Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
File: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft (raw, json)
Hash identifier: x7Ozq+DCoDZuO4JnSyWQseNbtHqypJE7mIuaoyUxmZA=
Subject key identifier: 95:62:A7:08:83:78:DC:E9:18:6E:5A:E5:A7:59:79:F1:3C:F4:ED:30
Authority key identifier: D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
Certificate issuer: /CN=d5a42a0ffd0274c655070609549e6420b63284df
Certificate serial: 019F8F7EFA1E3D7E5A0516B2F11BCB8156DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:30 +0000
Manifest this update: Thu 23 Jul 2026 15:01:30 +0000
Manifest next update: Fri 24 Jul 2026 15:01:30 +0000
Files and hashes: 1: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl (hash: hMWF/OoqPPbrU6eJERAgW9gTMNgB0gT7K+1v593/3MU=)
2: FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa (hash: vbWMXzKS4D5+2q+2t821SHbD4J+yqJXDqLxiG6blyO0=)
3: sAks3DmPZ6CqoQlRY3bGSvOGHik.roa (hash: Ee7Zl0TzS27Mz1IwdlPhsbhVTUojNkqd2MBy8kTqIm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:fa:1e:3d:7e:5a:05:16:b2:f1:1b:cb:81:56:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a42a0ffd0274c655070609549e6420b63284df
Validity
Not Before: Jul 23 15:01:30 2026 GMT
Not After : Jul 24 15:01:30 2026 GMT
Subject: CN=9562a7088378dce9186e5ae5a75979f13cf4ed30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d9:0f:e6:64:eb:b3:8a:1f:cd:28:6e:51:2c:
c2:ea:8c:1f:da:8b:e1:98:e9:e7:31:80:a3:f9:7e:
bd:3a:1f:c6:0e:8c:87:7a:dd:64:15:8c:d0:bb:f9:
09:b9:52:07:a3:f9:98:da:7b:77:9f:88:98:c6:8a:
ec:94:89:a5:37:86:d4:a9:f8:21:8a:8d:c3:46:d0:
03:39:a7:17:41:00:73:cb:77:35:c7:53:3b:83:04:
e3:d3:d0:19:8b:e1:9e:90:ce:28:1e:cf:f2:88:b0:
8f:d8:60:58:2a:37:f6:9c:97:6a:d7:b6:56:ed:ac:
3f:fc:7b:87:93:b7:56:c4:c0:b0:82:a3:fe:ed:7f:
9f:2b:f3:1a:ba:f2:2b:a0:51:0b:81:b5:04:34:b2:
ca:da:9d:1e:7d:51:08:55:11:de:e9:f0:2d:3c:ff:
46:83:c0:2e:b7:cb:4f:97:3d:bc:8a:c7:0d:4c:5f:
76:f5:a6:18:58:a0:1e:c6:d6:26:08:80:b4:f3:c8:
1e:18:e1:e3:da:da:02:7a:d8:7c:a8:d5:c2:86:da:
46:a2:34:35:d2:15:6e:28:ca:6e:f7:28:b5:d1:94:
ba:0b:24:92:45:c1:fc:36:b1:17:df:fc:c1:73:23:
cb:18:40:23:ca:76:ae:53:b6:ae:a3:3c:e9:89:c0:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:A7:08:83:78:DC:E9:18:6E:5A:E5:A7:59:79:F1:3C:F4:ED:30
X509v3 Authority Key Identifier:
keyid:D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a3:d4:4f:e4:94:ec:8e:11:0b:53:23:7d:13:e4:7d:4a:ed:
12:b9:61:f2:8f:d3:35:e1:d8:30:56:7d:01:18:c5:cb:a6:52:
eb:b8:db:db:ff:47:f6:4f:b1:59:4d:32:ad:ca:e3:b9:b9:35:
d1:34:fb:e1:a1:ce:40:53:63:5c:b4:7a:21:0b:55:59:39:f8:
49:61:4f:44:bc:fb:c7:c1:61:48:fc:4d:d5:71:45:c6:69:49:
5f:f5:43:06:d0:1c:5c:fa:c6:88:37:62:62:f9:90:32:9f:75:
38:68:50:f5:f2:e5:49:71:28:40:9a:a3:bf:1d:b3:f0:e3:ba:
15:31:c1:63:33:19:af:52:e2:b3:fe:dd:db:89:cf:7e:bf:10:
ea:e7:64:35:92:af:df:eb:d4:48:89:7f:12:ed:6d:80:bc:f0:
31:2e:19:0c:8c:3d:e0:f0:46:e3:76:a3:b5:0f:a7:ec:5c:44:
94:2b:ed:de:df:15:21:83:62:8b:70:c0:39:ab:bb:f5:ee:34:
94:87:2e:70:a7:2f:f4:84:ea:8c:7d:44:f8:12:7b:25:3f:84:
79:c7:44:40:32:0d:16:51:25:64:df:ec:d4:71:c5:83:e6:a3:
c1:bb:57:1a:1e:c8:85:cc:00:22:23:8c:bb:ec:de:d8:bd:91:
e4:a8:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:12 2026 by rpki-client