Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: +6ky+J5LwtvJ2lCtwngd5tAiRnw5cLGBCA0DK4VA/WM=
Subject key identifier: 1C:68:DC:CF:14:68:AD:D8:DF:C9:03:02:B4:C8:C5:C1:80:CC:03:AE
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 019F91A3EFB7B1CF74810CED01CCC79CE9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 1154
Signing time: Fri 24 Jul 2026 01:01:07 +0000
Manifest this update: Fri 24 Jul 2026 01:01:07 +0000
Manifest next update: Sat 25 Jul 2026 01:01:07 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: gM9QpDSEezEVd/7aa2G0ofZG7Du6+X1T5X0VcrkK/E8=)
2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:ef:b7:b1:cf:74:81:0c:ed:01:cc:c7:9c:e9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Jul 24 01:01:07 2026 GMT
Not After : Jul 25 01:01:07 2026 GMT
Subject: CN=1c68dccf1468add8dfc90302b4c8c5c180cc03ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:70:49:c2:f9:f5:9e:47:1c:f8:d9:34:96:
2e:c6:33:8d:96:14:3d:99:81:f6:d2:e7:9b:03:fc:
49:3f:c2:b4:ff:20:06:2b:ce:ce:aa:e0:00:d5:5d:
42:65:3c:bc:ec:7e:e1:2d:9b:a2:5a:eb:f4:0a:e1:
27:76:aa:72:80:6e:1d:aa:a6:3b:b9:ab:5e:53:ca:
4d:84:8a:7e:1f:06:bc:a5:f2:0d:5b:94:95:29:99:
8a:9a:4c:c9:23:40:90:5f:c5:ba:21:a9:a4:5e:b8:
84:4f:a3:54:61:ad:82:ef:05:28:b5:7a:1c:aa:7b:
a0:16:33:ca:7e:8e:ec:46:62:a3:22:80:18:92:1e:
8e:48:7a:e1:6f:1c:1f:34:e6:5d:8a:e2:97:a8:f8:
b9:25:6f:d6:18:19:03:1d:65:1c:5a:4f:97:05:95:
cb:33:cf:30:8a:fa:92:58:8a:a3:67:f9:f1:15:15:
52:7a:5c:8f:43:4c:00:1c:cd:1e:fb:fb:4a:8f:eb:
de:19:04:e0:ea:cc:94:c9:26:db:fb:bd:1b:c8:27:
07:a5:4f:49:0a:e3:11:1e:25:fd:76:14:b1:42:23:
38:47:48:6f:ee:d5:4a:39:74:3a:3e:de:3b:78:22:
b0:a6:51:b3:00:dd:da:65:10:b0:2a:c3:cd:b2:7d:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:68:DC:CF:14:68:AD:D8:DF:C9:03:02:B4:C8:C5:C1:80:CC:03:AE
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7c:69:dd:ad:8c:ea:a2:0b:f6:49:d4:ea:e7:57:b2:76:93:
98:f6:30:ca:ee:2a:90:a3:56:0c:a2:e7:95:ab:aa:dd:e8:4a:
54:32:62:0a:68:3b:8f:10:91:c1:ee:ff:23:96:c9:fd:c5:94:
29:08:53:b8:b3:8f:b2:d9:05:d8:3a:5b:6f:d5:6f:64:82:c7:
f9:d1:1a:ba:fe:80:f5:b7:64:07:af:c7:77:ec:5d:37:cc:a5:
30:f5:3d:13:a9:d4:f1:35:b9:a8:d0:47:09:47:c3:01:04:d0:
c6:17:8f:ec:a8:65:bc:1c:dd:a9:2d:75:87:46:29:37:7b:19:
62:60:21:94:3d:c9:72:94:26:3f:6b:d3:1f:36:2e:55:be:eb:
f4:44:f7:45:1f:5c:cc:d3:7d:c8:1f:2d:c9:df:7f:d0:8a:a6:
d8:92:78:7a:44:18:a5:c3:fd:e5:86:56:ba:7b:ea:3f:9b:97:
3d:f8:6f:fc:cc:39:38:37:58:cd:b1:3c:72:39:f3:99:65:e7:
82:3c:bf:0c:68:63:b5:52:a1:80:a8:a6:16:c4:2b:0d:0b:2e:
b4:52:7c:20:3c:43:f7:20:a5:bd:cb:27:15:56:a9:62:42:a8:
41:f2:b6:f3:2e:ea:6f:18:79:9a:f8:80:bd:33:7a:9b:76:a7:
fd:a8:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:29 2026 by rpki-client