Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: V03/HECErLDzb14i4qu424uDTWUJYX9B4+AMMh9n8gQ=
Subject key identifier: 41:6B:68:68:83:51:30:E1:43:99:0D:74:6B:74:CA:AD:32:0C:C9:70
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 019F90C7CD7B830A2D68D9F5258C075C2BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0E9C
Signing time: Thu 23 Jul 2026 21:00:41 +0000
Manifest this update: Thu 23 Jul 2026 21:00:41 +0000
Manifest next update: Fri 24 Jul 2026 21:00:41 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: 05Hw86LqNdXZbv2H4S/imS9vieM8HmpFvMeewkVlr0E=)
2: 3oaI4BJ1PfZU5ToAgLWtvl5NwhU.roa (hash: 3ZrLLG5oIpjvCZLR27J2YMVw+al6VtK2RFAJCZ4jGnc=)
3: cJFbLtaeoUfXlMt793s1Sx4oIHk.roa (hash: Q8rXRF1zW51xxj2bD+8pa1r9iTu2h5oDnFm7rQ/g/G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:cd:7b:83:0a:2d:68:d9:f5:25:8c:07:5c:2b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Jul 23 21:00:41 2026 GMT
Not After : Jul 24 21:00:41 2026 GMT
Subject: CN=416b6868835130e143990d746b74caad320cc970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:81:b3:4d:f0:fc:86:8b:8c:36:5e:63:fc:
6b:c2:31:3f:3c:e1:22:9f:17:82:50:26:0d:48:0f:
61:78:55:62:4e:c3:c1:6e:23:4d:11:8a:af:07:db:
60:44:98:a6:ad:08:fe:73:bc:64:95:e8:a0:cc:84:
22:8e:b7:9a:35:47:d6:e1:34:93:3e:fa:94:b1:9a:
4d:fe:c7:1b:1e:aa:34:69:71:53:0f:f0:f5:f9:f0:
36:8f:9d:38:53:d1:6b:49:3d:ef:00:6c:67:d7:c4:
60:fb:c4:44:a7:01:d7:74:5e:53:b5:c7:28:4d:f3:
4d:0d:51:9e:8d:2a:0a:63:24:14:52:41:9b:59:d8:
75:c0:c9:a9:3a:86:ff:a0:c5:1f:78:b1:6f:c6:73:
cc:c1:17:0f:3d:7e:a4:ed:21:ed:f8:2c:01:80:21:
04:04:af:7b:39:d3:7e:24:76:56:eb:c6:f8:1f:19:
32:47:84:2f:83:d8:66:76:d3:10:e9:9f:ce:9d:ed:
e4:08:71:bb:d1:66:1c:4d:a1:cd:f8:29:f7:a8:a2:
40:2a:ae:1b:07:ff:22:f2:ed:15:50:5c:fd:20:9a:
0e:0f:0a:e6:43:e6:0b:ba:96:e1:9f:9c:ee:25:e3:
4a:76:21:fa:44:6a:c8:bb:88:35:0b:db:33:c5:68:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:68:68:83:51:30:E1:43:99:0D:74:6B:74:CA:AD:32:0C:C9:70
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:34:7b:40:aa:4d:bb:28:bb:ad:45:97:00:52:d3:a3:de:6e:
6a:2f:7a:34:79:ab:d7:38:08:e7:fc:85:1a:16:3b:5d:25:f4:
13:0f:01:12:c3:bc:16:66:1a:32:c0:0b:37:36:fb:49:66:16:
3b:72:86:9e:79:e3:21:ed:9b:5c:5e:43:4f:a5:6b:ac:be:a1:
f1:bc:49:26:e2:62:09:da:10:10:f6:e3:fe:5f:01:e9:5e:61:
68:35:98:2f:71:c4:33:6f:9c:f0:da:cd:e7:04:bc:33:a3:df:
fd:01:31:1a:f2:0b:2b:0a:da:e5:26:af:c9:2a:8c:15:35:a8:
21:54:41:b5:21:8d:97:9c:b5:9a:0e:86:a9:df:a0:ae:44:69:
8b:98:fd:f0:42:09:d9:ad:26:fc:91:64:41:f7:a7:8b:2b:0c:
6d:5b:81:4e:05:f2:03:e3:95:1e:4c:59:c7:a8:8f:ae:e2:30:
af:31:1c:98:17:99:2b:67:52:ee:a2:9a:4b:91:b0:ec:65:4c:
cf:de:2c:39:75:84:90:23:d2:58:d1:44:7a:b4:84:3d:17:89:
46:80:41:cd:74:f4:45:83:66:1e:74:b0:85:6d:1d:99:c3:0d:
8d:80:fc:54:78:e6:e4:18:e4:6d:77:98:36:74:e2:f3:46:fe:
22:e3:d4:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx817gwotaNn1JYwHXCvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDg5YmNlMDhjNTVkYWE1N2I0ZjNhM2M5MDcwZmIzOTE4
NTNjY2YwHhcNMjYwNzIzMjEwMDQxWhcNMjYwNzI0MjEwMDQxWjAzMTEwLwYDVQQD
Eyg0MTZiNjg2ODgzNTEzMGUxNDM5OTBkNzQ2Yjc0Y2FhZDMyMGNjOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleGBs03w/IaLjDZeY/xrwjE/POEi
nxeCUCYNSA9heFViTsPBbiNNEYqvB9tgRJimrQj+c7xkleigzIQijreaNUfW4TST
PvqUsZpN/scbHqo0aXFTD/D1+fA2j504U9FrST3vAGxn18Rg+8REpwHXdF5Ttcco
TfNNDVGejSoKYyQUUkGbWdh1wMmpOob/oMUfeLFvxnPMwRcPPX6k7SHt+CwBgCEE
BK97OdN+JHZW68b4HxkyR4Qvg9hmdtMQ6Z/One3kCHG70WYcTaHN+Cn3qKJAKq4b
B/8i8u0VUFz9IJoODwrmQ+YLupbhn5zuJeNKdiH6RGrIu4g1C9szxWjOawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFraGiDUTDhQ5kNdGt0yq0yDMlwMB8GA1UdIwQY
MBaAFNUIm84IxV2qV7Tzo8kHD7ORhTzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAt
NmQ3MWZlMTNkNjFkLzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAtNmQ3MWZlMTNkNjFk
LzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDR7QKpN
uyi7rUWXAFLTo95uai96NHmr1zgI5/yFGhY7XSX0Ew8BEsO8FmYaMsALNzb7SWYW
O3KGnnnjIe2bXF5DT6VrrL6h8bxJJuJiCdoQEPbj/l8B6V5haDWYL3HEM2+c8NrN
5wS8M6Pf/QExGvILKwra5SavySqMFTWoIVRBtSGNl5y1mg6Gqd+grkRpi5j98EIJ
2a0m/JFkQfeniysMbVuBTgXyA+OVHkxZx6iPruIwrzEcmBeZK2dS7qKaS5Gw7GVM
z94sOXWEkCPSWNFEerSEPReJRoBBzXT0RYNmHnSwhW0dmcMNjYD8VHjm5BjkbXeY
NnTi80b+IuPUgw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:05 2026 by rpki-client