Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: 7wZV+hRTwYZxni/FnFz052w0dDrd5EzqU6Txalq21sE=
Subject key identifier: 34:3F:B2:59:47:D5:E8:1E:1D:C2:83:64:F7:35:02:89:B8:3A:86:E9
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019F9136234EA3D7D734075C38D04B6C13B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0B8B
Signing time: Thu 23 Jul 2026 23:01:12 +0000
Manifest this update: Thu 23 Jul 2026 23:01:12 +0000
Manifest next update: Fri 24 Jul 2026 23:01:12 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: HGmAJwZ0j76pjckA+gZTqmAwxUKqDIVRy1wXSzeDFl8=)
2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:23:4e:a3:d7:d7:34:07:5c:38:d0:4b:6c:13:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Jul 23 23:01:12 2026 GMT
Not After : Jul 24 23:01:12 2026 GMT
Subject: CN=343fb25947d5e81e1dc28364f7350289b83a86e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:f6:17:8c:99:fc:01:4a:91:a4:8c:b0:41:
fc:a6:ce:4d:f1:8c:19:be:6c:ef:19:f4:01:16:5a:
ff:aa:72:f3:7e:ba:a1:85:c7:03:16:0b:b0:9a:ed:
7f:d5:66:9d:4f:82:67:cc:78:0d:46:35:d4:e8:11:
1e:70:07:52:f4:19:b9:5c:da:dc:b1:f2:59:1f:77:
ff:8b:1c:93:26:e8:8e:8c:69:fb:6e:dd:04:a9:3f:
7e:f1:4e:31:38:f6:ae:d4:b5:1b:06:5e:2d:6c:5e:
88:7f:43:15:11:eb:b2:67:ed:42:21:65:de:dd:ad:
fc:76:8f:2c:6e:91:8b:60:9e:b7:20:a9:e0:01:b0:
0c:3c:55:59:21:84:34:a5:3c:fe:cc:09:d8:df:ee:
de:35:5e:a1:05:ba:f6:97:97:8b:00:20:50:02:51:
87:7f:64:9d:91:40:86:d6:72:27:6c:dc:e7:65:b6:
c7:c6:df:c5:34:41:d5:fb:3e:87:b7:09:40:27:9e:
93:58:1f:be:28:18:60:26:43:e2:47:9b:be:aa:aa:
db:66:67:50:32:37:3f:c0:68:58:8b:d6:84:dd:3c:
30:59:da:4e:5d:52:7a:af:c5:af:b0:a0:e8:fb:d6:
fb:14:3e:b4:11:1d:80:4b:e7:6b:55:0d:59:e2:75:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3F:B2:59:47:D5:E8:1E:1D:C2:83:64:F7:35:02:89:B8:3A:86:E9
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:19:70:b2:6c:17:6d:e8:0e:2c:af:8d:7a:06:87:7e:e6:99:
62:26:07:e9:20:ce:00:a5:47:77:12:08:64:4f:90:af:dc:9c:
0a:3e:07:65:b2:4d:3a:1e:18:8e:11:4e:fc:d1:0c:5a:1a:ba:
44:37:eb:3e:97:61:ed:c2:3a:85:fa:ea:ac:fe:f4:c2:32:1c:
3f:51:33:70:04:9c:2b:3f:83:a7:5b:e9:6c:38:f0:b6:5c:79:
96:77:ab:11:c9:5f:05:8f:29:1f:bf:0b:bd:a6:2d:2c:0f:98:
39:b1:fd:01:2f:20:e9:89:31:5b:08:ee:6f:30:0b:1f:1e:44:
81:67:7d:db:87:0f:c7:06:29:14:e5:2c:56:30:51:b8:8c:e8:
57:20:81:39:b8:38:05:8e:d4:01:73:23:b4:e5:6d:32:b1:4d:
73:9f:f8:ba:fd:2a:ee:75:46:8a:ef:ac:48:1e:c4:c9:92:e8:
3a:40:66:82:1e:67:b2:5b:cd:fd:fe:34:6a:9c:2c:b8:a8:0c:
a2:8c:89:35:7b:b4:78:9f:1c:1e:d7:fa:e5:f1:ed:a8:67:64:
42:e5:e2:02:d1:58:91:83:69:ef:ee:58:42:f8:b1:73:b1:53:
b9:c0:8c:92:44:99:0c:42:2e:a7:7d:aa:24:8e:24:c8:16:93:
ce:74:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:32 2026 by rpki-client