Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: jUkQLw+/Gfex1fjdnT9+vCWHSvPEnX9VeX+45iTxQGs=
Subject key identifier: 4D:13:FC:A1:64:60:DB:AA:DA:58:9B:7B:65:84:CB:3E:6D:60:CB:EA
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019F8F47594970625A71A35E90E253E4EA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0C0E
Signing time: Thu 23 Jul 2026 14:00:45 +0000
Manifest this update: Thu 23 Jul 2026 14:00:45 +0000
Manifest next update: Fri 24 Jul 2026 14:00:45 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: VSicm7QMgtNgeKbmPXfzboI+sS6VefK1Mp109nhOgHM=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:59:49:70:62:5a:71:a3:5e:90:e2:53:e4:ea:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jul 23 14:00:45 2026 GMT
Not After : Jul 24 14:00:45 2026 GMT
Subject: CN=4d13fca16460dbaada589b7b6584cb3e6d60cbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:da:99:d7:c7:37:3b:86:6f:57:be:79:1c:
11:c7:b2:75:45:7d:64:2a:8d:fb:4a:3f:23:0d:98:
ea:70:58:13:9e:c1:67:ef:e3:0c:2e:6b:f9:8e:3a:
10:f1:4f:5a:f8:5c:a8:e4:c8:fa:41:d4:1e:63:39:
5e:06:b3:b0:58:34:2c:d0:f9:17:51:6e:1c:e0:ca:
5d:5c:d2:b0:72:f7:23:28:bd:bd:25:a7:0b:e2:70:
bf:43:0f:18:28:10:a8:cf:a2:ca:b9:35:46:13:19:
23:01:56:1b:76:a5:f8:20:4d:ac:61:50:2f:7a:9b:
68:6b:e8:cf:3d:76:86:48:5c:64:f4:35:6e:e2:2a:
4d:3e:bf:38:04:ce:a3:6d:0c:fa:0f:73:e3:2a:c1:
1b:ac:36:b4:f7:7c:f0:47:90:d6:ed:de:60:7d:9a:
7e:d7:96:fb:5d:30:ef:8e:99:43:a2:0f:f9:89:3b:
1f:76:94:c6:7c:db:3b:ae:bb:01:d7:36:ee:96:11:
cb:8e:2a:b1:49:46:b7:61:af:b9:8e:3c:e2:2a:ba:
4d:c8:a1:d3:70:61:8d:53:64:ad:90:eb:7b:9f:b6:
d2:82:c0:42:55:93:66:7b:f6:c7:56:d4:75:ee:f8:
cb:14:6f:3b:06:72:1f:15:c4:20:ba:0c:9c:36:23:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:FC:A1:64:60:DB:AA:DA:58:9B:7B:65:84:CB:3E:6D:60:CB:EA
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5d:5b:3c:24:13:c2:58:87:17:25:db:9a:4d:be:4c:e1:0a:
22:6e:98:55:6d:fa:c7:2b:10:55:6a:0e:87:fa:80:c7:bc:6b:
dd:cc:cb:78:1b:b0:f4:a8:ec:83:1d:a2:c4:97:95:ee:3a:6b:
4f:b9:8d:1a:58:87:aa:ef:ff:73:d8:9c:8b:ab:86:04:16:c7:
7e:70:76:e1:0c:dc:54:f4:7e:f3:04:e8:5d:35:a2:b3:96:07:
1e:1f:9d:14:85:c5:31:aa:7a:40:f2:7c:b5:e1:f2:c5:ba:45:
98:c6:4e:2b:c3:78:ae:03:9a:fc:57:88:8e:f5:b2:d8:5e:55:
9e:45:9f:70:f4:93:c0:1b:02:b8:26:c8:a4:4f:47:73:b8:b1:
03:f9:ef:2f:17:8a:62:e2:30:f7:5f:0e:a9:e7:2c:11:59:a9:
2d:21:f3:9d:ea:89:52:3e:3f:8c:a4:05:22:54:77:c2:fd:3d:
4d:02:a7:c0:1a:82:c3:1c:65:a0:34:d4:75:47:1d:1a:c9:f9:
0b:71:8e:56:e1:9d:3f:5d:6f:73:80:35:4e:e9:2c:e7:e9:0c:
8a:49:72:e8:49:43:2c:1d:8b:85:f0:92:db:59:83:26:9a:07:
5c:6f:97:da:27:04:a7:d0:be:23:fb:48:66:31:49:3b:8e:7f:
04:e0:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:17 2026 by rpki-client