Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
File: RQi117NzxB3b6pjaW8lxcpDkF_k.mft (raw, json)
Hash identifier: RY9JUf8KRcL2MwbI8pGI1z2Hf1xPCrP7czZlvapBga8=
Subject key identifier: F1:72:07:E2:B9:0A:90:96:F0:E5:AB:9E:6C:3B:E6:3C:D0:33:05:61
Authority key identifier: 45:08:B5:D7:B3:73:C4:1D:DB:EA:98:DA:5B:C9:71:72:90:E4:17:F9
Certificate issuer: /CN=4508b5d7b373c41ddbea98da5bc9717290e417f9
Certificate serial: 019F8FB4EEB4A9E18C9ECC3277A5C0D3404D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
Manifest number: 1D
Signing time: Thu 23 Jul 2026 16:00:27 +0000
Manifest this update: Thu 23 Jul 2026 16:00:27 +0000
Manifest next update: Fri 24 Jul 2026 16:00:27 +0000
Files and hashes: 1: RQi117NzxB3b6pjaW8lxcpDkF_k.crl (hash: eXUBDEQzAK5o30ABpjclaYC7nFYyeeYiyLv4hXdTDZU=)
2: n96x_KV9AIPo6sljEniHgrYwYdo.asa (hash: MZQfPY2YJsa6skvxi4+gsitkkwqOwZWNNGCWs8mjX6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:ee:b4:a9:e1:8c:9e:cc:32:77:a5:c0:d3:40:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4508b5d7b373c41ddbea98da5bc9717290e417f9
Validity
Not Before: Jul 23 16:00:27 2026 GMT
Not After : Jul 24 16:00:27 2026 GMT
Subject: CN=f17207e2b90a9096f0e5ab9e6c3be63cd0330561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:d6:8b:8d:30:d2:02:91:b1:2a:0b:b6:ca:
65:af:b4:92:37:95:97:bf:83:39:53:c7:8e:d6:62:
f4:67:ec:ee:eb:63:c6:6f:84:32:ac:da:88:3e:af:
9c:75:a7:a6:1c:92:59:84:73:8d:6f:93:c3:c6:24:
33:1c:82:14:c8:66:a2:cd:7d:1a:13:b4:4a:1a:b3:
da:6d:95:85:ee:c5:6f:db:5d:02:01:b7:5b:0f:89:
26:ad:a7:29:ac:d4:33:74:75:0a:9b:59:1c:62:b5:
9c:9f:d7:e4:3a:38:b3:24:ea:f5:e1:d7:78:d4:bc:
22:73:05:15:30:82:ef:11:6a:0b:c6:0a:8b:25:36:
da:a1:6b:53:a1:fe:54:d8:6a:ff:79:1e:69:86:de:
d1:bb:9d:55:77:9c:4f:50:9c:15:e9:06:ef:51:ae:
0e:45:ad:48:92:58:bf:2c:f5:12:2e:d7:05:06:dd:
50:f0:74:62:c5:cf:7f:24:51:83:7f:47:af:1a:2d:
3d:df:d3:bc:6a:49:76:f4:85:cf:fd:b2:40:ca:7f:
4f:cc:22:3c:41:cc:c2:dd:b0:2c:6a:36:a8:84:c0:
c8:98:f2:cd:8f:3b:1c:94:23:eb:ee:41:18:d6:19:
ba:69:8a:7c:88:35:e8:8c:6e:ec:46:63:34:af:0e:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:72:07:E2:B9:0A:90:96:F0:E5:AB:9E:6C:3B:E6:3C:D0:33:05:61
X509v3 Authority Key Identifier:
keyid:45:08:B5:D7:B3:73:C4:1D:DB:EA:98:DA:5B:C9:71:72:90:E4:17:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:16:f8:82:fa:1a:fe:a6:16:04:ef:0d:00:1c:6b:04:0c:13:
35:c3:7b:c0:82:25:ed:25:b0:d2:7d:76:a3:c1:1c:4d:ab:8c:
32:bd:12:ed:8b:34:84:18:b6:80:e0:16:76:56:35:e4:24:2d:
22:0f:1a:3a:de:41:8c:f5:c4:65:80:35:0e:f6:56:f0:50:55:
c7:75:06:18:b1:50:0e:41:11:1c:04:e6:c2:12:4c:7b:c5:57:
10:68:e1:17:c1:e2:c9:0b:e8:36:5d:9a:79:70:3d:92:71:37:
18:35:48:71:01:ad:b7:cb:dc:a0:1f:4e:9b:bb:09:ef:b0:4a:
a6:2d:1c:48:3b:4f:d9:54:bd:00:3d:bb:ad:02:2c:34:57:70:
d0:7d:20:39:cd:aa:3c:88:04:db:19:23:1d:a3:cc:b7:3a:37:
70:a8:ba:01:21:4d:02:33:41:43:8b:99:00:8a:5b:f4:81:d8:
8d:01:95:1a:01:cb:a6:bb:0c:a1:84:d0:df:c6:08:e9:cf:3c:
4f:6b:20:3d:79:dc:91:01:d1:60:3a:05:9c:e0:fd:32:9a:67:
39:a3:3c:99:4a:0a:01:a2:36:89:d9:fd:65:2e:e0:e4:dc:60:
21:d1:6a:df:a3:28:ad:bf:14:46:11:3f:7f:d2:a1:8f:a0:a6:
de:f7:09:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:08:55 2026 by rpki-client