Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: GGDIDyj60hs5zUDNPQ3mPl9nf7Apv89l+uZfLVQdXf4=
Subject key identifier: A2:45:D1:41:22:15:30:D5:55:A7:3F:1F:D0:A0:E0:10:09:E1:A9:DD
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 019F90C8318F470281E3641B5F562DAF6A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:01:06 +0000
Manifest this update: Thu 23 Jul 2026 21:01:06 +0000
Manifest next update: Fri 24 Jul 2026 21:01:06 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: c7kRsiDj5hfJ7D0y8n6CUv0SsCukrZHiKOdE9NiLno4=)
2: eN72_JOrglIivcRIrkUpJBSTrpQ.roa (hash: AlV36PTHBMVTau6gOr573zu4YRN7qhKbu3yDLrxxjYM=)
3: jgptn0oWvPfILsGhYu7AQtAVGQI.roa (hash: esf6xdXJXvTREZt/uQo773kjs6wVF4kHKSB6ECh3KeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:31:8f:47:02:81:e3:64:1b:5f:56:2d:af:6a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Jul 23 21:01:06 2026 GMT
Not After : Jul 24 21:01:06 2026 GMT
Subject: CN=a245d141221530d555a73f1fd0a0e01009e1a9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:99:ab:50:b9:e2:35:cf:d0:ae:68:fe:96:
59:f9:30:9a:2d:6a:17:be:1c:8b:4b:5f:69:c4:c4:
4a:18:d3:cb:04:e8:c0:39:68:8a:92:94:1f:c6:0b:
c3:0a:e4:00:f5:81:e9:bc:50:09:9c:06:49:33:fe:
94:8c:cb:5f:a5:0b:f3:8e:26:5e:01:1b:3c:23:74:
a7:5a:dc:93:5b:7e:da:0a:50:9d:42:b5:31:0a:2e:
14:fe:49:b6:0d:f5:90:f7:0e:8f:84:9f:4f:4c:36:
d2:03:02:d0:ce:ec:3f:b9:a2:fb:21:0d:17:13:4a:
43:bc:da:7d:af:5a:a6:3a:69:47:e4:ed:b1:f5:86:
0b:22:9d:e8:5c:db:44:8f:ac:04:64:98:e5:12:e8:
29:d7:88:90:5b:db:69:1b:7d:74:a3:20:06:1f:4a:
a8:0d:e5:84:97:bb:49:4f:a6:b9:a2:f9:26:e1:ea:
10:aa:26:79:d1:4d:c9:59:6c:54:b4:73:55:c0:33:
a9:aa:3f:60:11:ac:a1:df:b2:b8:8a:37:d2:ae:31:
84:e6:f1:16:79:70:0e:1d:99:98:94:f6:36:3d:90:
5a:63:74:4a:f0:e1:d5:e4:2f:06:f0:6b:0d:81:52:
f1:13:05:65:e8:e8:04:f1:6c:f3:28:c2:24:e1:c1:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:45:D1:41:22:15:30:D5:55:A7:3F:1F:D0:A0:E0:10:09:E1:A9:DD
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:94:34:7f:aa:d3:c5:9c:50:63:a0:09:86:e1:c5:e6:b1:ea:
c9:25:b2:5e:1f:9e:12:f5:cc:d8:fa:34:f3:e9:0a:5d:80:d0:
aa:86:36:9c:36:9c:1a:81:91:47:b8:09:6f:af:52:b6:7f:e4:
b5:f1:21:0e:45:91:8f:0a:f7:75:09:0c:bd:56:9e:ca:75:1d:
ab:fd:75:1f:cd:06:49:a4:6f:dd:3b:21:dd:81:be:e2:9b:c1:
57:5d:fe:12:1a:6f:4a:a9:8c:3c:a1:b3:50:bd:b9:b9:32:42:
9b:8d:7d:2e:ab:81:f0:d2:a8:ad:1f:63:65:c8:64:f2:b5:6d:
74:f3:ae:f4:f6:a2:90:bf:76:82:7f:dc:e2:96:a6:8f:4c:ef:
24:da:56:ce:d8:74:68:a5:5f:cf:66:70:d6:81:91:25:9f:76:
35:04:b8:a1:6b:fd:92:e7:6b:d4:f3:30:b0:2d:eb:27:6a:09:
1c:8e:12:91:43:c5:8a:12:2c:96:bd:34:9a:d4:dc:8a:0f:06:
d2:a7:19:6d:06:3c:21:eb:f1:4e:8a:ac:d9:d9:10:46:f4:b3:
17:32:80:1c:50:0d:b2:9e:eb:53:18:df:ac:dc:b5:3c:6d:ba:
9c:a6:58:10:88:56:56:51:a3:76:c5:ff:26:21:61:0a:47:a8:
21:57:f5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:20 2026 by rpki-client