Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
File: 0Q44sLejPvOhbhVDNAKYfW1njaE.mft (raw, json)
Hash identifier: F0WSRjOQnu/5sPFYJQvPe9Fdl1kokIi/5kij3VeNrJg=
Subject key identifier: 2A:FF:4F:C0:CB:4E:C0:B7:A6:15:F4:25:C2:2D:70:B0:8E:18:75:60
Authority key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Certificate issuer: /CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Certificate serial: 019F8FB5A1A699E6A449BAF556DBB0A18D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
Manifest number: 1670
Signing time: Thu 23 Jul 2026 16:01:12 +0000
Manifest this update: Thu 23 Jul 2026 16:01:12 +0000
Manifest next update: Fri 24 Jul 2026 16:01:12 +0000
Files and hashes: 1: 0Q44sLejPvOhbhVDNAKYfW1njaE.crl (hash: FW/WeV6ISqyyChOacYP7FU6j7NGBQeXoTLkQrArfONk=)
2: phJ6M8N_zrI_IBZJHi5JECkFqfg.roa (hash: uo9pYnUB/RDMAdAyJLZVD99p6FFm8bpqEEb9g4ygjVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:a1:a6:99:e6:a4:49:ba:f5:56:db:b0:a1:8d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Validity
Not Before: Jul 23 16:01:12 2026 GMT
Not After : Jul 24 16:01:12 2026 GMT
Subject: CN=2aff4fc0cb4ec0b7a615f425c22d70b08e187560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:c7:52:3d:b4:35:9f:55:03:3f:93:91:87:
7e:a8:a3:a6:c3:63:e7:ee:a0:6e:bf:4d:1e:31:62:
0c:d3:30:d4:4c:55:f5:c0:9d:f2:2e:7a:50:4a:ae:
6d:be:ad:c5:d4:89:5b:c2:bf:e2:c6:b0:36:da:69:
49:49:d5:2a:ea:d5:6d:fd:47:38:8d:af:01:22:56:
64:ce:c8:fd:3f:6d:91:74:6e:5d:19:40:a4:f7:13:
69:7d:78:f7:2f:be:02:45:58:a4:50:4e:e9:d7:24:
2b:a2:10:52:ab:a2:c3:21:40:73:42:83:94:f0:30:
cd:4e:10:ab:34:29:ff:19:f0:55:0a:9c:77:4f:c4:
ff:c3:ee:7a:1f:3b:00:d0:7e:8a:44:c5:41:31:35:
71:bb:4b:34:9e:3e:0a:bc:58:6f:33:0e:8a:4a:1c:
b0:86:60:62:37:08:8f:b2:2d:5f:da:0d:42:db:7b:
73:e1:a9:f4:3c:45:12:7b:b9:5d:cb:41:51:b6:8a:
73:58:c3:d2:3d:62:64:4a:a5:aa:05:2f:4f:46:eb:
e0:8d:91:9a:2d:90:26:41:12:02:9e:08:a7:54:7c:
ef:5a:eb:b5:c0:5e:0b:5a:76:65:b3:fd:52:e7:c6:
45:be:22:37:61:97:dd:e1:37:43:9b:d8:f6:ca:aa:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FF:4F:C0:CB:4E:C0:B7:A6:15:F4:25:C2:2D:70:B0:8E:18:75:60
X509v3 Authority Key Identifier:
keyid:D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:ff:16:98:6a:9f:cd:df:4e:3d:5d:43:6a:f9:e8:03:ad:
11:1c:a7:0b:41:e4:f9:3f:64:ff:5a:4b:db:a7:e4:85:3b:73:
