a:a2:
f1:d1:96:43:18:6e:1d:a7:f7:d9:6a:0b:66:fd:74:
cb:ad:29:f4:c0:54:0b:3a:02:cd:e4:55:07:ed:c5:
a8:e0:77:0a:dd:70:19:a1:b3:7c:ea:b3:31:31:71:
c4:77:20:3e:67:ae:ba:e9:27:8d:dc:f8:6c:1b:e8:
19:92:a4:37:7e:43:ad:ee:99:0d:a7:70:01:20:19:
27:9b:00:5a:6a:e0:eb:2c:79:55:f5:10:88:47:02:
f1:1c:b2:b2:bc:11:de:82:8d:5d:56:4b:be:74:9c:
89:98:66:af:79:35:e2:6f:11:f9:50:e1:f2:d3:ed:
54:ae:73:3c:a5:f7:ff:cc:d0:cc:6d:38:0a:a2:a8:
bf:cc:e0:5d:8b:74:84:94:46:ba:a8:ba:fb:20:42:
e3:07:d0:ad:9e:03:4c:50:25:d2:c7:bc:e4:57:e3:
18:1e:0a:42:5d:f6:14:72:25:87:39:22:17:f0:36:
c0:7a:a4:66:46:47:b7:b2:b4:ca:0c:d2:4b:66:1c:
7c:1a:8f:2b:56:ca:82:f2:d3:27:d2:e5:a1:82:a4:
53:9f:21:17:15:57:ad:0f:db:b5:0b:c9:c5:0a:13:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:11:36:CA:9D:21:1A:BE:8C:29:32:E5:38:18:E3:41:FF:FA:01
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:29:79:4e:5f:84:78:62:93:8d:4b:94:d9:fd:6f:64:f7:80:
92:a6:8e:a1:e8:35:d3:ba:7d:e5:19:8a:c6:d7:72:65:75:62:
a4:df:2a:44:dc:80:7a:5d:3b:92:b7:67:11:dd:c4:a9:60:f8:
5f:7e:f2:b1:e7:8c:57:13:37:33:d8:2e:5b:29:81:4b:13:dd:
37:65:f1:f9:30:7a:65:bc:77:7f:e0:8a:bd:94:23:c1:fe:9f:
bf:53:82:2b:af:1c:7c:3d:5a:19:23:eb:70:f6:e8:01:b9:61:
5f:5b:66:22:53:82:b4:ec:16:f5:2a:de:50:41:45:29:12:36:
42:8c:b4:75:68:f8:1f:92:38:08:52:41:34:45:41:ce:15:39:
96:89:20:16:77:95:de:02:31:4c:f1:66:c2:a7:ca:a6:dc:28:
1d:12:93:12:c0:df:2e:30:42:68:0f:8d:c7:cd:15:49:b2:9d:
81:98:78:cf:47:5a:b8:71:d7:de:d2:ca:98:cf:a2:8c:1e:d5:
4c:0d:52:55:0b:b8:62:c3:2e:ef:98:a7:7a:d1:4d:02:c6:46:
4d:f0:37:d0:7a:22:4e:1a:12:f8:50:fe:fc:76:3c:07:59:52:
e1:a4:c9:dd:8f:83:0f:53:c8:9d:4f:ad:33:fc:e9:2d:fe:92:
9b:e1:46:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:56:43 2026 by rpki-client