Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: r1IZ8fmTnvhA3fTtuZt9+GDBfIEg3OhEqODYlN5Dpw8=
Subject key identifier: E7:DB:6A:C9:05:19:AA:55:EE:30:0D:C3:77:EB:4B:66:6F:7C:3A:3D
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019F8FEBE4F8AF5B59605C879B1400CC1B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 11BB
Signing time: Thu 23 Jul 2026 17:00:29 +0000
Manifest this update: Thu 23 Jul 2026 17:00:29 +0000
Manifest next update: Fri 24 Jul 2026 17:00:29 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: KhlYxoxM/1pih/R1/dwEG1PYwFiFbQdTm0GEW8sLWFg=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e4:f8:af:5b:59:60:5c:87:9b:14:00:cc:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Jul 23 17:00:29 2026 GMT
Not After : Jul 24 17:00:29 2026 GMT
Subject: CN=e7db6ac90519aa55ee300dc377eb4b666f7c3a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:76:c9:2d:ce:6c:a2:1d:cf:85:32:8e:a8:
10:f1:13:bb:4f:bd:bc:97:d0:f8:07:30:8f:f3:7b:
4c:d2:6d:54:ec:a7:ae:e5:ee:8d:4c:6b:04:f9:64:
8e:2c:4d:75:1f:56:bc:0f:e0:28:9f:7e:c6:b7:1e:
3f:a9:38:b1:4b:f0:2d:2a:9a:8f:bf:0f:d4:54:a1:
c9:49:e9:dd:02:3e:03:41:5c:7e:7e:a6:0f:22:8d:
97:d3:03:fa:57:79:9b:b1:da:1c:f5:61:66:bc:91:
cf:de:7d:31:59:41:ae:f9:db:97:5f:11:e3:65:60:
dc:1a:b0:b1:0c:b3:04:f6:36:d8:70:be:1f:49:b9:
28:35:63:25:d3:56:70:0f:ac:8b:d9:65:ac:17:73:
c7:75:58:51:da:39:da:43:16:55:d1:99:91:d7:52:
e3:f4:8b:2a:be:13:85:28:63:9e:80:d9:c5:07:70:
42:7c:43:0f:35:ae:bf:05:99:f4:7d:91:3d:71:e5:
f7:59:dc:0d:1f:45:4a:1d:70:f8:2b:a9:0a:43:aa:
0e:d4:ba:a9:f2:74:32:1e:d7:dc:93:ed:48:1e:e8:
0d:4b:fb:72:e0:4f:f3:44:99:ec:e7:63:7e:98:26:
00:a6:23:b0:db:3a:09:f8:c1:94:e6:09:61:f6:32:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DB:6A:C9:05:19:AA:55:EE:30:0D:C3:77:EB:4B:66:6F:7C:3A:3D
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b3:49:6d:69:8d:c7:09:ab:d3:59:4d:79:4a:65:93:6d:b9:
8f:78:bf:77:a0:a7:07:f7:bb:d8:80:44:e8:34:61:37:06:49:
a7:b8:f8:40:b5:90:6f:7e:ad:86:fa:f1:21:cf:32:62:55:0e:
f7:58:f9:51:94:5b:61:54:8d:c0:e1:a9:44:48:77:79:6e:8c:
89:e5:bf:04:dd:cf:cf:e9:71:b9:80:a6:cc:1a:32:aa:26:b0:
ae:a7:e8:ad:ff:84:f5:38:89:cf:fc:b1:a3:f7:3a:4c:43:3f:
e7:f1:1f:ff:99:b1:1e:a2:b7:f1:24:36:5b:c3:5d:0b:b3:d8:
d0:67:9f:40:32:53:4b:95:f9:56:90:04:d8:36:92:7c:b1:18:
49:56:db:a8:09:47:00:14:67:6d:df:c4:dd:fa:b7:7b:7f:96:
ce:1a:5b:9f:f6:14:03:62:a9:09:00:0c:83:6d:02:91:a9:d9:
ab:17:76:46:30:51:cb:51:c2:ba:4e:c6:14:ee:a7:ef:5f:e1:
ad:4f:68:a7:3c:80:5b:71:67:d8:3e:0f:be:57:65:31:74:68:
ce:bf:93:8c:bd:e1:78:1d:d4:ff:49:09:11:c5:3c:d2:77:aa:
2f:a8:b3:2c:41:17:02:24:f1:e7:59:59:7b:a4:7e:c7:c1:47:
86:8f:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:46 2026 by rpki-client