Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
File: Q94YPxSj8k-bhtBE-HcphoC1Ers.mft (raw, json)
Hash identifier: FMDXint2GRQpWnQk0RQ3/gRhy2id0LBc9/HcLExRrTM=
Subject key identifier: C0:5F:AE:E2:31:A9:E2:83:CC:3E:82:06:B8:29:31:7B:36:85:82:5D
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial: 019F8EA23188FC51549B42D1F968F9F44DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
Manifest number: 0830
Signing time: Thu 23 Jul 2026 11:00:21 +0000
Manifest this update: Thu 23 Jul 2026 11:00:21 +0000
Manifest next update: Fri 24 Jul 2026 11:00:21 +0000
Files and hashes: 1: Q94YPxSj8k-bhtBE-HcphoC1Ers.crl (hash: uDPJLB9yeWEgkxfcibmTvnco/Xn8NIqMseg4AcIETJM=)
2: hXKR5zejn3_Hil5KhYu5iVmfXJI.asa (hash: 3GFU2TS4xAC21rEQtTrjdeWRD+az4p5iCI2PhFizOP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:31:88:fc:51:54:9b:42:d1:f9:68:f9:f4:4d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
Validity
Not Before: Jul 23 11:00:21 2026 GMT
Not After : Jul 24 11:00:21 2026 GMT
Subject: CN=c05faee231a9e283cc3e8206b829317b3685825d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:aa:7a:e9:d0:bb:ec:b2:a8:5d:bc:2d:64:
f4:0b:3e:8a:28:ca:4a:38:03:7a:1a:fb:f5:c7:ab:
95:7c:b5:6f:2d:85:7e:a8:fa:91:eb:fb:6d:2e:f5:
59:c6:61:b2:d2:79:45:67:b6:eb:7a:e5:ff:87:d5:
5e:23:66:dd:a3:b9:fc:12:b8:d0:47:09:eb:e3:66:
c0:4c:76:4f:05:45:49:07:35:57:36:38:a7:39:b7:
18:e2:4d:6a:c3:86:17:88:cb:eb:cc:bd:64:e6:70:
2c:ae:61:14:bc:9d:52:f0:d1:ea:1c:63:8a:f8:77:
45:39:7d:dc:4e:b1:d9:2c:99:2b:75:3f:82:d4:95:
a2:ec:67:43:65:ca:a6:a6:9d:03:75:c8:e3:1a:fd:
4b:d0:9f:7e:97:12:7c:25:1d:3d:00:24:bd:bf:a6:
58:8d:63:0d:1d:0e:4f:5c:ad:49:7b:9f:b0:96:b7:
ea:e4:60:e7:85:83:b7:e8:54:d8:19:8e:0a:1f:e1:
cc:1c:e7:dc:8f:91:ca:ca:51:6a:a5:c8:62:3a:1f:
e0:69:6e:15:9a:20:0a:76:2f:d6:ed:26:41:5b:97:
33:07:a9:14:30:f0:a2:60:27:be:eb:6b:4a:a5:05:
ba:4f:6e:86:bd:99:3a:25:66:11:9a:15:8e:e8:0d:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5F:AE:E2:31:A9:E2:83:CC:3E:82:06:B8:29:31:7B:36:85:82:5D
X509v3 Authority Key Identifier:
keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:34:c6:3f:89:5c:e6:89:06:d6:f1:e0:28:6a:aa:9c:ab:d3:
ad:34:8a:93:f4:ac:4a:7c:d7:d6:d0:85:7c:1c:b5:a2:cf:1c:
cf:13:91:ea:b6:d6:f5:e7:3a:c4:a2:a7:8f:f9:5f:7a:6a:53:
ba:65:c5:89:c2:49:e5:fe:4d:2b:f8:22:07:07:ad:d8:6a:a8:
b6:82:7c:41:c5:a3:2e:63:a9:67:09:14:c2:12:ba:b5:f2:d6:
bb:18:8a:5a:81:22:06:aa:8c:d8:a6:b2:99:f4:ca:94:96:2c:
d7:25:d8:43:ba:eb:f4:07:5c:ee:8f:da:85:45:0a:c6:34:0c:
34:f3:50:ec:d6:64:5b:10:b6:0a:78:8c:7f:13:87:0b:d9:26:
0c:58:1a:72:ed:86:39:56:28:8b:88:5d:d4:aa:65:ed:30:4a:
d2:3c:31:b7:30:e8:f8:1f:a4:02:d0:70:92:00:f0:c9:40:7a:
e4:42:07:3b:7b:8a:85:b6:79:49:e8:7d:dc:34:32:47:72:cc:
d3:9f:46:6e:d0:21:80:c0:5f:c6:47:9c:7d:0d:a2:5f:34:23:
89:02:f3:41:ec:0e:fb:73:51:bc:de:d3:0c:38:a7:3f:a8:dc:
c0:b2:eb:c7:c5:35:39:0e:4a:a8:66:68:d2:e0:44:44:7a:48:
34:c0:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:34 2026 by rpki-client