Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: 7tRpzA7zEeECJRMfYEAoE2moahDgrVXxgZk/9e9zulw=
Subject key identifier: A3:E9:AC:6E:13:07:35:9C:2D:73:95:3C:66:2B:09:E1:55:DB:BF:94
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 019F91DA9BDFDB9B5B457AF22405551B7D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 17B7
Signing time: Fri 24 Jul 2026 02:00:50 +0000
Manifest this update: Fri 24 Jul 2026 02:00:50 +0000
Manifest next update: Sat 25 Jul 2026 02:00:50 +0000
Files and hashes: 1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: 2cm9Qh8yHqV1Bd5wpD0XBAcij8a2KxlzDkZ4ipKrfsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:9b:df:db:9b:5b:45:7a:f2:24:05:55:1b:7d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Jul 24 02:00:50 2026 GMT
Not After : Jul 25 02:00:50 2026 GMT
Subject: CN=a3e9ac6e1307359c2d73953c662b09e155dbbf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:aa:5b:11:5b:4e:21:63:99:70:49:94:79:
44:c1:36:a7:3a:a8:82:60:2e:3d:00:29:7d:c1:45:
fd:0e:d2:bb:7e:47:17:ae:2c:ca:a3:7f:81:08:c3:
23:49:d6:19:9f:df:81:82:b8:7a:4e:64:55:bc:3e:
0f:40:d3:a9:29:fe:84:86:79:72:4b:06:b2:30:a5:
51:51:31:78:a6:0b:24:49:a9:5a:43:40:2b:08:6d:
61:72:f1:92:2a:90:a7:c4:b7:ed:66:2b:ff:1b:8f:
4a:da:2c:d3:be:79:40:b6:1c:fb:4c:8a:91:89:a6:
98:83:89:a6:ca:9a:cb:71:5f:8f:36:eb:a6:e8:b1:
1b:42:68:cc:85:81:ad:d4:ea:c0:47:71:19:28:08:
e3:e5:f4:c0:18:a4:92:99:06:f3:c5:bc:6e:fe:5e:
d8:bb:48:3b:07:c9:ac:da:cd:f5:bc:5d:c8:57:1f:
5e:13:e9:91:49:0f:55:77:99:41:49:2c:a1:83:c0:
7e:12:92:bc:ae:bd:2c:f9:a9:e7:38:dd:07:dd:47:
73:be:63:01:78:13:43:70:6e:7d:24:13:e3:c6:46:
05:d8:80:22:97:f3:88:ca:63:0a:6f:15:88:5a:a9:
e6:dc:39:db:15:aa:65:8a:43:6a:11:42:ab:ca:3c:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E9:AC:6E:13:07:35:9C:2D:73:95:3C:66:2B:09:E1:55:DB:BF:94
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cd:bc:86:fe:82:43:ca:6c:32:ef:d1:a8:85:2f:6d:e0:a3:
61:fd:f8:24:15:1b:65:24:a1:1f:93:54:2d:31:1c:42:59:31:
4c:d3:3c:56:e3:5f:95:1f:32:4b:68:7b:59:22:f0:2e:03:89:
06:b7:02:aa:fb:67:1c:65:87:fe:35:2e:59:ff:d4:13:22:7f:
4f:f8:52:77:e7:05:aa:c8:26:36:57:ec:9b:42:c2:a5:41:6a:
a7:15:09:6f:d0:6f:10:89:67:cc:36:4d:9a:41:9b:28:18:dd:
a3:2e:e1:1f:68:fd:b9:f4:01:cd:d0:e9:3e:cf:d7:cd:dc:19:
59:dc:32:5c:2c:1e:fa:a2:89:f3:65:e5:4d:8f:a3:0a:4e:a0:
d9:95:b7:5b:6f:65:cb:43:1d:9e:c5:59:b2:17:ef:62:6f:a2:
93:12:54:3d:1a:65:a5:2b:cc:5c:ae:22:2c:72:4e:d6:b7:fc:
3a:30:81:7b:79:ce:5b:fd:46:91:59:06:3a:ba:e8:dd:b6:3f:
8e:57:0c:f8:61:ec:6c:43:40:cb:cc:39:ec:b4:ca:86:f2:71:
2a:d5:ed:a8:08:ba:76:f8:6e:a5:f4:d2:09:67:16:ac:d6:05:
34:a3:5d:14:b7:3d:15:5e:8b:47:b1:5a:af:0e:48:d6:01:0a:
8d:5f:b9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:08 2026 by rpki-client