Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: onJcyzPlwTXVkdnJX9PwXaEOdknK9kgGpWMeXpUv57g=
Subject key identifier: E0:04:44:E7:CE:48:29:A0:2D:C3:8A:AC:93:57:3C:2F:B5:A6:9B:6E
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 019F8FECA1E9B8A51A91D3E1305169F73CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 17:01:17 +0000
Manifest this update: Thu 23 Jul 2026 17:01:17 +0000
Manifest next update: Fri 24 Jul 2026 17:01:17 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: UPz0FKseN7uW1ofw8dCR7qqYv4X0XfJq3Zo5+a2sQw8=)
2: P1yj3gjDhxChJcFO8Skm9pkXt48.roa (hash: xfZq4sva3XVYvdr878z0V/BBEkb+f01RPeig0MyhrEo=)
3: ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa (hash: 7GTm6dNpL+1aKtBHlqS15Lk5zVrRS8hQJ81O+NY5Eh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:a1:e9:b8:a5:1a:91:d3:e1:30:51:69:f7:3c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jul 23 17:01:17 2026 GMT
Not After : Jul 24 17:01:17 2026 GMT
Subject: CN=e00444e7ce4829a02dc38aac93573c2fb5a69b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:20:09:a8:62:8c:57:c0:dd:53:00:b6:3b:
b2:7f:28:ae:2d:86:80:c1:73:c9:62:74:48:34:15:
18:8c:d8:db:14:ec:4f:74:08:ae:bc:7c:e6:66:1a:
21:65:10:b8:1e:43:a2:31:bf:af:85:63:ee:e1:92:
c6:a3:3f:5d:91:ad:f4:94:b4:88:a6:40:ed:93:4e:
92:f5:d8:99:9e:03:46:b0:9c:7e:ff:87:a4:94:1f:
b7:eb:5b:a6:a8:00:97:5e:11:03:6f:67:23:25:45:
f6:0a:ec:a4:35:50:01:51:52:af:7c:fa:96:0a:6d:
fa:75:ab:ba:30:de:1b:4a:c9:37:6e:4a:da:70:ba:
86:06:7e:16:25:96:51:dc:40:12:09:32:8f:0a:bd:
f9:f2:27:a2:44:4f:b0:90:93:e4:96:6b:c0:41:6a:
fc:93:77:9a:bd:c4:54:53:31:90:24:a2:3c:ef:43:
dd:d4:a4:98:46:65:83:89:3f:f1:e9:65:f2:d0:2d:
69:48:97:e5:b0:8f:d9:ab:12:f3:d8:b3:94:61:d7:
17:3e:8e:09:f6:c9:5f:23:ce:12:a1:4d:2a:27:2f:
1a:41:34:7d:d3:9f:18:63:99:33:7c:53:bd:f7:46:
2c:59:b5:1b:9f:d4:f9:cc:1f:8d:a8:f5:f2:45:b7:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:44:E7:CE:48:29:A0:2D:C3:8A:AC:93:57:3C:2F:B5:A6:9B:6E
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f5:aa:e3:01:97:09:fa:e1:f4:6b:56:44:5a:db:13:c5:34:
99:ca:06:8c:05:cc:18:d8:8d:c5:1d:39:6f:87:98:db:99:cb:
bd:b3:b6:78:52:ca:35:dc:ec:46:f2:e8:0e:19:6f:29:70:47:
5b:7e:a3:13:9e:77:2d:8b:82:bc:59:ed:af:ef:74:cb:21:73:
8b:1a:8f:e2:6e:bb:d7:90:f8:d0:5d:4d:77:76:c8:e4:0e:62:
ff:bb:a6:6b:b9:af:66:ab:8b:84:8a:4b:79:df:68:fc:02:c0:
c0:7a:52:ee:09:62:a6:ee:be:67:d2:c2:ca:74:4e:15:a0:01:
cd:96:7c:0b:e8:94:33:7a:82:79:04:fb:b3:b0:31:84:15:9e:
f2:fa:e4:56:73:35:f1:e5:66:f4:71:22:1d:a4:5c:56:6e:23:
74:7c:5f:a2:28:1d:a4:ee:9b:aa:0d:b0:a6:ac:f5:48:f1:2d:
c8:4f:17:b7:10:f6:08:91:60:70:91:e6:6e:80:46:55:2d:1f:
29:53:f9:96:c7:c1:69:e5:f0:8d:d3:6c:b5:af:a7:74:cd:38:
0b:6f:16:56:13:13:46:17:8f:8f:a3:f5:ff:44:95:f9:91:74:
c5:90:e1:24:cf:dd:cf:d4:c7:60:03:c1:50:4b:20:04:e2:f2:
e3:68:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:31 2026 by rpki-client