Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/qHuC73FAMScJpdKm1oaBpgrqjWU.mft
File: qHuC73FAMScJpdKm1oaBpgrqjWU.mft (raw, json)
Hash identifier: KWS6J06c9M3kkk7JFIPaOp5J6heLLS6pMdFGqCk25EA=
Subject key identifier: B7:08:52:6C:6A:BC:E6:72:2F:E3:43:29:0D:58:8A:A9:2C:80:5B:46
Authority key identifier: A8:7B:82:EF:71:40:31:27:09:A5:D2:A6:D6:86:81:A6:0A:EA:8D:65
Certificate issuer: /CN=a87b82ef7140312709a5d2a6d68681a60aea8d65
Certificate serial: 019F9549E0E5BCEE88EEB802DD69687BEA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHuC73FAMScJpdKm1oaBpgrqjWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/qHuC73FAMScJpdKm1oaBpgrqjWU.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:14 +0000
Manifest this update: Fri 24 Jul 2026 18:01:14 +0000
Manifest next update: Sat 25 Jul 2026 18:01:14 +0000
Files and hashes: 1: qHuC73FAMScJpdKm1oaBpgrqjWU.crl (hash: I+WerMwJAWrnj0Xtq43pRb9e9hYWfCdUtWXxe84fkYI=)
2: uO0OosOwCej1iPeBEJLacTu1fCc.roa (hash: LfdF8YBX+rkhAtFJtkhf9XAqvZMs95yfwOPQhktKFPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/qHuC73FAMScJpdKm1oaBpgrqjWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/qHuC73FAMScJpdKm1oaBpgrqjWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHuC73FAMScJpdKm1oaBpgrqjWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:e0:e5:bc:ee:88:ee:b8:02:dd:69:68:7b:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87b82ef7140312709a5d2a6d68681a60aea8d65
Validity
Not Before: Jul 24 18:01:14 2026 GMT
Not After : Jul 25 18:01:14 2026 GMT
Subject: CN=b708526c6abce6722fe343290d588aa92c805b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:90:56:7f:70:83:75:4b:70:b7:b2:68:76:
2a:ac:53:57:42:79:fa:b3:20:7c:89:2d:77:0a:66:
47:d8:eb:36:b6:a7:3d:44:2d:36:07:06:40:da:a0:
31:81:cc:ea:f2:00:9e:63:a0:87:4f:7f:09:c0:26:
f2:71:b9:62:35:9b:5c:e1:23:44:e7:ba:2c:7b:da:
a9:7a:86:a1:97:52:93:b5:c8:17:ee:1c:e9:51:54:
d2:bd:ea:72:a2:01:e7:18:0b:1a:31:e2:cd:cf:85:
a8:99:9f:3e:99:f8:81:1e:18:bf:c2:0c:04:15:ed:
09:00:11:54:81:8e:93:00:68:b1:f9:77:96:46:f8:
08:04:c4:d5:0e:e1:0c:b6:a2:e7:e7:f3:c1:6e:5c:
b4:96:6d:b1:a7:c8:63:2b:23:26:1d:95:9d:45:0e:
1d:a8:55:f6:85:62:4b:ff:69:75:ed:1d:aa:4d:69:
da:54:26:4a:e7:d8:2c:d7:cb:ea:38:0d:bb:74:7c:
85:a9:4e:8a:74:90:b2:e7:1a:46:16:e5:71:c5:d4:
61:e4:20:0d:d0:54:8c:dd:c8:82:69:81:b5:0c:46:
69:eb:99:e9:f2:71:5b:93:c5:a9:ed:aa:72:59:7e:
69:e7:a5:33:72:47:5e:9d:65:98:3f:1f:37:2c:e1:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:08:52:6C:6A:BC:E6:72:2F:E3:43:29:0D:58:8A:A9:2C:80:5B:46
X509v3 Authority Key Identifier:
keyid:A8:7B:82:EF:71:40:31:27:09:A5:D2:A6:D6:86:81:A6:0A:EA:8D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHuC73FAMScJpdKm1oaBpgrqjWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/qHuC73FAMScJpdKm1oaBpgrqjWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/qHuC73FAMScJpdKm1oaBpgrqjWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7c:78:b4:c2:73:c4:c5:55:31:f6:b2:d0:b7:a5:1a:d1:bf:
2f:04:52:f0:46:2f:96:84:af:7d:d2:40:b0:29:6e:cf:eb:24:
50:cd:08:c2:db:1e:45:20:ec:7c:37:b1:b4:79:c1:4f:f4:e2:
69:c0:d7:57:67:83:3d:2b:5f:11:65:c6:d0:f1:73:8e:ef:84:
0c:43:ae:e8:83:11:15:c0:7b:84:ab:b0:c8:9c:04:1f:75:04:
82:0c:fb:ef:3d:2d:94:d6:08:47:63:53:b8:b6:21:0b:b9:52:
61:d8:a2:5f:27:77:77:c2:33:55:b6:05:74:ac:d3:0a:50:bf:
b5:48:25:13:43:96:5e:43:69:ba:8d:8d:40:47:44:c1:3e:94:
59:1a:82:46:78:0e:e7:31:00:2f:75:66:2a:59:d8:9e:62:94:
50:ed:9b:59:ed:c8:cc:f6:10:9c:d4:2e:74:35:86:c8:50:fd:
9d:a7:ac:36:3a:43:ab:79:c6:78:4a:6c:52:b4:0b:e9:be:20:
2e:78:5d:6d:13:a0:23:0f:27:c2:d8:fe:77:4c:6f:35:d9:cd:
b4:66:6a:70:f4:06:35:00:9b:8f:c3:a1:66:5e:80:37:4e:29:
7f:8e:df:7f:09:2c:a3:d4:9d:5d:a2:d9:dd:61:24:11:28:cd:
8c:8a:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:43:37 2026 by rpki-client