Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: Ov7advU4BtYlsKioUSJNREE2CCU7Y7qzCobFSPl/Sc0=
Subject key identifier: B3:70:51:2C:DD:0E:5F:99:0A:41:EC:F7:DC:97:1A:39:F2:79:93:A6
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 019F9210FB7CFB6B6B67B2F6E17B53567118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 03:00:14 +0000
Manifest this update: Fri 24 Jul 2026 03:00:14 +0000
Manifest next update: Sat 25 Jul 2026 03:00:14 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: GNYMAyhvsMmq4H5R38J0pd6i0sbSD8aqfjZADCcemoM=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:10:fb:7c:fb:6b:6b:67:b2:f6:e1:7b:53:56:71:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Jul 24 03:00:14 2026 GMT
Not After : Jul 25 03:00:14 2026 GMT
Subject: CN=b370512cdd0e5f990a41ecf7dc971a39f27993a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:47:a0:e4:8a:a2:4f:25:e5:62:08:d9:8f:
b3:67:2d:dd:c7:1d:0a:07:2d:cb:74:d6:5d:eb:42:
fc:3c:5d:47:3c:ae:08:ff:26:4e:e8:45:23:c4:9c:
79:d1:2f:0a:fd:c0:94:0b:69:08:80:79:45:36:43:
0f:1d:4f:40:8f:13:12:cd:9b:3f:a6:b9:7e:dd:bc:
f7:c6:27:67:95:0f:78:d4:04:58:c5:1d:74:f1:99:
41:5e:3c:09:4e:1f:d5:f2:21:7b:2f:6b:5b:84:6f:
9f:4e:c1:d8:57:52:3b:d1:3a:8a:b6:22:e3:85:66:
47:76:6c:b8:a4:02:87:0f:c8:33:41:5e:bc:ee:72:
a3:73:e4:29:1a:3a:ec:38:3c:59:97:6c:fc:61:62:
c3:74:57:cd:4c:4e:03:36:da:11:0e:e9:53:4f:8c:
c8:82:d6:be:17:2f:e9:87:54:b4:8b:34:22:97:d2:
1a:3f:e2:c9:da:1b:2f:05:89:25:83:b8:71:12:91:
dd:0a:e8:c2:56:d9:d8:f8:9b:ad:60:77:d4:9c:e0:
5f:6a:f7:69:be:d8:38:c7:c3:1f:7d:96:dd:67:76:
3f:6f:5e:ba:30:9b:8f:3b:56:9c:92:4c:d0:50:41:
72:7d:07:b5:2a:56:92:20:ab:55:f0:84:87:f0:17:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:70:51:2C:DD:0E:5F:99:0A:41:EC:F7:DC:97:1A:39:F2:79:93:A6
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0e:ee:5d:fb:22:f9:c6:b4:bf:4d:35:90:a1:f0:d3:0c:f6:
14:85:8b:0e:8d:43:71:9c:a5:c3:25:03:0b:e5:dd:cc:a6:31:
57:56:22:d9:d7:5a:87:42:97:56:20:c1:66:81:5e:47:02:16:
a8:cc:04:f0:5f:15:52:94:0b:48:f7:24:c2:d8:9d:cc:db:23:
5e:6c:69:18:72:88:af:aa:7f:a4:99:48:47:b5:14:c5:db:a2:
5f:b7:b2:8d:35:28:06:f1:f0:b1:5e:52:eb:a4:b3:8f:d8:21:
72:ba:41:08:71:f2:e9:f9:b8:d4:6d:bf:ad:9c:29:c6:d2:79:
5c:8d:be:12:ef:51:11:f3:15:38:05:91:8f:16:96:17:71:a9:
9d:47:ea:61:5a:81:2f:cc:ef:2d:30:9f:c5:31:36:5c:3d:32:
e2:b5:99:bb:38:ed:24:83:17:ac:14:b3:6a:58:28:dc:6e:5a:
fc:40:7c:91:b6:d8:87:6a:2a:a5:37:82:a3:e3:f9:99:3d:b3:
c0:fe:c3:41:19:88:45:8a:dc:14:e1:d3:fb:01:9f:18:cd:d5:
66:a9:d0:63:07:b2:00:2a:1a:30:59:48:2e:09:ca:bc:6a:cb:
2e:dd:0b:13:46:4c:a9:5a:85:4c:1e:35:a3:75:19:87:fb:43:
57:35:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:27 2026 by rpki-client