Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: IxP2Zu9hL2fOdHoWgUCSPZznRA+uXqPtaBbGp0A0e5c=
Subject key identifier: FD:4B:3A:C7:7E:B5:3F:28:75:3C:30:92:57:E8:78:73:F6:07:54:56
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 019F935BB56B304D1E6E7521F07CE7A86907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 0A87
Signing time: Fri 24 Jul 2026 09:01:28 +0000
Manifest this update: Fri 24 Jul 2026 09:01:28 +0000
Manifest next update: Sat 25 Jul 2026 09:01:28 +0000
Files and hashes: 1: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: zgVFLZefLWt+P+9fA75YwKE5Br6yomQ05N4OIMRLdJM=)
2: uRy6lNHq57rdX7_VPdepBDiNmnc.roa (hash: 65Rm9CIooU3CDnzNITl4VhD3i1B6DOi7f6KdO4ec990=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b5:6b:30:4d:1e:6e:75:21:f0:7c:e7:a8:69:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Jul 24 09:01:28 2026 GMT
Not After : Jul 25 09:01:28 2026 GMT
Subject: CN=fd4b3ac77eb53f28753c309257e87873f6075456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:06:55:8a:6b:27:fc:6b:b1:bd:75:ac:c0:
fe:16:32:98:fc:16:19:be:ea:fe:3a:ac:7d:34:b5:
55:be:9e:e5:60:4d:89:0f:f4:51:b6:e5:db:a2:f5:
04:b2:11:59:58:5c:32:1e:4c:f1:3f:78:3c:b7:5c:
6d:21:4b:95:ff:00:c9:f6:ca:48:fd:91:f2:89:c1:
a3:36:4f:b5:cb:73:82:c9:0e:74:04:83:8f:87:f1:
9a:e1:45:85:4e:80:50:1b:8f:e5:71:bf:cb:69:50:
99:a6:98:9a:7f:88:6f:60:bc:69:79:de:98:0d:92:
2a:99:3c:ac:ae:00:41:9e:2d:b7:d1:a3:10:ba:b5:
c8:76:e4:43:e1:58:00:03:37:e2:f4:33:ea:bb:8c:
90:da:25:90:67:a8:34:50:ed:44:b3:92:f6:cd:5c:
6c:96:f4:d8:65:02:10:b5:91:a4:b4:8f:d5:72:51:
05:15:e8:c3:ae:ce:df:c5:f8:e1:4b:b4:c0:f5:d6:
45:5e:90:73:25:1a:e9:7d:ff:f9:d8:61:ae:a9:6b:
73:c8:4f:c8:e7:fa:9d:c6:f9:e1:d4:f2:ba:ae:fe:
d9:fb:f2:ac:d7:d0:99:5b:73:fc:51:29:56:a6:c7:
4f:7a:9c:0f:e2:ff:a9:8a:fa:a7:9c:99:05:d7:66:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4B:3A:C7:7E:B5:3F:28:75:3C:30:92:57:E8:78:73:F6:07:54:56
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c2:e7:76:94:f5:35:1e:31:f0:d6:8a:57:b9:65:84:75:1c:
e2:66:ad:68:34:8f:29:93:61:70:e1:9e:b8:d5:f0:ff:f3:07:
98:5d:ae:c3:7b:e2:14:be:07:5b:bc:27:c9:0d:3f:81:b6:aa:
74:b8:43:22:1a:20:ac:7e:92:9c:1c:34:a9:72:6f:d6:55:0b:
86:b6:29:04:f0:05:23:da:eb:bf:eb:03:7e:e4:67:db:78:37:
84:ac:c6:3d:5f:03:6b:86:22:20:16:b1:58:e6:5a:51:c2:b2:
fb:2b:02:39:9d:5b:bd:a8:60:3e:3d:bc:7e:69:4a:da:bd:4c:
d6:38:6e:54:ce:b7:6e:61:8d:93:9e:70:3f:60:c1:46:55:a3:
a5:c4:c8:f0:22:4d:f9:8e:d3:03:07:c3:1a:30:97:77:af:2b:
4e:52:c4:9d:97:c6:83:ab:d3:61:d4:35:72:06:b8:f1:5b:02:
b8:45:06:00:f7:90:0d:77:db:20:d6:63:2a:38:a0:16:41:d1:
4d:d9:0d:23:2b:93:dc:5f:4d:72:ec:9e:f7:c0:8f:16:34:86:
a6:f8:e7:b4:0c:7a:39:4d:7a:06:61:35:eb:a0:86:f3:e6:62:
2e:f0:e8:cf:53:e1:6f:35:da:fd:e1:b6:f8:e0:b1:d0:e1:22:
17:68:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:14 2026 by rpki-client