Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
File: 1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft (raw, json)
Hash identifier: wvCt1E3TGYuYFqCZ4MqFGmZIxYQ40jtS2Kll2Z4riJk=
Subject key identifier: 5A:1D:87:85:90:19:8B:A2:19:EA:8F:7F:84:A2:7F:D7:8B:CF:F1:5F
Authority key identifier: FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
Certificate issuer: /CN=faa401b6e9015d573a96dea26bf1974150a3911e
Certificate serial: 019F8F7E718E5195B48DB0F720A3B940E760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:56 +0000
Manifest this update: Thu 23 Jul 2026 15:00:56 +0000
Manifest next update: Fri 24 Jul 2026 15:00:56 +0000
Files and hashes: 1: 1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl (hash: KER84n4iGBcFJjpOvNdMeX8gsjm4NwEa4DZdIroqOmA=)
2: EPoE4gsTkP933V3-pgLEo8zsy7w.roa (hash: fekIOkyV2Bo+kFHWE4bvjR3pCE5ezbt15oCa5WLPf5M=)
3: xRZqLOAtBFzziLEfVGzNfn0Lo4c.roa (hash: 2acriZe84g+y2lzcl3s0xdnJ499T9fQJ6oaM3jWJRKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:71:8e:51:95:b4:8d:b0:f7:20:a3:b9:40:e7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa401b6e9015d573a96dea26bf1974150a3911e
Validity
Not Before: Jul 23 15:00:56 2026 GMT
Not After : Jul 24 15:00:56 2026 GMT
Subject: CN=5a1d878590198ba219ea8f7f84a27fd78bcff15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:97:dc:3f:44:c7:ef:19:5e:6f:d3:01:7e:
cc:6c:4f:0d:24:2e:a9:c3:3c:4d:7a:b1:31:c6:a1:
d2:2c:06:1b:ca:c2:f7:09:eb:70:1b:26:ab:cb:b5:
cc:81:96:f0:5e:11:85:8e:53:da:2c:cf:e0:61:3a:
37:30:7e:fd:81:11:6a:0c:f9:88:51:1f:46:cf:54:
64:57:f0:c6:9b:f9:87:eb:1d:f7:48:b8:e5:9a:f7:
13:7c:af:19:1e:84:8b:7f:0e:18:8b:90:d3:2c:b5:
04:ef:02:c9:8d:07:2e:d7:55:65:aa:d9:5a:13:c8:
d8:61:b7:b1:c6:4d:16:7c:d8:9f:ce:2e:2f:b8:e3:
bc:bd:f5:93:3d:11:e6:9d:49:75:ca:ac:90:d3:d2:
5c:43:ae:b2:db:6a:0d:2c:e0:1b:ae:63:97:f1:88:
11:9c:20:df:4d:ba:75:71:9f:03:18:45:01:59:e5:
44:a0:f5:a7:43:0d:48:05:42:50:b8:97:c8:57:a5:
30:bc:f1:26:9c:87:a2:8b:b8:0c:e9:4e:8b:1e:c5:
0c:a5:0e:59:24:21:03:7f:e8:06:b1:49:f9:d6:10:
da:7d:4e:20:b4:4d:7f:1d:8e:02:36:90:4d:b5:63:
b4:bf:b3:8b:fd:c2:72:69:b1:3a:3f:47:3c:08:67:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:87:85:90:19:8B:A2:19:EA:8F:7F:84:A2:7F:D7:8B:CF:F1:5F
X509v3 Authority Key Identifier:
keyid:FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:02:46:b1:75:50:15:98:de:f5:dc:36:77:ce:67:22:db:a3:
11:12:ea:85:64:b6:94:0f:58:74:2a:e2:84:26:b5:a1:8c:31:
67:7e:21:63:7c:50:64:05:28:36:ed:cc:94:55:10:33:4c:2e:
1a:50:43:f1:b0:8a:85:5a:df:49:0d:2c:20:ad:63:b8:5c:41:
11:49:c4:e3:02:4b:76:1c:ad:dd:05:87:2a:98:be:b5:13:f4:
8d:10:35:a0:c6:ba:30:22:17:9e:2f:bd:bf:1e:f1:fd:3f:39:
3b:47:cc:2e:78:3b:51:69:38:03:fd:b5:69:31:d9:30:ff:8f:
9c:11:55:f2:6e:3b:3e:69:6b:d5:79:9f:19:ad:32:54:a6:eb:
8f:40:72:5b:1a:a0:52:b8:25:2e:bf:4f:e8:36:06:79:24:e2:
21:79:34:63:26:6a:49:36:55:f1:d7:67:86:2c:f0:49:fc:88:
58:a9:a0:87:da:89:5d:12:d9:ba:62:6d:16:6e:e2:82:d0:5a:
65:b0:55:2c:41:ea:19:42:b2:5e:c8:04:c0:5d:46:f1:2d:d5:
26:67:82:88:09:16:52:21:22:c2:20:76:e7:00:9a:24:a3:d1:
58:4f:38:ff:30:f5:28:fc:db:62:24:a9:4b:42:cc:07:1c:1d:
65:4f:07:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:14 2026 by rpki-client