Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: VhzuT4xgoLxEmgKKxD4MQUEsxoiXChRGHVMkUvXBgVY=
Subject key identifier: 0A:29:CC:C7:EE:D9:03:E2:2A:A0:8A:DF:9C:9E:A0:10:78:39:2F:21
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019F905A80A402AF0BB3547CEA62A6096640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 14F5
Signing time: Thu 23 Jul 2026 19:01:18 +0000
Manifest this update: Thu 23 Jul 2026 19:01:18 +0000
Manifest next update: Fri 24 Jul 2026 19:01:18 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: 1BkeSSPSvGU4Ecl5HbzDchxbPLXT/ZyxL7WgZVC9u5Q=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:80:a4:02:af:0b:b3:54:7c:ea:62:a6:09:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jul 23 19:01:18 2026 GMT
Not After : Jul 24 19:01:18 2026 GMT
Subject: CN=0a29ccc7eed903e22aa08adf9c9ea01078392f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:cd:6a:ac:f0:fc:ea:27:56:7b:98:61:16:
02:9c:3a:59:85:d3:c5:2e:3c:9c:e2:73:e9:58:8b:
61:cd:b2:20:ea:eb:f5:8a:ba:f8:42:e7:f7:54:6a:
83:c0:18:41:d0:ee:2b:9e:5b:b8:94:e1:5d:4b:ab:
6c:75:e1:af:b3:9d:a1:fd:45:eb:a9:0c:b3:4f:20:
c7:19:3d:5e:16:9e:f9:df:26:5c:41:e2:6f:25:0b:
ae:e0:44:86:bb:9f:ec:11:69:82:20:da:f0:84:23:
f9:6d:2a:75:f0:eb:cb:6e:f9:0b:a5:6f:86:8a:b5:
c6:85:fe:02:9a:32:64:72:d7:a3:5b:56:b5:6b:6c:
04:04:30:c2:6b:ab:21:1f:7f:d5:a9:8a:15:60:41:
9a:70:ee:ec:f1:2d:22:6c:26:77:a4:90:2e:12:e7:
45:88:39:20:90:c8:e2:ec:4c:28:93:8d:04:2b:40:
67:d5:c7:0d:8f:32:83:be:3d:5b:30:de:bf:9e:da:
2f:85:59:50:7a:3b:c0:5d:85:46:6e:2c:c7:19:1e:
ed:13:5a:ed:90:1c:e8:6d:7e:f7:f5:61:9d:29:6d:
8a:74:0b:ab:c3:12:c1:b4:fb:d3:53:b8:a5:ff:a6:
c9:3d:2e:97:cb:42:f0:1e:25:24:66:eb:09:e1:04:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:29:CC:C7:EE:D9:03:E2:2A:A0:8A:DF:9C:9E:A0:10:78:39:2F:21
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ef:e1:77:64:4c:af:d8:19:f3:63:74:f6:77:5b:79:b3:57:
ac:55:9a:09:88:fd:7f:00:b2:a3:95:66:ad:cb:b8:1d:4c:ba:
3c:78:84:5d:68:c0:f3:03:72:23:32:7f:7e:26:c2:dc:e9:bb:
b5:42:91:58:0c:d6:53:cf:93:13:45:22:87:03:cd:da:c5:bc:
36:3c:af:86:b4:fa:f5:2b:00:c4:3b:b9:10:0f:80:0e:6a:6c:
47:6a:a1:9d:c9:dc:df:55:a4:23:50:07:15:a6:73:e4:cb:f8:
c6:a7:07:38:8d:80:6a:cf:e3:64:c7:1f:e9:bf:d0:20:bd:71:
ea:9a:20:d6:15:b5:12:d8:7f:39:5d:20:33:79:2d:d5:b3:06:
1c:7f:ed:2c:c1:b6:c1:b5:fb:40:0e:40:e2:15:4d:30:68:a8:
83:88:41:99:f9:74:02:bc:e5:de:48:6c:1b:a2:65:37:f0:d5:
fb:62:91:8d:d9:9b:e3:f7:a5:59:ec:ef:b3:19:3f:49:be:e7:
36:11:ae:eb:94:57:c0:98:d6:d1:d2:63:02:65:ed:d6:55:22:
2a:eb:56:79:5b:21:b7:49:9e:de:67:f8:0e:d6:7b:dd:c9:8b:
c1:5d:a9:a3:ad:44:78:e8:49:71:63:3e:a7:68:81:df:95:a3:
68:66:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:02 2026 by rpki-client