Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: zIytJdEQJKHmgr8X0i51j8iU1OSwYTpkb0MnS95W+eE=
Subject key identifier: 28:F8:CC:B4:9F:A2:F1:7C:80:A5:A6:BE:77:5D:9C:95:D7:07:0A:1B
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019F8F1054597367274970563D3DDE1DEC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 19D2
Signing time: Thu 23 Jul 2026 13:00:39 +0000
Manifest this update: Thu 23 Jul 2026 13:00:39 +0000
Manifest next update: Fri 24 Jul 2026 13:00:39 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: SLd5grfhmnqq7aNkYPOONgs9tc7Ju5/j/QNv7EKTUXg=)
2: DGuA7DOyGXAn98oCAGhbl48323g.roa (hash: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk=)
3: FqQzin5AyA5f6WQtz3QGyb25Lkw.roa (hash: jo5wd7AW0r4ksG6ucK99tJ1yird0s7L219QrcqvmBqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:54:59:73:67:27:49:70:56:3d:3d:de:1d:ec:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jul 23 13:00:39 2026 GMT
Not After : Jul 24 13:00:39 2026 GMT
Subject: CN=28f8ccb49fa2f17c80a5a6be775d9c95d7070a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:11:34:3d:92:97:ba:1e:67:4a:04:43:10:
eb:85:94:18:94:57:7b:e0:d5:b4:c1:97:b4:b7:44:
70:93:fc:e1:18:a4:ea:0f:3a:34:fd:f2:64:83:2a:
9c:b4:7c:82:af:ac:e2:1b:07:6b:aa:78:b5:b4:aa:
51:99:89:e8:4f:f3:61:4e:c7:36:c9:bc:bf:15:66:
14:a1:e2:d0:b8:f7:03:ca:c3:b8:71:c6:58:8a:29:
39:f9:5d:37:41:04:8b:56:d0:8e:ca:78:c8:51:a9:
9e:c6:fa:a5:d8:34:0d:92:b9:cd:7c:1e:95:92:6f:
69:88:78:79:39:19:06:8a:24:43:fa:3b:a8:3a:05:
97:fa:6d:6a:03:99:75:41:0c:e0:5b:cd:a0:af:ae:
fa:95:e1:84:64:68:b5:0b:d1:10:23:12:f9:ef:91:
57:a9:e5:0d:0b:4f:75:4b:4b:9b:59:95:2e:fa:9e:
d6:ba:d9:e0:eb:de:d4:49:ed:5c:28:05:ce:5a:8f:
d7:4e:b6:7d:03:48:8e:09:6a:76:08:ad:f9:8e:9a:
d8:8b:dd:09:c1:9a:e8:d2:c7:71:34:cc:c9:83:53:
bc:3f:6c:85:74:e9:91:ad:6a:9b:a8:aa:4d:81:be:
8c:ad:1d:49:9b:59:86:d4:86:02:92:10:26:aa:e2:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:CC:B4:9F:A2:F1:7C:80:A5:A6:BE:77:5D:9C:95:D7:07:0A:1B
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:7e:8f:b2:33:4a:31:a5:d0:fa:8c:01:a2:91:0c:1e:4c:
c4:7d:38:1e:48:68:28:8d:56:b8:74:6e:08:98:77:fb:bc:ac:
86:6d:13:9e:c2:9d:3d:1f:bb:f8:e8:41:65:c7:3b:dd:c9:57:
a3:f6:1d:a3:a6:53:a0:95:73:3c:b7:9a:fd:86:6d:f2:1a:3a:
2e:99:ef:34:9b:36:35:52:a1:8d:ba:0e:c6:04:ea:44:19:fe:
88:7d:c2:1b:9a:93:4b:59:6b:e3:2f:4d:ad:be:ac:18:38:fb:
bd:73:ae:9f:00:82:67:48:fb:06:f5:80:80:66:22:4f:e7:62:
bd:8f:a2:d1:4e:07:9c:43:38:6b:da:13:59:43:3c:aa:4e:9b:
b9:02:c8:eb:e2:6d:e9:f1:87:50:87:2d:cb:07:ce:6d:3e:e0:
1d:d1:5a:b8:a3:57:af:77:2e:84:94:01:6b:81:48:87:5e:42:
2a:13:b0:e3:b0:58:08:93:75:64:52:0e:2f:5e:ea:fb:a8:ae:
f6:81:c6:2c:eb:ba:b3:c2:91:6b:22:00:0a:e0:67:ad:29:4e:
f0:ff:4e:04:b8:b5:50:8b:84:e4:0c:06:19:01:0d:f9:82:3f:
3f:07:ea:16:8c:21:8a:35:e8:62:b8:f0:03:d4:15:fa:8c:d9:
81:d3:d3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEFRZc2cnSXBWPT3eHexYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjYwNzIzMTMwMDM5WhcNMjYwNzI0MTMwMDM5WjAzMTEwLwYDVQQD
EygyOGY4Y2NiNDlmYTJmMTdjODBhNWE2YmU3NzVkOWM5NWQ3MDcwYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CYRND2Sl7oeZ0oEQxDrhZQYlFd7
4NW0wZe0t0Rwk/zhGKTqDzo0/fJkgyqctHyCr6ziGwdrqni1tKpRmYnoT/NhTsc2
yby/FWYUoeLQuPcDysO4ccZYiik5+V03QQSLVtCOynjIUamexvql2DQNkrnNfB6V
km9piHh5ORkGiiRD+juoOgWX+m1qA5l1QQzgW82gr676leGEZGi1C9EQIxL575FX
qeUNC091S0ubWZUu+p7Wutng697USe1cKAXOWo/XTrZ9A0iOCWp2CK35jprYi90J
wZro0sdxNMzJg1O8P2yFdOmRrWqbqKpNgb6MrR1Jm1mG1IYCkhAmquI3HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj4zLSfovF8gKWmvnddnJXXBwobMB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvN+j7Iz
SjGl0PqMAaKRDB5MxH04HkhoKI1WuHRuCJh3+7yshm0TnsKdPR+7+OhBZcc73clX
o/Ydo6ZToJVzPLea/YZt8ho6LpnvNJs2NVKhjboOxgTqRBn+iH3CG5qTS1lr4y9N
rb6sGDj7vXOunwCCZ0j7BvWAgGYiT+divY+i0U4HnEM4a9oTWUM8qk6buQLI6+Jt
6fGHUIctywfObT7gHdFauKNXr3cuhJQBa4FIh15CKhOw47BYCJN1ZFIOL17q+6iu
9oHGLOu6s8KRayIACuBnrSlO8P9OBLi1UIuE5AwGGQEN+YI/PwfqFowhijXoYrjw
A9QV+ozZgdPTzQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:31 2026 by rpki-client