Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: 7CTjj99dhM1t4SkSmSMQ1+Hz7j5IOFWBaE+/uy2Sn98=
Subject key identifier: 17:41:B0:12:DB:21:1C:B8:03:C0:D1:9E:0C:74:9D:7E:E4:F3:70:53
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 019F8154BC2A25C4E8670CD0B1B59FE8A839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0E94
Signing time: Mon 20 Jul 2026 21:00:41 +0000
Manifest this update: Mon 20 Jul 2026 21:00:41 +0000
Manifest next update: Tue 21 Jul 2026 21:00:41 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: EhqNOQRpKLD91WyhiAmfNUE9LuLa/e/e2eusxL0OY8g=)
2: 3oaI4BJ1PfZU5ToAgLWtvl5NwhU.roa (hash: 3ZrLLG5oIpjvCZLR27J2YMVw+al6VtK2RFAJCZ4jGnc=)
3: cJFbLtaeoUfXlMt793s1Sx4oIHk.roa (hash: Q8rXRF1zW51xxj2bD+8pa1r9iTu2h5oDnFm7rQ/g/G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:54:bc:2a:25:c4:e8:67:0c:d0:b1:b5:9f:e8:a8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Jul 20 21:00:41 2026 GMT
Not After : Jul 21 21:00:41 2026 GMT
Subject: CN=1741b012db211cb803c0d19e0c749d7ee4f37053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:3e:59:46:73:56:7d:47:68:dc:c9:bb:56:
0d:f4:51:a9:26:a4:b5:93:1c:40:01:75:39:ed:25:
ac:74:2a:96:10:0e:5d:7d:7c:cd:19:e0:4f:d3:ff:
85:43:11:6b:56:05:84:5b:05:b8:73:74:bf:33:b6:
90:2b:62:16:ea:9b:03:05:65:2d:12:52:57:81:bb:
3f:56:4e:88:05:0f:52:44:29:c7:7d:e4:7b:b5:de:
cd:5d:5d:68:0e:42:e6:b6:04:f8:c1:65:fa:e0:97:
00:94:db:27:12:bc:5d:f8:42:72:7b:71:a9:b1:eb:
e1:db:83:02:af:ed:d7:9d:31:70:d3:35:91:ac:2b:
b0:ec:c2:34:e9:8f:2a:d4:87:cc:78:b4:e0:6f:ef:
8b:58:fa:a9:87:f9:46:94:17:4a:53:b6:06:f6:99:
31:63:27:a0:ef:8c:7b:17:9a:ad:1d:05:7f:7d:23:
98:05:bf:25:3c:30:52:32:17:04:45:b5:77:be:fd:
c9:84:d0:c7:da:81:cb:d8:e5:c8:d2:f1:7e:1f:da:
b3:04:82:32:ba:a3:41:7a:60:8e:64:58:69:86:5d:
7b:c2:97:ad:19:d3:9f:a6:93:33:e5:51:eb:23:8a:
1d:e3:3d:0c:de:51:c7:e6:8a:00:d3:c6:a1:a6:fc:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:B0:12:DB:21:1C:B8:03:C0:D1:9E:0C:74:9D:7E:E4:F3:70:53
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b0:06:92:83:8e:96:d7:af:50:a6:57:5a:e0:87:5a:cb:9b:
04:02:2a:5a:7a:08:3c:d5:16:d0:dc:e0:ca:d8:ba:97:cd:38:
ee:19:87:75:3b:fd:7f:74:34:90:c5:70:82:39:e5:3e:50:81:
c2:c0:cb:d2:27:83:cf:4a:f4:fb:e2:91:42:23:55:db:4d:09:
ff:49:5a:bb:5e:24:0c:ff:24:32:4d:5d:a7:ee:9a:ff:7a:6e:
f1:bd:9c:ef:fe:0b:a2:a4:e0:83:bd:44:0a:73:8b:d0:3b:02:
1a:39:0a:3b:fb:55:e5:1c:41:c8:64:2b:70:b4:79:b5:7d:9b:
0b:a0:24:39:b6:82:7b:28:30:8d:a5:65:bc:48:7a:b4:31:04:
3c:d6:8e:0c:b2:1c:8d:0b:6e:76:d3:a7:da:17:78:a0:b3:4f:
53:09:d5:a1:33:23:7d:76:2e:09:60:74:80:87:75:96:2b:77:
30:a4:f0:c4:e9:6c:6b:ad:3e:29:29:03:42:44:ef:e6:6b:8b:
7d:3a:4f:c3:c2:8d:37:c6:15:b8:a5:fe:7d:a3:c3:08:ec:1e:
b0:b0:c0:35:8e:8f:12:12:5a:0b:e0:5d:cb:b0:df:67:a6:4d:
26:fa:d3:78:4c:bf:24:a5:d9:20:6f:29:80:77:bb:17:82:5a:
f2:6b:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:45 2026 by rpki-client