Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: 5GJ8Dpm+rl5g4wCx3AgtL+nfAF+Qozis8CB1Dk/mE0Y=
Subject key identifier: 1A:63:2D:C8:45:12:85:83:26:8F:D3:0C:A8:2F:A6:65:3D:1A:DC:6F
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019E698630B0FD73296392B10C6115EDA44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 192D
Signing time: Wed 27 May 2026 13:01:02 +0000
Manifest this update: Wed 27 May 2026 13:01:02 +0000
Manifest next update: Thu 28 May 2026 13:01:02 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: j7tnS5wWgXhl3EvKEI0xUjO6A1oaqQVgiqZN0Lu9/2Q=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:86:30:b0:fd:73:29:63:92:b1:0c:61:15:ed:a4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: May 27 13:01:02 2026 GMT
Not After : May 28 13:01:02 2026 GMT
Subject: CN=1a632dc845128583268fd30ca82fa6653d1adc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:b8:9a:a2:20:4a:8a:f3:aa:40:f3:da:de:
a4:67:15:90:52:ab:b3:0e:b7:28:79:ac:2b:aa:f9:
a7:4c:cd:a6:e6:86:12:f7:5f:56:0c:ba:e6:82:df:
b0:43:21:5a:ca:7a:46:33:3e:70:82:c7:46:47:8f:
a3:5a:ab:94:bd:33:98:cf:8a:26:26:6b:b9:3b:d3:
1c:80:9c:ab:fc:c0:5a:45:db:4d:4b:85:c6:96:e0:
4f:82:ea:af:2c:c8:f8:34:e4:a0:0e:d3:75:8f:5b:
7e:f7:b1:eb:7c:85:4d:78:ec:15:6b:ce:46:7c:22:
da:fd:2a:0c:73:6a:f0:32:48:e2:ca:5b:8f:41:ac:
f8:24:a8:5f:dc:b6:3e:db:ee:f1:87:bd:77:f4:41:
bd:d6:3d:9b:aa:4b:56:f9:ea:da:a1:ea:3f:0a:15:
74:56:ea:d7:6e:19:b4:d3:79:cb:e5:36:67:87:02:
c1:81:aa:d5:a7:32:f2:a2:9e:4a:f5:15:4c:34:ee:
88:ca:62:a2:cf:f6:64:66:c7:bd:52:a8:a9:f7:08:
7e:4c:43:e7:ea:33:be:4a:3a:f2:0b:7b:3c:46:5c:
97:bf:58:4b:42:e9:93:5d:0b:ef:3f:32:d4:5d:cb:
ce:bf:e2:8b:7f:e8:6f:13:f8:90:cf:cc:e8:d6:19:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:63:2D:C8:45:12:85:83:26:8F:D3:0C:A8:2F:A6:65:3D:1A:DC:6F
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:39:7d:22:21:c8:d5:91:18:bc:32:d0:01:db:6b:8f:75:
86:04:ee:80:2d:85:83:3f:c0:9e:8e:af:38:16:49:62:02:87:
eb:a2:12:90:44:cd:d7:61:bc:67:4e:88:12:0a:48:84:95:f3:
ce:be:b3:ef:8e:49:3f:ef:ab:2a:11:9b:e2:12:a0:2e:85:3e:
e8:dd:d9:85:a8:f0:52:ba:45:db:d7:62:40:78:de:ab:05:e8:
44:0a:ad:ee:e5:36:43:07:22:70:20:5e:42:83:7b:34:6a:74:
94:5f:6e:43:fd:d9:f0:79:c5:f1:47:f0:98:d4:a4:79:4d:d9:
af:18:24:8a:e5:8b:cc:f4:e7:79:9a:5b:2f:97:02:78:7e:95:
d1:5f:f9:05:8a:a2:87:97:ac:3c:b7:0d:24:a5:99:94:6e:16:
b2:c4:03:c7:0f:ce:57:79:8b:82:16:5d:42:7a:c5:e3:b2:fa:
d5:e1:9d:fb:7a:ba:2f:1f:8d:f6:f6:4a:4c:5d:2f:2c:d8:c6:
1b:ca:a3:99:8e:b1:10:8a:f4:1d:34:61:eb:9a:14:4c:71:ff:
9c:2a:5e:cb:10:bd:9f:b0:46:e1:8a:b0:c6:c3:31:51:26:02:
17:3a:89:75:70:f4:0d:e2:85:58:50:c9:bc:5c:72:09:55:f4:
65:5a:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 18:19:55 2026 by rpki-client