Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: xQxdsOasg17I9zhV5OVvuekZ3KQoH+O4iBwJq8dLQOk=
Subject key identifier: 68:90:C7:6E:30:2D:7E:6D:F7:8B:09:CA:D1:43:31:D4:0F:3A:7F:41
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 019F8F7EA733CF12D1B55E331947969CC3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 0297
Signing time: Thu 23 Jul 2026 15:01:09 +0000
Manifest this update: Thu 23 Jul 2026 15:01:09 +0000
Manifest next update: Fri 24 Jul 2026 15:01:09 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: Z4OvnsXszCTDsYzcWG+XjzVuPS4Q+uFcDzuF6jTHdPU=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: yMSdih1BEkH3pQ4fKRRG34haBVs.roa (hash: zQcIZwJ6Pu/eO5hnk91XHasGs0yD2RAKEuFEjFFSfEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:a7:33:cf:12:d1:b5:5e:33:19:47:96:9c:c3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Jul 23 15:01:09 2026 GMT
Not After : Jul 24 15:01:09 2026 GMT
Subject: CN=6890c76e302d7e6df78b09cad14331d40f3a7f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:7c:30:f1:7a:e0:51:31:3d:7b:c0:cd:1b:
f3:0c:19:c1:92:b2:29:c6:ac:f8:bc:bd:35:ab:d2:
d6:fa:5d:36:74:5a:63:90:ed:c3:6e:c0:19:be:05:
bd:04:ee:2e:46:ff:8f:7e:31:03:d5:f1:4a:51:af:
f2:7a:ee:fd:34:03:0b:ce:42:a9:44:59:e1:c0:69:
ce:e0:2d:53:19:2c:e4:f1:b3:cc:b4:d9:4f:b6:60:
97:0f:15:6a:12:88:39:08:54:04:32:7b:31:e9:4d:
62:d7:4b:a6:19:a1:3a:e8:f1:03:01:ae:49:4f:01:
f4:4d:4f:ac:ef:4a:08:3f:07:ae:a8:01:fd:25:95:
2b:80:69:b2:ce:47:3b:82:e1:eb:0f:f5:d1:a7:a5:
7a:96:db:12:6c:cf:e3:e3:c2:76:b5:f7:81:68:35:
c2:16:5d:e2:bd:6e:39:ec:0a:25:5e:8c:58:e0:d6:
07:36:83:32:50:3b:da:6f:21:cf:0f:ba:27:4d:61:
15:6d:d8:65:f9:b1:cb:9b:6c:4e:0d:56:78:b6:07:
9b:b4:dc:d4:00:c5:79:ce:48:b4:ee:77:71:60:fd:
85:63:4a:15:bf:d3:68:eb:47:e2:3b:c8:3b:dc:e1:
06:6d:dd:e9:cc:b7:2f:f7:5c:62:cf:61:64:e5:3d:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:C7:6E:30:2D:7E:6D:F7:8B:09:CA:D1:43:31:D4:0F:3A:7F:41
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0a:2a:c2:a2:e7:75:86:6e:e9:fb:bd:13:e9:7c:16:76:da:
d3:b2:0a:1c:01:94:41:07:d9:04:f5:13:37:6b:64:0c:55:e4:
f8:96:31:66:4b:e5:ef:03:2f:99:9d:ef:09:e6:df:ee:4e:3a:
b3:64:aa:fd:b7:2a:a1:f8:21:9d:64:70:60:19:57:19:f3:7a:
fe:68:3b:77:47:69:22:e8:78:89:7e:ee:58:4b:4b:07:35:6e:
06:a2:db:37:b9:12:43:2a:bd:3d:65:d3:73:d3:b2:ad:fc:b7:
74:5d:db:8a:6f:16:8d:5e:24:ef:1a:b5:c8:82:14:7c:8b:59:
67:b3:38:95:2c:c6:82:9c:46:de:07:3c:86:2d:32:62:9e:e5:
16:33:48:15:ff:bf:80:2a:ae:44:0e:7d:a6:1e:8a:66:cf:35:
ce:67:44:0f:c9:1b:12:1f:6f:e3:bd:9e:07:d4:ec:2a:8b:69:
1f:39:82:97:99:8f:c7:de:2b:62:1c:5c:9e:db:5c:23:b6:2c:
77:87:4e:90:14:c5:4d:81:60:9d:8c:96:d0:ff:e2:15:a2:65:
0c:d3:74:de:da:ed:4a:2f:ec:8f:55:fe:30:90:32:71:36:2e:
db:9b:b4:6c:1f:3b:63:fd:d0:3d:62:fb:24:9d:c2:ef:bf:e7:
0a:1c:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:09 2026 by rpki-client