Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: 4IJUF0Ryk6V84SrV2sN3MwvFITA7gV4VhlreZP2rrSU=
Subject key identifier: F1:B5:25:51:2F:BC:3C:93:BC:82:67:59:F8:B5:2B:41:DA:90:18:A5
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 019F927F4BB2F7469425E7E5AD8FBC82847A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 051E
Signing time: Fri 24 Jul 2026 05:00:43 +0000
Manifest this update: Fri 24 Jul 2026 05:00:43 +0000
Manifest next update: Sat 25 Jul 2026 05:00:43 +0000
Files and hashes: 1: A_z7T-9m7d_9cFuD6RzeeqQuAAo.roa (hash: CndX469kMgFnIGnFVgAv1uwBMzZ+jqdPFxwbzTu/wnQ=)
2: Trft0mfWMMwOx--8rqClEKwipxA.roa (hash: 3nok9je6KT8Wv4gKkH7HIrIIK5LI+Nl8LWES2R/jXQc=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: yhdEROoMUBMfCFOvdNXcOm3bw76xa/BaKZ2PF2YnJmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:4b:b2:f7:46:94:25:e7:e5:ad:8f:bc:82:84:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Jul 24 05:00:43 2026 GMT
Not After : Jul 25 05:00:43 2026 GMT
Subject: CN=f1b525512fbc3c93bc826759f8b52b41da9018a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ec:b9:65:e8:6c:9d:eb:99:63:78:5c:9c:06:
f7:b8:ab:48:8d:27:81:d3:13:fb:a3:57:fb:8e:f1:
0f:4a:05:97:9d:71:88:86:30:08:34:9d:2d:ba:45:
67:58:bf:2a:49:76:be:24:12:d6:83:e0:91:ba:93:
49:a0:7c:8c:4e:82:c3:2a:32:fa:44:68:72:1d:2d:
1d:cf:07:f3:46:a2:73:62:4f:0c:73:56:98:09:68:
21:0d:09:08:23:7b:68:65:b8:34:c0:8b:9b:c5:da:
ac:d3:87:3d:99:61:48:ae:ac:ab:7f:86:c5:ea:d0:
52:4c:22:8c:2d:42:dd:b6:1b:d8:b9:10:5c:cd:0a:
30:aa:e4:5c:2c:c6:99:c4:15:4a:d1:61:70:96:4f:
01:11:3b:2f:e4:dc:16:96:52:a9:e8:06:18:0d:3e:
f3:10:83:cc:d9:93:16:d3:a1:68:fe:98:37:b0:f5:
fa:92:7f:da:f7:13:ee:e6:33:3f:1e:3e:d8:05:f0:
c2:a7:5f:8a:c9:67:0c:81:2d:00:65:63:22:f2:2f:
e9:09:93:2a:22:99:3a:f3:41:1d:86:46:c9:f2:6c:
aa:0a:5e:53:6d:57:9b:21:a1:aa:a4:14:37:be:19:
e3:e4:c3:23:80:06:f6:20:89:3f:8b:32:76:d1:05:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:25:51:2F:BC:3C:93:BC:82:67:59:F8:B5:2B:41:DA:90:18:A5
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:12:d9:4d:09:0c:9f:58:cc:32:05:91:6d:8c:80:01:16:42:
d1:93:66:f1:01:dc:e3:c1:a1:5f:ee:ce:fa:36:e4:42:ab:8e:
63:dd:45:7b:1b:b8:e7:b2:69:6c:db:78:a3:3f:1a:75:9e:f0:
d1:cb:36:e2:58:44:2b:6b:c6:e7:fd:0d:3f:ac:76:68:0e:03:
da:10:5c:67:c6:e3:21:f5:63:b4:1d:05:29:ed:bd:c2:5e:94:
24:5c:34:3d:06:76:d4:ca:3e:3b:47:d7:0a:4a:b7:8d:43:30:
cf:7b:ea:68:bf:2d:ec:b1:9a:cd:97:63:69:a4:b5:c8:5f:3b:
c3:63:e1:6d:2d:98:f0:7d:7b:4a:27:27:61:10:fc:ee:f7:75:
34:9f:22:a8:fa:fb:8b:40:bc:c1:32:06:22:e2:7e:aa:f6:a9:
5c:f7:9c:fe:88:a4:d3:b4:7a:cb:30:fa:78:b9:ae:08:fd:56:
48:02:f7:c1:3c:bb:9f:95:54:7d:db:f6:9b:19:ca:d3:92:d9:
4a:d0:3f:9e:a8:5d:5c:a9:46:2b:98:10:a0:4c:82:c2:f0:dd:
f1:19:45:ef:84:ef:e8:9f:73:5a:f0:c3:16:37:0b:e3:cc:7e:
0c:98:96:35:9a:27:ab:ac:93:5b:c7:b6:cb:e8:81:d9:94:bb:
19:f5:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:40 2026 by rpki-client