Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: gD9GZPD/weE2sg35P8XIOStxQRAAJ587hXeAsmz0cik=
Subject key identifier: 34:C4:67:41:76:BE:72:75:4F:1A:C4:A8:D4:6C:2B:1F:48:AA:68:86
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 019F902305EA639893A28D6718D5B39CB128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 18:00:41 +0000
Manifest this update: Thu 23 Jul 2026 18:00:41 +0000
Manifest next update: Fri 24 Jul 2026 18:00:41 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: MSXxBtGkzr/q8zxuPtXCO139jqiyPNLTHQSHetmuwK0=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:05:ea:63:98:93:a2:8d:67:18:d5:b3:9c:b1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Jul 23 18:00:41 2026 GMT
Not After : Jul 24 18:00:41 2026 GMT
Subject: CN=34c4674176be72754f1ac4a8d46c2b1f48aa6886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:92:35:c6:62:01:b1:78:c2:bf:b7:d6:0d:
34:99:5c:05:58:95:d8:d3:14:cd:84:6a:78:a9:92:
68:f6:30:87:8b:a3:53:7c:3a:38:7d:2e:55:1a:7b:
3d:61:81:da:50:8f:b1:84:16:66:c4:90:05:78:de:
42:98:ca:a9:e5:aa:4b:98:a3:6d:de:b2:06:e0:bc:
83:f6:97:f4:b0:41:c1:b6:15:2b:fd:7d:c4:c9:f6:
6b:a9:f1:79:19:51:ce:19:0f:a2:15:83:41:4e:85:
3e:e0:94:e0:ec:a0:42:79:d4:2e:bf:00:1f:5b:b3:
e5:67:b5:57:6f:7f:14:53:96:ef:64:96:5b:7a:e6:
09:da:5b:13:58:ab:be:72:a6:fc:48:3d:a8:74:7e:
42:e1:57:04:ae:18:18:aa:0b:36:ba:f9:d8:39:4e:
88:06:49:3c:49:df:79:bf:ce:b9:d7:8f:4e:8c:0d:
6d:aa:88:53:54:c7:a0:cb:c5:3d:d7:22:7c:49:d0:
bd:1f:3a:0f:32:74:4d:a4:21:80:43:06:71:9f:d9:
68:52:fc:66:af:f2:8f:7e:f7:01:8c:cf:73:31:9f:
87:cc:ec:f0:33:87:d4:13:47:80:65:a6:16:cf:b0:
41:57:77:9e:01:1b:12:23:e8:65:76:76:73:fd:f9:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:67:41:76:BE:72:75:4F:1A:C4:A8:D4:6C:2B:1F:48:AA:68:86
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:23:32:d3:a3:c7:92:7f:9a:13:57:52:c7:01:5c:99:09:96:
1e:eb:4c:c0:ff:93:cb:ff:fc:fb:3f:61:a9:82:70:6a:5b:48:
c7:4a:40:d2:05:4a:8e:fc:b5:1d:88:b9:35:91:e0:da:f7:bb:
1c:a3:ac:4e:9c:53:8a:89:f7:12:9e:7c:49:36:40:19:7b:22:
92:a9:50:6b:42:bf:2a:c3:66:0c:d5:e6:bd:44:c6:1e:57:9e:
38:82:3e:ab:55:f1:28:47:90:8f:a7:ef:11:21:58:94:dc:26:
39:7c:21:10:4c:68:4f:96:0d:98:27:62:ba:e4:c2:20:e1:2e:
99:75:6f:4b:51:2e:fd:6c:9e:f8:ef:55:0b:bc:99:6e:da:a9:
43:54:14:3e:2e:80:f3:b8:53:ac:fa:54:ae:04:22:0e:49:2f:
60:24:42:05:a6:1c:e9:2e:70:d4:a3:31:fb:45:8e:55:fb:9f:
9e:0d:90:8e:50:41:dc:93:96:bb:f2:8a:7a:5a:53:e5:9a:d3:
8d:b4:b7:ec:c1:10:80:3e:79:18:e3:ba:ed:7c:2d:e1:2d:64:
7a:0d:63:16:29:88:cf:84:d6:ed:27:d1:7c:9f:6b:e8:c8:a9:
f6:84:1a:2f:f7:a1:1a:fc:d1:07:b1:3c:d6:6e:a5:4e:3c:7d:
db:00:e8:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIwXqY5iToo1nGNWznLEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMGI0NGU0OTI1NDllMWI3ZGE1MzJjODBjMzQ4ODUwYzVh
NDRlODAwHhcNMjYwNzIzMTgwMDQxWhcNMjYwNzI0MTgwMDQxWjAzMTEwLwYDVQQD
EygzNGM0Njc0MTc2YmU3Mjc1NGYxYWM0YThkNDZjMmIxZjQ4YWE2ODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndSSNcZiAbF4wr+31g00mVwFWJXY
0xTNhGp4qZJo9jCHi6NTfDo4fS5VGns9YYHaUI+xhBZmxJAFeN5CmMqp5apLmKNt
3rIG4LyD9pf0sEHBthUr/X3EyfZrqfF5GVHOGQ+iFYNBToU+4JTg7KBCedQuvwAf
W7PlZ7VXb38UU5bvZJZbeuYJ2lsTWKu+cqb8SD2odH5C4VcErhgYqgs2uvnYOU6I
Bkk8Sd95v865149OjA1tqohTVMegy8U91yJ8SdC9HzoPMnRNpCGAQwZxn9loUvxm
r/KPfvcBjM9zMZ+HzOzwM4fUE0eAZaYWz7BBV3eeARsSI+hldnZz/flC0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTEZ0F2vnJ1TxrEqNRsKx9IqmiGMB8GA1UdIwQY
MBaAFH0LROSSVJ4bfaUyyAw0iFDFpE6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDct
NzIwNGI4MTEyNTBmLzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDctNzIwNGI4MTEyNTBm
LzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciMy06PH
kn+aE1dSxwFcmQmWHutMwP+Ty//8+z9hqYJwaltIx0pA0gVKjvy1HYi5NZHg2ve7
HKOsTpxTion3Ep58STZAGXsikqlQa0K/KsNmDNXmvUTGHleeOII+q1XxKEeQj6fv
ESFYlNwmOXwhEExoT5YNmCdiuuTCIOEumXVvS1Eu/Wye+O9VC7yZbtqpQ1QUPi6A
87hTrPpUrgQiDkkvYCRCBaYc6S5w1KMx+0WOVfufng2QjlBB3JOWu/KKelpT5ZrT
jbS37MEQgD55GOO67Xwt4S1keg1jFimIz4TW7SfRfJ9r6Mip9oQaL/ehGvzRB7E8
1m6lTjx92wDoDA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:57:33 2026 by rpki-client