Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: CQipZR1sc0IZ+PrlXbk4z8mi+xTDygOy8JFySRIll14=
Subject key identifier: 9D:0E:35:BD:F7:E6:F7:B8:73:42:44:76:0A:A0:9A:3B:0E:D9:F2:C3
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 019F94372CF58CF995C0DCBEAC179F6F6D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 09F7
Signing time: Fri 24 Jul 2026 13:01:11 +0000
Manifest this update: Fri 24 Jul 2026 13:01:11 +0000
Manifest next update: Sat 25 Jul 2026 13:01:11 +0000
Files and hashes: 1: IpDWhHDW_jjW4s7kmxssNqbsNL8.roa (hash: PZdGVIm+bNpQQVU0BxUiBJTaInqWv4810rxgD/JnG9o=)
2: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: 797gZ6vpvPX/q9AzmI6mZqZJhL+dP64RFBsI1D6b+PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:2c:f5:8c:f9:95:c0:dc:be:ac:17:9f:6f:6d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Jul 24 13:01:11 2026 GMT
Not After : Jul 25 13:01:11 2026 GMT
Subject: CN=9d0e35bdf7e6f7b8734244760aa09a3b0ed9f2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:4a:e9:c2:a1:fa:bd:cc:46:15:3e:e7:98:
c9:66:c6:5d:d4:58:e0:75:fc:39:88:89:d4:9d:66:
36:96:0f:73:51:20:7c:e6:ad:68:34:c0:dc:5d:fb:
23:6c:92:36:91:79:b4:6a:98:76:5b:b2:05:18:c4:
65:65:e3:1b:c4:13:9c:ee:37:2b:04:34:d3:c0:c0:
e5:33:82:40:cc:aa:bd:5a:6a:3e:5b:42:89:be:a1:
d9:56:01:d2:d1:da:13:64:d6:0b:98:f5:1c:07:83:
21:b5:e7:ea:fd:b3:35:5b:4f:bf:58:ea:c7:1c:4f:
27:3d:d8:8e:13:1d:03:41:6b:ab:3a:4b:70:ad:f6:
82:0d:9e:b2:b8:8e:31:0f:5d:91:17:8c:80:c7:84:
24:70:fa:9d:c3:ab:6f:21:8d:54:4d:64:bc:7f:6a:
39:0f:44:f9:a5:54:b9:c5:b0:3d:f4:31:16:86:69:
5f:16:a1:dd:cb:50:1e:8f:3f:71:5e:c1:5c:44:5a:
ab:a7:e3:52:b9:20:f8:75:4c:72:6a:09:62:1a:5f:
34:6b:62:85:50:48:1a:75:54:d9:7a:15:d6:f7:2b:
96:c8:1a:e4:8f:3b:bd:21:40:be:95:ed:82:0a:d5:
ff:e8:fb:30:12:92:91:31:0c:53:dc:cd:2f:85:80:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0E:35:BD:F7:E6:F7:B8:73:42:44:76:0A:A0:9A:3B:0E:D9:F2:C3
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1c:5c:6a:62:d8:d9:04:ee:7a:89:dc:04:4b:1e:38:d5:a0:
06:a5:c3:28:b6:80:d5:31:50:e6:8c:1f:a5:89:6b:2f:0e:fa:
95:4a:92:86:43:7d:7e:55:1c:8f:6e:49:56:c2:09:05:1e:d1:
41:71:26:1b:7a:74:37:3c:a9:f1:3a:5b:da:af:d4:74:b2:ae:
bd:30:89:f0:76:ca:bd:09:a4:45:50:9c:cd:bf:c0:71:e6:45:
e4:3c:c6:2f:d5:a3:cd:06:9b:be:4e:76:57:fe:90:6d:d8:e0:
8c:f3:b0:90:b8:ec:0b:41:50:f5:9b:1d:28:d7:bd:92:16:e8:
e5:11:24:e9:2f:2c:68:56:36:f9:9f:99:98:2b:16:e4:ea:4d:
a5:5c:fe:5a:d5:74:e7:1f:8c:b5:e7:0f:0f:18:81:8c:f7:fc:
14:88:bc:69:84:23:74:e5:4b:fc:51:1c:81:96:5f:5c:62:46:
46:cd:9a:b6:48:c9:03:d7:04:88:db:87:0f:7b:97:7e:2a:2d:
56:b9:98:f0:e2:ca:f5:c7:6e:bc:8f:4d:b6:bb:0f:36:a4:9b:
36:62:98:d6:3d:b8:45:6f:3a:8d:ec:ec:7f:c0:1a:13:f5:67:
18:08:6e:3f:6f:e4:d9:70:43:2e:0f:8d:17:e7:7c:e9:28:5c:
62:64:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:22 2026 by rpki-client