Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: xlYUDpXOq2mwwfgNx9H0MB41c5miWt/9vvz151Fb3Bc=
Subject key identifier: A0:DE:60:FC:10:C9:E8:6F:E3:D1:16:74:76:C9:65:7B:01:A8:8A:05
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 019F8F7F0A00A35765F4DD65EE91000CDAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 0A04
Signing time: Thu 23 Jul 2026 15:01:35 +0000
Manifest this update: Thu 23 Jul 2026 15:01:35 +0000
Manifest next update: Fri 24 Jul 2026 15:01:35 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: RY+mcIiMDir/+y0CBnwoxli4h7h32a34i0JHEmOlTVQ=)
2: NBMICGxDjswxMBcIkL6TWpVgug4.roa (hash: SDiHoGR3hyxD5P9xq7VGB+HgvxZFXXwsXaz8vMU9je8=)
3: flkFMntj216ik-1RHE5z8QkiuF4.roa (hash: Gx/ViUGq+C6Lf+xKNlRvkXnmfpj7mqFvEpimMEsP3EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:0a:00:a3:57:65:f4:dd:65:ee:91:00:0c:da:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Jul 23 15:01:35 2026 GMT
Not After : Jul 24 15:01:35 2026 GMT
Subject: CN=a0de60fc10c9e86fe3d1167476c9657b01a88a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:4d:55:46:1f:19:e4:a1:06:68:ce:ec:ca:
c6:0f:2a:55:c9:50:7d:90:c8:97:4a:8f:9f:88:80:
bb:ba:57:a1:e3:49:4f:37:6d:d1:d0:94:87:ef:80:
17:ed:65:aa:20:4e:08:7f:42:a7:5b:5e:3f:81:4d:
5d:ca:d5:2d:c5:c2:17:40:7d:3b:7a:f2:57:02:5d:
62:a3:b6:be:a3:bd:a7:56:57:bb:f0:d3:ba:7d:56:
b6:55:2b:52:5f:2d:44:41:17:cd:f3:5c:92:bb:76:
58:53:a7:d6:bf:13:e8:bd:15:25:4a:e9:41:06:38:
56:64:98:87:91:5e:22:3a:a4:6e:4d:a7:d9:40:75:
eb:0e:6b:03:23:97:2d:bb:60:c3:a1:71:b3:04:ce:
e5:3f:da:bc:dc:c7:20:a5:a0:a5:15:e8:02:a0:59:
9b:71:81:93:a6:b1:f9:cb:ac:6f:37:12:d5:c3:ff:
fe:89:b5:83:cb:b9:fe:8f:19:07:52:33:6c:f5:82:
f8:7a:a4:eb:d9:3d:f8:25:48:a5:45:6d:e3:53:f7:
f2:59:60:3e:7f:c7:09:e9:38:cd:86:21:3e:6a:42:
67:9b:0e:3b:b6:44:f0:40:e6:60:71:9a:b5:8a:91:
ef:73:30:ff:0c:86:b5:81:53:97:cc:8d:33:c8:11:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DE:60:FC:10:C9:E8:6F:E3:D1:16:74:76:C9:65:7B:01:A8:8A:05
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c9:d5:d8:f2:7b:1a:36:24:09:b6:f2:03:09:d7:dc:ff:66:
d9:82:f3:46:84:55:b5:67:c2:81:84:ef:ba:78:df:63:96:eb:
14:99:81:36:6f:bd:30:32:a7:79:f7:a8:61:60:b5:b9:3c:85:
17:8d:f9:fd:4a:f2:a3:19:c9:c0:93:0a:88:ea:59:3d:ff:36:
df:42:91:72:7d:96:f0:09:dd:bf:c9:cb:f5:c0:96:95:a8:43:
ba:d5:ec:f4:ca:cc:4a:a6:51:a7:c4:14:6d:bb:7e:c7:79:11:
3c:94:0b:df:3f:e1:78:ef:dc:07:be:29:c8:de:7e:8d:a6:e4:
ab:bc:68:9c:d3:72:be:74:3c:ce:4b:c0:f4:30:4f:56:75:7b:
04:ad:44:2b:d3:7e:6f:83:7f:ce:47:01:40:05:1f:de:e6:54:
12:f0:ef:0b:46:7b:47:0c:10:fb:e6:9a:d0:64:16:f7:61:fa:
82:fa:6c:0a:ba:9a:88:7f:1e:8b:2f:df:d8:b9:7a:3d:3b:40:
5d:87:61:16:be:30:b0:ba:ae:db:f3:d0:97:da:28:b3:f7:0b:
99:df:22:1c:65:8e:03:70:1f:62:0e:a4:e4:48:ee:14:f4:ad:
ac:fa:43:98:01:a2:7b:30:1b:c7:e6:18:86:16:a3:5e:b8:56:
ea:d0:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:17 2026 by rpki-client