Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: yN07hRNX0RwcE1o6TGxTYlUvDODfGlVVr0ULi5CzpCI=
Subject key identifier: B8:40:8D:13:EA:44:92:7F:12:2F:B5:27:7C:6D:7D:1A:98:1C:F7:1B
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 019F95B8073CD0185288BD93B32E3536EE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 0B75
Signing time: Fri 24 Jul 2026 20:01:33 +0000
Manifest this update: Fri 24 Jul 2026 20:01:33 +0000
Manifest next update: Sat 25 Jul 2026 20:01:33 +0000
Files and hashes: 1: HBiP4paC0MlxmT9TqUdXSCFpVek.roa (hash: 5/zIGY+6xQLGjEfA2psYBflaTdU36mi9/74Ob0mM/kg=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: +epKAjaqWG6O9+N5HZ2872XHuVxhftFJ0iyGwpB2k8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b8:07:3c:d0:18:52:88:bd:93:b3:2e:35:36:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Jul 24 20:01:33 2026 GMT
Not After : Jul 25 20:01:33 2026 GMT
Subject: CN=b8408d13ea44927f122fb5277c6d7d1a981cf71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:f4:cc:91:83:a5:ec:79:c2:00:4f:54:ae:
c1:cf:f8:e7:a5:0f:4b:e3:16:ce:35:b9:92:64:f0:
1f:0a:51:e2:18:5d:11:53:b3:3a:6d:c8:ff:76:6f:
b6:d7:69:bb:c6:61:b4:63:8b:09:7f:09:b2:07:b4:
81:bd:bd:52:96:9d:13:ce:ee:9f:01:8c:ec:37:cf:
81:ba:f8:6b:e3:35:32:6a:7c:0b:cb:11:64:78:88:
24:27:19:bd:c0:26:6f:2f:fc:4a:13:fb:e5:51:06:
18:ed:6f:0c:3b:f8:42:74:c2:7b:87:06:bf:b3:fc:
d5:e3:6a:58:a4:54:da:9d:ba:89:4b:5b:7a:32:aa:
39:c5:99:ef:d0:de:35:d9:cf:6b:50:2d:29:ee:ff:
88:df:66:ec:da:60:76:e8:8d:79:ab:18:de:96:c6:
cf:a5:4c:c7:15:5a:3d:73:86:c1:21:8a:d9:5d:3a:
00:82:6a:33:d5:51:fd:88:cc:67:a8:9e:cc:6c:d7:
90:9c:d7:50:68:c0:85:9a:46:29:27:08:cb:71:d1:
b5:a2:c3:53:6a:a9:96:74:00:d8:7b:7a:b2:39:fe:
25:21:70:71:33:a8:86:b3:8d:93:09:18:cc:b4:97:
84:ee:d5:0f:2e:17:87:6c:fa:8f:7b:0f:d7:15:18:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:8D:13:EA:44:92:7F:12:2F:B5:27:7C:6D:7D:1A:98:1C:F7:1B
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a4:39:ce:a2:3e:02:89:04:4e:30:62:09:ff:25:d6:ee:ec:
f5:6b:13:ca:b0:1b:92:c3:4d:5a:76:fc:e0:b7:46:f3:d9:5b:
c9:c6:28:af:11:66:ce:53:12:df:f0:45:1b:8e:ec:01:a9:f2:
91:42:3e:50:e8:5d:80:f2:74:bf:85:96:5b:b3:e2:99:70:49:
db:d1:1d:a0:47:fb:c0:8d:5c:1a:18:ca:a3:3b:af:f0:94:2d:
22:26:20:a4:c3:f9:e0:e7:43:1c:04:e2:56:96:4a:f8:83:c9:
db:76:e9:d4:0c:73:46:88:4a:74:a1:8a:f3:54:6a:61:d4:cd:
66:43:e0:26:2c:82:b7:6f:39:8d:e3:af:56:e4:40:8f:63:01:
99:02:55:61:c7:70:d6:33:1f:fe:60:62:8c:a0:76:fb:6f:fd:
20:4e:72:11:62:84:c5:d9:9d:26:e6:0c:ca:27:4c:f2:0c:e1:
74:25:dc:f5:38:91:d0:75:58:46:91:7b:01:96:6d:18:f1:1e:
fb:d6:9a:04:d1:ea:a4:b2:6b:b5:8e:9e:89:89:cf:f9:c0:b9:
16:06:b9:5e:11:23:fd:6e:28:f4:02:60:ba:33:6d:eb:e6:f3:
16:d3:1d:bf:7c:b2:5b:66:e2:f2:3f:b0:a5:bd:e9:00:a9:11:
97:ad:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:46 2026 by rpki-client