Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: YqytuvVYjmXCmaM+8Drdz0YNfHvyy3CjBgq4Ozh3iXI=
Subject key identifier: EF:80:FE:32:E3:5D:68:BA:D4:64:CF:3D:08:C0:53:91:A2:12:9C:2B
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019F1453AD773201CFBF2C6D4C229F99ADF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 117B
Signing time: Mon 29 Jun 2026 17:00:55 +0000
Manifest this update: Mon 29 Jun 2026 17:00:55 +0000
Manifest next update: Tue 30 Jun 2026 17:00:55 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: rm1NHn6pqhZfgTmcwKf1UAfXMDSVY501m5zIqwEZCp0=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:ad:77:32:01:cf:bf:2c:6d:4c:22:9f:99:ad:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Jun 29 17:00:55 2026 GMT
Not After : Jun 30 17:00:55 2026 GMT
Subject: CN=ef80fe32e35d68bad464cf3d08c05391a2129c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:ba:d0:e8:2b:24:25:61:6a:88:77:43:77:
95:ba:50:71:84:c7:a7:fe:58:27:06:90:60:78:af:
d7:ba:9f:8c:42:b5:c6:c6:2d:ca:b2:0e:13:31:62:
05:f1:03:97:86:b1:44:d4:7b:35:2e:12:c0:8e:1a:
50:da:3e:b4:0c:bf:51:e4:a2:f6:8f:05:e8:6d:7e:
25:5b:48:f3:01:cd:a1:38:2d:75:b3:2f:27:38:b5:
03:2e:c4:9e:e3:16:75:db:6c:b9:89:d0:bb:6c:b2:
5b:07:50:5e:e3:23:e1:cf:7d:73:bc:b5:ef:4f:38:
ec:4f:54:74:56:02:e6:a2:1a:86:88:fa:af:2a:63:
a2:46:0d:76:7a:d2:1e:9d:99:67:1d:78:2b:81:95:
83:c0:5b:0e:67:9d:10:11:13:8c:77:70:c9:34:07:
22:83:b0:4b:08:b3:41:39:d0:b5:94:9f:36:7b:af:
52:a4:c7:41:2b:73:c0:34:01:fe:79:ce:3a:da:77:
8f:00:03:8c:7f:5b:43:44:fe:f2:ca:ea:c6:5f:6a:
ef:62:40:21:21:b6:00:ee:1c:6a:cb:b0:c1:5d:9a:
07:36:e8:2d:67:79:6a:88:87:60:e7:d2:19:45:76:
64:49:96:c2:de:c5:34:56:e9:96:00:d8:07:42:92:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:80:FE:32:E3:5D:68:BA:D4:64:CF:3D:08:C0:53:91:A2:12:9C:2B
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:ee:17:2d:24:87:74:30:bf:6e:2e:9d:fc:41:82:c2:40:
bf:d0:ba:61:c9:e4:00:a0:7c:e9:03:64:32:b1:b7:34:f7:64:
0f:56:37:ac:6c:c3:a8:16:e9:1e:4b:8a:e2:fe:a6:01:64:9e:
e2:89:e4:f6:56:e6:c1:61:b0:33:40:d2:ff:1e:6a:d2:07:31:
87:92:96:bd:83:a0:13:b0:8f:dd:88:e7:d4:27:0d:e4:52:e8:
27:ef:0b:3c:81:77:23:be:7e:ac:de:e0:9f:dc:60:32:7c:e5:
cd:d8:d5:36:41:63:ec:3c:76:86:75:41:de:5f:ed:16:62:a3:
2b:24:6a:79:b1:ff:7c:a2:ec:67:09:29:9d:27:a8:5f:60:06:
07:31:16:60:7a:9a:f7:d4:25:8b:ed:16:09:8f:28:88:24:54:
0a:42:cb:34:b6:ab:6b:44:79:61:40:0f:78:33:44:42:fe:bb:
4b:0b:c3:03:15:ef:94:6a:36:0b:88:f1:ba:a3:ec:ad:d2:16:
d0:23:d8:37:ad:3b:58:38:84:61:ce:d6:69:eb:c2:a4:22:c2:
a2:5a:3c:46:7f:a8:11:31:5c:8f:57:35:c1:d4:1a:ae:47:ed:
f4:2b:a6:c8:bd:45:a0:78:ac:a2:69:9b:30:c1:ee:da:19:d5:
aa:c1:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:15:55 2026 by rpki-client