Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier: D2iUnZM4fhj0G9qE6Iwh3UBhZ92Mzv0G637kDWGMbDY=
Subject key identifier: 3E:1D:C6:F3:73:4F:83:1D:2D:4B:DF:58:35:49:BF:6D:8E:7D:3F:5A
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 019F8F46FDAFBDBD22582E5224B39CA93985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number: 0156
Signing time: Thu 23 Jul 2026 14:00:21 +0000
Manifest this update: Thu 23 Jul 2026 14:00:21 +0000
Manifest next update: Fri 24 Jul 2026 14:00:21 +0000
Files and hashes: 1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: 65sataM96pUT3ncr0sRXD4FGvymtfpmoyrEy9BVLcbE=)
2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:fd:af:bd:bd:22:58:2e:52:24:b3:9c:a9:39:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: Jul 23 14:00:21 2026 GMT
Not After : Jul 24 14:00:21 2026 GMT
Subject: CN=3e1dc6f3734f831d2d4bdf583549bf6d8e7d3f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:eb:d7:79:79:2d:4f:43:b9:b5:50:c2:b6:
a9:61:7d:c6:2b:97:1a:67:e1:db:05:fc:47:80:32:
1e:9c:ac:9a:6e:08:f9:45:91:72:5b:fd:21:56:35:
10:e1:35:90:7b:63:ad:32:7c:6f:17:40:89:e9:e5:
c5:70:ec:8f:60:6b:5d:56:0e:ac:35:81:b6:72:e5:
e2:08:92:af:c6:64:60:3b:59:2a:64:5e:b8:53:90:
5d:90:b7:02:d0:50:83:4f:ba:34:d8:79:1f:56:b0:
ac:b3:55:60:c4:1b:fc:ca:32:e0:24:c8:ab:42:8f:
2e:43:78:f9:61:c3:17:85:55:12:d7:91:32:b9:60:
19:aa:c8:91:cd:d0:4b:72:f9:64:f1:d5:95:0d:5f:
33:ff:68:a8:24:16:55:95:84:dd:96:35:5f:78:dd:
99:0b:e5:b4:9e:40:0c:1f:9a:a2:b5:90:1e:80:7d:
33:32:a3:e3:4d:59:cc:fc:3f:cc:94:dc:49:85:a6:
ce:cf:14:f5:a8:68:c2:fd:bb:31:d1:d7:44:49:fd:
91:2a:ea:e8:10:7c:dc:7c:d7:ab:45:0b:77:b8:80:
90:87:1a:b9:14:97:b6:47:29:a9:1c:9a:fb:d7:5e:
27:f3:78:3b:99:4e:eb:50:af:a5:17:94:3b:19:a4:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1D:C6:F3:73:4F:83:1D:2D:4B:DF:58:35:49:BF:6D:8E:7D:3F:5A
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5f:40:0b:bf:fa:8f:a6:dd:59:25:96:52:49:d3:7a:ee:23:
9e:ea:01:d9:60:22:00:fa:76:9f:75:17:52:71:ab:21:c8:8c:
9c:b4:1d:4b:86:fa:cc:cf:77:f9:20:3f:29:c6:9b:39:e6:35:
22:79:da:af:e3:17:3f:34:df:da:1a:fd:1d:72:73:d3:89:20:
d9:e9:be:5d:dd:a4:b5:29:fa:83:9f:8b:a6:f4:98:cf:42:b5:
5d:db:e8:0b:28:42:9f:a2:eb:24:29:0c:7a:4d:1c:a8:fb:d3:
29:68:fe:f9:98:50:80:c1:3e:f6:0c:cd:4a:c2:4f:5a:ff:af:
9a:f9:aa:15:25:03:61:ea:df:33:3f:ee:82:94:76:ef:26:df:
fe:87:d4:9c:47:6c:f8:49:ac:04:b1:73:1c:a1:f5:44:e2:de:
35:38:b9:e6:a9:a9:28:b4:67:e7:25:d4:b1:7a:2b:2f:e4:90:
8d:be:e3:73:28:1d:04:96:7d:a8:48:1e:de:81:fe:fb:9f:ec:
f3:71:f2:ae:ca:2c:53:b1:d9:b3:54:83:17:52:39:9e:d4:9b:
e6:c6:4b:96:ab:cb:a9:29:15:73:e0:a8:51:dc:97:6d:80:18:
94:ea:6d:63:5f:cb:57:9b:e8:26:40:a8:fc:c7:08:1a:64:dc:
59:b4:2e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:17 2026 by rpki-client