Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier: hHYZRsekqmFp51Ymjx4ESGLEYsAyZbi5Bx6DaF9ws3w=
Subject key identifier: C9:5A:05:17:6B:14:A5:E6:5D:73:C0:9A:76:7C:65:35:75:9D:16:50
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 019FAA50759A5E4DD2BC7A3C5BBF333FFB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number: 0164
Signing time: Tue 28 Jul 2026 20:00:27 +0000
Manifest this update: Tue 28 Jul 2026 20:00:27 +0000
Manifest next update: Wed 29 Jul 2026 20:00:27 +0000
Files and hashes: 1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: ttcLB48VEgulX4MS8coVEbZtnDTFzJSCuHs/tLfxbT8=)
2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:75:9a:5e:4d:d2:bc:7a:3c:5b:bf:33:3f:fb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: Jul 28 20:00:27 2026 GMT
Not After : Jul 29 20:00:27 2026 GMT
Subject: CN=c95a05176b14a5e65d73c09a767c6535759d1650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:29:be:88:a7:09:41:6e:a5:24:9e:0d:00:
df:24:0a:40:05:79:b6:84:54:84:62:25:07:f3:33:
82:5c:27:f0:3d:98:2a:ad:d4:90:5e:6b:0b:33:29:
90:d9:eb:91:16:ec:64:f8:8f:4b:7d:dd:03:d0:c6:
52:96:fc:0c:bc:35:a3:9e:95:e0:d3:e6:71:8a:a1:
0d:6b:b4:c6:1e:cc:5b:bc:64:df:25:c8:4d:fb:04:
2b:6c:c3:57:da:39:b6:7e:c6:d9:03:94:a0:77:fe:
f2:3b:78:98:aa:a6:ba:57:ad:6b:a8:f1:27:12:f3:
8f:16:85:96:bd:2e:b8:77:d4:fd:89:c2:d8:db:54:
df:df:ec:90:91:a0:d4:2f:cd:3c:09:79:f3:8c:92:
43:67:f3:a8:8d:d5:24:2f:19:4f:95:a2:ce:b4:3d:
15:bd:f8:52:0f:67:56:9e:5e:5d:77:6b:e3:85:03:
ba:2b:84:3a:bd:e6:22:a2:47:ae:86:57:29:de:e9:
ac:dd:bc:b8:d4:05:80:32:16:72:9b:df:cd:ab:3f:
e7:a2:65:dd:20:f8:37:c6:3e:da:20:48:04:f5:38:
6c:7b:80:88:90:86:42:0a:52:71:57:b0:d3:49:0d:
b6:34:e0:23:e2:61:2c:36:1a:8b:22:b6:1e:70:9a:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5A:05:17:6B:14:A5:E6:5D:73:C0:9A:76:7C:65:35:75:9D:16:50
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4a:df:c5:c1:7c:18:1b:7d:73:07:b2:a5:d7:b3:35:73:10:
f1:02:b8:20:54:89:5e:b9:bd:36:02:62:2d:de:94:9c:2b:aa:
a3:54:74:26:33:20:db:55:6e:0d:aa:7e:b6:a2:53:c3:82:75:
59:42:2e:79:60:61:ae:24:c8:3c:7b:30:b1:1a:f2:63:cc:0c:
14:c7:17:51:e9:62:84:43:f4:3c:ed:5c:f7:6d:cd:5c:d1:26:
82:3b:87:50:95:f5:9e:43:fa:9f:07:5d:20:d3:75:6a:5d:14:
6a:f4:ff:b0:24:c0:0d:94:84:af:77:78:db:bd:8b:1f:cb:c2:
fd:8e:a8:9b:9e:0a:fb:b5:90:30:cf:bd:b6:ea:23:f4:b4:13:
fb:1e:25:41:77:08:4a:7f:ff:a0:8c:ec:b2:83:47:31:52:90:
d2:79:e9:18:4d:8c:fe:5c:a0:53:3b:b7:97:74:3f:bf:7e:ab:
b0:ea:93:30:82:8f:ce:5d:09:d2:39:e3:d2:96:9d:d0:e0:0b:
f7:53:21:43:90:45:ee:de:87:46:83:89:68:79:ef:81:7b:7d:
20:0b:b7:9e:f4:fb:2f:71:4f:9b:4a:28:c1:6d:76:8c:9c:fe:
21:0a:2a:88:f9:ae:cf:57:08:07:36:ef:d3:d8:f1:5f:56:79:
63:37:ac:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:40 2026 by rpki-client