Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: vehPO7whY2WrO9nyydYp093dQuVp3oNjiVj5SPyueeI=
Subject key identifier: 67:AF:F7:8C:A2:B0:77:FD:F7:6F:CE:E2:2F:D2:D8:CE:FB:E6:45:71
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 01A0EC9C9CBDEE5D25B3A321C05EAF8F1B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 1A87
Signing time: Tue 29 Sep 2026 10:01:21 +0000
Manifest this update: Tue 29 Sep 2026 10:01:21 +0000
Manifest next update: Wed 30 Sep 2026 10:01:21 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: e+yHjiRatZ5wN41hKtq0cVUjNry8t0heqljUFrYgfdU=)
2: DGuA7DOyGXAn98oCAGhbl48323g.roa (hash: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk=)
3: FqQzin5AyA5f6WQtz3QGyb25Lkw.roa (hash: jo5wd7AW0r4ksG6ucK99tJ1yird0s7L219QrcqvmBqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:9c:bd:ee:5d:25:b3:a3:21:c0:5e:af:8f:1b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Sep 29 10:01:21 2026 GMT
Not After : Sep 30 10:01:21 2026 GMT
Subject: CN=67aff78ca2b077fdf76fcee22fd2d8cefbe64571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:62:bc:08:e8:43:51:2a:4c:41:87:df:17:
a2:cc:b7:40:1b:23:2d:7d:0c:43:2b:c2:ac:1c:61:
65:74:75:7f:7d:f2:33:bb:54:84:0f:03:83:a8:47:
0c:a1:f6:a7:88:79:38:02:80:ff:47:ea:6e:74:42:
24:58:f3:0f:f0:eb:c0:58:3c:ae:c8:1b:08:b9:bd:
82:98:2f:15:05:1d:a8:69:38:7f:bd:fd:47:b2:05:
3d:d9:14:f2:0c:75:e7:ce:de:f9:e3:02:bf:56:0c:
43:7f:a2:d1:75:bf:ef:35:67:4a:22:ae:b2:ee:61:
44:3a:3c:c9:0c:9c:12:de:0a:58:5f:18:ef:c3:3f:
29:4f:60:2a:23:24:84:ac:af:91:34:15:f9:ba:c2:
1e:ac:9f:87:09:33:f6:d0:c9:ca:99:21:59:7e:9a:
63:49:de:71:de:3f:ca:72:43:83:5d:6c:3a:33:ba:
c5:6f:a9:f7:10:9c:c8:7d:51:1e:ea:8b:7e:cb:80:
a3:e4:b7:03:fc:a0:75:7a:0c:5a:b2:87:3f:17:60:
59:75:4c:ff:03:7a:50:c9:6b:61:eb:1e:51:a8:8f:
15:75:ac:65:90:1b:96:6f:4f:5d:e4:9f:33:eb:bb:
5e:e4:8d:5e:e7:04:7f:75:88:1f:f8:4f:1b:b7:c7:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AF:F7:8C:A2:B0:77:FD:F7:6F:CE:E2:2F:D2:D8:CE:FB:E6:45:71
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:db:7a:1e:67:69:e9:b2:ea:3a:60:cf:7f:fb:59:c1:60:de:
6b:c4:99:3f:5f:47:0f:51:5d:65:f6:30:97:7d:45:73:69:85:
5a:15:ad:f9:b2:36:ee:fd:9a:bc:c1:e8:2b:90:02:d3:68:62:
e7:28:64:72:0a:07:04:77:01:6e:c1:de:89:3f:de:66:f9:25:
b7:73:b3:40:99:02:06:fc:10:56:cb:8c:f3:8b:76:7f:26:1d:
c9:30:82:ca:c9:29:e4:78:fd:76:9a:99:a1:e6:4e:1a:0a:12:
e8:29:a7:aa:60:eb:22:43:ce:cb:76:33:f4:d7:1c:d0:88:fc:
54:a7:31:29:4e:74:45:7d:44:89:29:84:3c:c7:e0:1c:73:ff:
36:b8:e2:42:48:de:0d:bd:8b:2c:83:18:c1:a4:3d:b4:d9:33:
5d:eb:8f:dd:3d:18:b7:bf:1f:ad:6e:a1:ff:5c:62:99:de:57:
2c:7d:ad:a3:88:84:93:7c:67:84:7b:a1:43:2b:26:a8:69:02:
12:97:44:88:60:31:32:9d:a1:63:be:13:3b:c9:1b:99:fb:83:
10:0e:77:8f:14:36:5a:f4:05:d4:bb:3f:70:01:81:de:cd:2a:
2e:5d:aa:c3:5a:07:2d:4e:e8:97:db:87:55:0e:c1:ea:b5:21:
f1:fe:d2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:31:04 2026 by rpki-client