Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: wY8KBrmRPpvpIshJsLmdXNJz6kCsRSmNMoWN8Q/QOGI=
Subject key identifier: BE:A2:E0:B6:70:AD:83:9B:86:A9:FD:6D:6A:88:5F:6B:B8:E3:75:96
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 019F90FF8C5AC55B20E4B1CA1F7D467E7A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 1492
Signing time: Thu 23 Jul 2026 22:01:34 +0000
Manifest this update: Thu 23 Jul 2026 22:01:34 +0000
Manifest next update: Fri 24 Jul 2026 22:01:34 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: qc2ynNQ8zLRqagPDz9vInVJf1IFKjvT4FZfNeJyeSg8=)
2: CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa (hash: /5wTY3Au8nodbJrzfE4opPFUcgrAfS3BmM1XuaMh8Fg=)
3: SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa (hash: c0C1OZyGN1Qv/oPDh5sJipEydB/aVrMAT59EdQMDAY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:8c:5a:c5:5b:20:e4:b1:ca:1f:7d:46:7e:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Jul 23 22:01:34 2026 GMT
Not After : Jul 24 22:01:34 2026 GMT
Subject: CN=bea2e0b670ad839b86a9fd6d6a885f6bb8e37596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:3e:13:c3:af:9a:f3:b6:0f:97:cc:6b:ad:
a2:e0:5c:18:da:80:97:e1:bd:c3:19:5e:21:30:3e:
76:81:9a:40:d8:9d:dd:de:68:ce:3d:95:8b:25:ca:
7e:8b:d6:d3:cd:85:b1:31:5b:16:b8:0f:d7:2d:da:
a8:8e:7a:df:e2:a3:77:97:bb:eb:b7:95:4d:83:0e:
64:37:05:03:cf:4b:28:d4:c8:50:bf:11:8e:1b:74:
db:9e:56:5f:1e:e9:67:dc:a3:06:72:c4:ac:9c:ee:
f2:5c:4f:0d:3e:95:c8:29:62:53:6c:19:44:0b:f1:
0a:e7:93:fe:7e:74:e9:d9:4a:d6:31:8c:46:cc:8c:
a9:0d:00:eb:bf:10:fb:b8:60:bc:22:7e:03:ce:da:
05:26:96:13:79:c2:23:6f:62:28:7a:39:11:6f:e9:
b3:ef:dc:19:61:11:00:4e:47:b6:c0:8e:93:7f:a8:
1e:b4:85:03:76:f1:f5:21:22:f6:ed:08:06:1e:7b:
55:7d:e4:36:b7:a1:d2:20:d8:55:5a:22:40:9b:8c:
cd:b2:38:e8:6e:b7:50:e2:af:46:4b:06:e3:6f:58:
35:fb:1b:67:e3:6b:dc:37:4a:10:51:62:c0:41:5c:
45:e7:8d:81:3c:ed:46:ae:44:64:79:fd:b0:2c:0a:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:E0:B6:70:AD:83:9B:86:A9:FD:6D:6A:88:5F:6B:B8:E3:75:96
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f7:7b:cc:1c:8f:bf:50:03:59:2d:ab:b2:cb:f7:68:16:44:
ff:47:55:cd:a6:07:28:6f:9b:b7:79:d6:fa:a4:60:a8:d3:2d:
2f:dd:9d:f8:ba:0e:11:ba:88:17:00:44:20:f0:8a:76:36:3f:
8a:fb:e1:d4:db:4c:df:b2:c4:d1:98:93:ea:9b:2d:f6:79:6c:
90:03:50:c5:49:2b:09:a9:39:99:80:6c:85:11:2c:14:97:29:
74:53:17:e8:3e:d1:2d:88:fb:c8:d3:28:16:bf:cf:1a:94:e5:
d6:44:66:db:2a:e7:fd:07:5b:7c:24:db:7d:72:fc:a9:43:9c:
27:9a:fe:10:20:b3:ea:98:39:0d:01:bd:88:a7:e9:26:63:93:
6d:48:66:ed:6f:d1:00:e7:99:df:3a:4f:d9:79:38:17:4b:a8:
12:e8:f2:a5:ba:38:90:6d:75:9e:b0:49:5f:6c:86:5d:f7:bd:
a7:96:c5:7e:1a:61:05:71:ce:e1:d1:1a:16:55:4a:47:1b:48:
d1:be:f2:ee:54:fc:43:98:df:40:ab:6b:22:9a:96:94:47:87:
f2:2f:38:c1:59:81:cb:30:7e:bf:d2:d7:a4:a3:f7:d3:cc:5f:
71:dc:31:30:94:87:ad:20:21:7d:92:e8:54:2d:f7:0a:1f:c5:
3f:66:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:45 2026 by rpki-client