Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier: irUmDBY7BSW1Olq94ajAf0w6KNSExxrbXEulAcl0K98=
Subject key identifier: 34:8B:D4:EC:FF:0D:B8:E7:F2:6A:A0:12:7F:D1:17:FC:19:5C:FE:09
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial: 019F91DB144BA2928D8E651DA8E05BE2F0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 02:01:21 +0000
Manifest this update: Fri 24 Jul 2026 02:01:21 +0000
Manifest next update: Sat 25 Jul 2026 02:01:21 +0000
Files and hashes: 1: WJpebRSVLbQrdcjeB04EXCpIhRg.roa (hash: XP6zMi85BeS7CS6gjX07ym99dXpvUnSFZsiLXXS4Qvw=)
2: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: Tq/HODJAzrI8igqyu7C6X7xEXe8//uIpEOVf5tC5fp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:14:4b:a2:92:8d:8e:65:1d:a8:e0:5b:e2:f0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Validity
Not Before: Jul 24 02:01:21 2026 GMT
Not After : Jul 25 02:01:21 2026 GMT
Subject: CN=348bd4ecff0db8e7f26aa0127fd117fc195cfe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:fd:2c:44:44:c9:bb:76:76:7b:51:e7:af:
f4:b1:be:77:6c:27:5f:09:5d:7c:c6:63:d3:41:31:
cf:cf:6e:a6:90:9c:3a:b3:df:79:85:59:52:3b:63:
ba:bc:f4:01:f3:9c:ff:26:7f:8a:aa:2f:dc:1b:3b:
d5:19:52:35:d8:80:1b:62:44:93:23:c6:30:a9:53:
de:61:9d:e7:a4:9f:4e:b1:f7:8b:ab:be:86:35:b7:
8d:3f:2e:d6:4b:60:f5:f7:d0:27:c1:fb:a6:27:9b:
dc:6f:f6:ff:0b:83:f7:a1:7d:7d:ac:61:8d:f1:c3:
e6:86:b0:ea:d0:c3:f8:20:b8:f1:ea:fc:46:71:a6:
7f:4e:be:e5:ab:78:d2:05:37:87:6b:5b:b0:ad:6b:
13:03:41:06:99:98:bc:9d:b7:e0:ec:e1:e7:5f:2d:
86:b1:89:19:0d:cb:76:8b:df:fa:2f:9f:eb:0a:36:
a4:79:3f:6c:67:a2:45:ff:ed:a1:a5:bd:43:10:ed:
99:7d:93:10:43:bf:f3:6d:ef:1e:7a:43:be:5c:ec:
70:56:a0:16:11:d1:67:04:6f:54:ba:55:94:f2:50:
94:b6:ca:78:99:04:ff:3a:97:c1:49:23:99:d0:d2:
38:d1:41:64:db:0c:64:d4:cc:ce:48:cc:a9:65:03:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8B:D4:EC:FF:0D:B8:E7:F2:6A:A0:12:7F:D1:17:FC:19:5C:FE:09
X509v3 Authority Key Identifier:
keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:9b:d4:5c:00:45:3b:c7:2f:0f:50:22:7c:22:5d:e5:fb:
d6:b4:19:74:eb:f8:12:c0:17:33:95:de:a8:d0:ed:e6:c4:39:
60:87:f6:0d:df:a7:2f:a9:35:01:cf:d3:63:c6:64:91:5c:7a:
da:84:df:40:0a:7f:86:79:00:e6:f4:0a:d3:27:b0:b0:cc:20:
b5:8c:f4:4c:19:7c:a5:97:2a:40:d2:4d:76:85:96:39:fe:a2:
ae:c0:6b:d2:dc:d9:a7:af:ae:33:dd:7a:20:35:21:c2:dd:9f:
5d:5f:da:20:16:e0:f3:fd:81:03:b1:0a:a3:c5:f8:f0:34:5c:
e7:f1:cb:bc:0e:99:66:c5:82:d9:f3:8d:fe:9d:c8:0e:c4:a4:
4a:b4:56:42:dc:db:51:5d:93:0a:bf:44:b2:f2:ec:f2:08:a9:
0b:88:b2:bf:4b:0a:8a:54:6f:10:05:79:3f:91:75:85:b4:b3:
ab:2e:f4:40:40:e6:6f:14:3c:e3:6a:fe:37:b7:0c:13:0b:bd:
b0:8b:fb:9a:e5:31:cf:5a:be:bb:23:dc:f9:34:42:f4:1e:ee:
58:2b:50:eb:35:f3:76:b4:0a:ba:92:bb:b2:19:60:cd:d4:9e:
c2:68:c3:d2:f4:62:70:f4:15:6e:b0:ed:c0:e6:14:2a:a3:94:
a4:47:aa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:31 2026 by rpki-client