b5:4b:89:a1:87:24:ff:0b:47:9e:d6:75:0a:07:3f:e7:61:c8:
4d:ea:da:80:fd:36:72:4e:aa:1a:70:d2:c2:7e:31:94:0b:8e:
e5:ee:64:0c:43:bd:07:b4:7d:ea:75:53:0b:7f:26:61:54:dd:
0d:37:1a:3f:58:92:0d:a9:95:0e:fd:af:f2:dc:d4:bd:63:1d:
a9:08:2b:60:99:38:0e:0a:73:9c:28:35:26:10:bb:1a:c9:7e:
71:ca:3e:51:cb:87:fd:a8:7d:f0:b7:5c:eb:ce:1d:a5:89:4d:
a9:30:2c:6b:a2:e8:59:94:26:05:4a:cd:97:eb:aa:da:bf:b9:
63:73:cc:8c:62:bf:f6:d6:6e:ca:85:35:de:0f:ee:87:71:6d:
25:37:25:6b:58:2d:24:8a:5f:4b:d4:68:c3:de:86:81:80:fd:
b5:0b:84:62:17:6e:0f:e7:26:87:14:f1:58:d7:0f:c6:cb:5d:
1f:96:ad:f3:90:06:1f:7e:73:6a:fa:86:e5:da:51:b2:31:f9:
b0:26:87:86:35:bf:67:b9:2c:ad:6b:fd:b1:1e:f9:79:b3:1c:
e0:01:af:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtaGmmeakSbr1VtuwoY0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMGUzOGIwYjdhMzNlZjNhMTZlMTU0MzM0MDI5ODdkNmQ2
NzhkYTEwHhcNMjYwNzIzMTYwMTEyWhcNMjYwNzI0MTYwMTEyWjAzMTEwLwYDVQQD
EygyYWZmNGZjMGNiNGVjMGI3YTYxNWY0MjVjMjJkNzBiMDhlMTg3NTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnfHUj20NZ9VAz+TkYd+qKOmw2Pn
7qBuv00eMWIM0zDUTFX1wJ3yLnpQSq5tvq3F1Ilbwr/ixrA22mlJSdUq6tVt/Uc4
ja8BIlZkzsj9P22RdG5dGUCk9xNpfXj3L74CRVikUE7p1yQrohBSq6LDIUBzQoOU
8DDNThCrNCn/GfBVCpx3T8T/w+56HzsA0H6KRMVBMTVxu0s0nj4KvFhvMw6KShyw
hmBiNwiPsi1f2g1C23tz4an0PEUSe7ldy0FRtopzWMPSPWJkSqWqBS9PRuvgjZGa
LZAmQRICnginVHzvWuu1wF4LWnZls/1S58ZFviI3YZfd4TdDm9j2yqodzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCr/T8DLTsC3phX0JcItcLCOGHVgMB8GA1UdIwQY
MBaAFNEOOLC3oz7zoW4VQzQCmH1tZ42hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFE0NHNMZWpQdk9oYmhWRE5BS1lmVzFuamFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8zZmEwOWEtZTg3NC00ZjM0LWJmNDUt
MmMwZWRhNzA2NjZhLzEvMFE0NHNMZWpQdk9oYmhWRE5BS1lmVzFuamFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8zZmEwOWEtZTg3NC00ZjM0LWJmNDUtMmMwZWRhNzA2NjZh
LzEvMFE0NHNMZWpQdk9oYmhWRE5BS1lmVzFuamFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfP/Fphq
n83fTj1dQ2r56AOtERynC0Hk+T9k/1pL26fkhTtztUuJoYck/wtHntZ1Cgc/52HI
TeragP02ck6qGnDSwn4xlAuO5e5kDEO9B7R96nVTC38mYVTdDTcaP1iSDamVDv2v
8tzUvWMdqQgrYJk4DgpznCg1JhC7Gsl+cco+UcuH/ah98Ldc684dpYlNqTAsa6Lo
WZQmBUrNl+uq2r+5Y3PMjGK/9tZuyoU13g/uh3FtJTcla1gtJIpfS9Row96GgYD9
tQuEYhduD+cmhxTxWNcPxstdH5at85AGH35zavqG5dpRsjH5sCaHhjW/Z7ksrWv9
sR75ebMc4AGv7A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:25 2026 by rpki-client