Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: zR96HwPDxp4v9h6v+YyzUFzP87gu4XdYc8iKEMvSeek=
Subject key identifier: 51:67:28:BE:67:16:B4:C6:49:82:91:49:FD:10:E1:CE:E7:40:D6:04
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019FAA50F1B4C8AEDE3D1A208F36E7AB10DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0B98
Signing time: Tue 28 Jul 2026 20:00:59 +0000
Manifest this update: Tue 28 Jul 2026 20:00:59 +0000
Manifest next update: Wed 29 Jul 2026 20:00:59 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: NcyhfTYS5DMTqBWCMzII4Lnb+L34YKItEgykdRKaAt0=)
2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:f1:b4:c8:ae:de:3d:1a:20:8f:36:e7:ab:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Jul 28 20:00:59 2026 GMT
Not After : Jul 29 20:00:59 2026 GMT
Subject: CN=516728be6716b4c649829149fd10e1cee740d604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:84:76:df:57:05:9b:7c:68:7c:d4:2b:46:
4b:85:df:44:4b:18:50:13:34:89:cd:ff:12:8b:6a:
36:45:45:85:0d:02:5e:18:04:10:86:46:f5:66:19:
e0:a4:9c:a1:d6:34:a0:5e:87:7f:d4:80:72:1f:8d:
3a:41:3a:5f:cf:e1:73:fa:a9:82:9e:55:32:5d:0b:
63:51:83:d4:d3:65:bc:fc:7c:73:d5:b1:9d:f9:1d:
5c:29:26:7c:5a:ef:53:7b:98:8b:ab:35:f5:ed:2f:
55:16:bd:5d:ae:10:08:bd:7b:af:c3:98:c3:13:d0:
3a:23:7b:71:89:35:d8:95:03:d8:bb:3b:ef:59:b5:
34:e1:5a:20:80:00:ff:1d:fc:b6:37:81:24:0a:2a:
0f:db:4c:83:9a:b9:30:d7:d2:48:0d:b1:cb:40:07:
85:58:ac:85:24:35:06:9d:cc:f6:fe:fd:cc:0a:26:
b4:be:ae:42:34:ba:1d:0d:e1:26:fe:a4:5d:17:aa:
a2:f6:97:b9:fd:29:bf:6c:92:14:96:f5:8e:ab:94:
2e:e9:01:c4:e2:7d:45:37:36:22:85:d6:6a:ff:f5:
fd:a3:a0:fa:55:eb:49:2c:af:05:ef:18:8e:01:a4:
79:03:59:9c:0c:1b:a2:51:10:5a:ec:29:2b:5a:87:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:28:BE:67:16:B4:C6:49:82:91:49:FD:10:E1:CE:E7:40:D6:04
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:09:e9:8d:ff:e9:3d:2f:7a:e6:a5:ff:d2:48:6c:2a:12:9a:
d9:be:d6:bc:23:c6:45:23:bf:d0:a2:29:ab:06:c0:30:23:58:
81:98:5d:f8:26:34:71:e2:2d:8c:48:25:9c:89:59:84:12:62:
15:3c:5a:28:e2:52:35:ec:a0:ff:00:6c:7c:e3:e6:1a:8e:cb:
e0:e6:e5:18:79:d8:6c:9a:a0:7e:c1:06:0f:54:09:ad:80:ff:
e9:8e:44:45:a9:24:11:06:e8:ac:98:2d:1a:e0:82:2d:7c:07:
35:02:47:2d:04:7c:dd:55:2e:84:b5:28:77:e8:52:a8:99:3f:
ad:0a:17:52:18:05:45:ec:44:56:d2:8c:11:77:e8:04:b9:21:
99:7c:a1:62:16:b0:19:60:7d:54:dd:52:b8:ad:6e:f9:3c:e5:
43:c2:bc:9c:6d:7b:25:f6:e9:32:63:8a:49:64:b1:32:cc:a8:
65:d2:a2:4f:34:d8:d1:df:ba:23:5d:43:33:2b:56:48:3f:99:
ae:03:36:07:0d:83:b7:a1:cb:c2:fc:a3:cb:da:33:f4:c1:be:
76:7c:65:1c:4d:df:f3:2c:45:6a:99:11:ac:ed:f0:88:9d:ae:
c9:6f:2e:46:78:cf:85:e0:d9:ab:92:93:ce:1e:b7:48:58:94:
7d:76:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:00:41 2026 by rpki-client