Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: KgGxbTOnRaHBtkUSnGB900IXCc3l49o6Vxk50+8t35Y=
Subject key identifier: 47:2D:2A:44:78:30:E9:91:10:7F:01:CB:54:A8:F3:C6:4F:14:78:D8
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019F91A3EBCA5BC7697832C33F1A5DC61C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 06BD
Signing time: Fri 24 Jul 2026 01:01:06 +0000
Manifest this update: Fri 24 Jul 2026 01:01:06 +0000
Manifest next update: Sat 25 Jul 2026 01:01:06 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: wx9lkWJzNoq+CChEpgqhXkXikw7JznZSW3xANH1oDAc=)
3: kniFntdxPbS1jBvN0hKNK7QT914.roa (hash: Hc1QVDwdt4HeTUIYJSo4nwn3K1JUnhk+8tjIWHMrCAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:eb:ca:5b:c7:69:78:32:c3:3f:1a:5d:c6:1c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jul 24 01:01:06 2026 GMT
Not After : Jul 25 01:01:06 2026 GMT
Subject: CN=472d2a447830e991107f01cb54a8f3c64f1478d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0f:e9:fe:9f:72:09:82:dc:f7:ad:59:37:8e:
fd:75:ff:88:20:9d:00:cf:0b:07:7b:42:76:f8:2b:
29:c0:c3:e7:c4:32:9c:68:bd:29:41:cf:2c:7a:7e:
00:00:0c:e9:8b:33:29:63:dd:f8:e0:c0:93:1a:b9:
a2:5b:73:b8:ea:3a:fb:79:cd:1a:22:fd:44:d6:c3:
62:c0:34:a7:ab:3b:f6:2b:88:63:f8:b3:32:e9:eb:
64:94:64:5d:e6:8e:e1:d6:5e:e8:c5:52:97:92:52:
d9:6f:c9:54:62:84:50:65:7d:bd:40:cb:93:87:16:
a2:43:69:93:7a:e4:a0:2d:5a:ce:8c:1b:06:e6:35:
c4:b8:78:1a:ac:04:70:7a:5a:7d:e7:9e:fd:4c:31:
0d:29:c0:85:67:39:59:3a:03:7a:60:03:36:15:91:
34:ac:96:a4:66:cb:db:a8:cd:9e:14:92:1c:7a:1b:
7f:78:d0:87:5a:c3:0b:7e:a7:da:a6:2c:ae:09:67:
48:b6:17:f0:e2:d7:ad:ed:fe:56:f4:ee:f3:1b:4a:
38:02:53:d0:b0:ea:c0:fd:50:3b:ee:92:1c:71:54:
41:84:40:f6:0b:e2:33:e3:58:57:08:45:70:89:bf:
46:13:ba:e7:ae:f2:66:8e:3a:e2:22:22:af:b1:6b:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2D:2A:44:78:30:E9:91:10:7F:01:CB:54:A8:F3:C6:4F:14:78:D8
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:98:80:83:19:2f:73:c9:21:27:12:4b:a7:39:b2:a5:63:0a:
fe:48:1c:22:ed:07:a5:5d:35:5d:67:f2:3d:19:72:a4:3c:f1:
96:b1:fc:ea:ac:c3:5d:ff:f0:95:25:8c:af:4e:77:9a:a8:8e:
7f:47:41:65:16:d2:d0:a4:0b:94:02:f7:1e:2d:24:a4:f1:0c:
f6:51:52:e9:6d:28:ae:cc:00:c9:39:a4:8e:89:b1:47:9f:c2:
4d:79:42:07:d7:27:30:d0:0f:2b:46:ff:6c:6d:b1:1c:e3:25:
a0:4e:57:98:ce:bf:12:2d:ec:18:0d:2f:be:1f:cd:ef:e2:b3:
18:07:a0:79:7b:bf:a9:b8:20:6c:e9:c3:e9:53:8d:91:82:85:
dd:42:1a:1b:ff:6f:47:6b:b2:3e:df:51:5a:44:bb:24:c4:0c:
ab:ee:9d:c0:2b:33:81:eb:7f:74:ca:df:fa:a9:e1:10:46:d9:
ce:59:f1:39:41:66:11:d6:ce:0b:97:08:de:dc:9a:bc:89:f6:
d2:d2:e8:18:eb:da:16:e2:9f:1f:3d:d4:a7:a5:f6:a3:43:05:
d2:12:91:83:15:40:f6:c2:b3:f0:30:3e:4d:b2:a1:0b:ce:d8:
95:46:fe:05:17:74:12:d4:ea:b4:cb:c8:1b:41:4f:52:b4:b7:
c8:0b:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:40 2026 by rpki-client