
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
File: JQQakk7oOTLBjogOQerd-nzyy7M.mft (raw, json)
Hash identifier: e6E5Np80SZHywxVTgJgsgYTKgfHGrTxUyg47sxUHExE=
Subject key identifier: FE:FA:7D:F5:4C:69:55:49:8C:E3:19:77:BE:2B:BB:DB:AD:39:74:C4
Authority key identifier: 25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3
Certificate issuer: /CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
Certificate serial: 01A0016EFD396E87E4295AD5356254DAAC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:00:45 +0000
Manifest this update: Fri 14 Aug 2026 18:00:45 +0000
Manifest next update: Sat 15 Aug 2026 18:00:45 +0000
Files and hashes: 1: JQQakk7oOTLBjogOQerd-nzyy7M.crl (hash: W4dv1aRHT1rsCp/pSkUL1Fx1xBeLG5FVtmqSHVg1KPg=)
2: gqBVZEVuiZ-zx9jxMYipRTJwia4.roa (hash: j0pbo/Vqg06cGHRaMHKMNgMf3A2mm2wCn/7xVagvqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:fd:39:6e:87:e4:29:5a:d5:35:62:54:da:ac:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
Validity
Not Before: Aug 14 18:00:45 2026 GMT
Not After : Aug 15 18:00:45 2026 GMT
Subject: CN=fefa7df54c6955498ce31977be2bbbdbad3974c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:db:3d:f3:f6:78:75:bb:58:b4:9f:20:d9:49:
c5:a1:db:07:74:cf:8b:3b:cc:fe:f8:7a:fb:c7:4f:
63:55:a9:40:a4:be:e6:76:75:6c:94:4c:3d:d4:6d:
44:a8:d9:32:92:21:6d:23:15:10:19:9f:eb:f7:b2:
9d:0b:9f:89:64:8d:e6:e6:b7:e9:a4:3e:64:5d:db:
78:e7:84:72:22:2b:34:0e:cd:82:a3:31:75:ab:8f:
b0:7d:f2:a1:98:d5:a2:e1:6f:de:26:df:69:56:6c:
e5:97:ea:87:ff:23:d8:75:f2:9a:64:ce:ac:22:04:
8c:34:50:bb:08:1d:0a:fd:37:a1:30:38:0b:dc:4d:
60:10:eb:73:51:e0:72:89:0b:24:a4:5e:98:24:a6:
03:49:64:23:67:9f:6b:d0:b8:b0:54:f8:5e:5e:1d:
08:6f:a2:e1:d7:2e:0d:de:ce:f8:bf:d1:53:a5:29:
a4:c7:ea:c6:0d:c5:30:bd:4c:f4:5a:f2:8c:7a:26:
a6:90:05:63:60:e0:88:ba:7d:03:b1:da:86:4c:5f:
9e:f9:f3:b7:ff:22:85:41:d8:5e:bf:92:02:49:b4:
f7:fa:92:49:2c:52:dd:a5:a3:f4:e5:8f:0d:c3:c1:
06:12:c7:64:73:cc:61:03:3f:6d:9a:59:e1:fb:6b:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:7D:F5:4C:69:55:49:8C:E3:19:77:BE:2B:BB:DB:AD:39:74:C4
X509v3 Authority Key Identifier:
keyid:25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:91:7d:3a:36:60:b3:e5:2c:7e:c9:6b:7a:a6:ce:5b:b3:20:
40:9f:92:e9:b0:e0:8e:21:52:07:03:3d:75:5e:b7:d4:c0:52:
c0:d7:5a:4f:1f:3d:00:63:19:05:e7:0c:01:0b:0a:3e:f5:fb:
7c:45:91:36:95:4c:c7:a0:64:d4:17:1c:3c:51:0b:01:b9:00:
67:5d:21:05:a6:01:71:e4:f9:2d:e2:b9:ef:8e:be:1f:5c:07:
b8:89:ad:39:09:01:4d:46:51:bc:b2:67:c9:6b:32:0b:51:81:
1b:88:6e:bd:39:27:0c:ef:46:34:cd:dc:66:4a:6e:07:c5:81:
63:04:58:db:0d:cb:43:d7:ea:fd:bb:a8:e5:db:c6:3c:f9:23:
83:8d:70:3f:63:66:92:eb:6d:8d:15:49:aa:cd:9f:a1:31:e5:
f5:49:89:57:dd:4b:59:ba:27:ba:e2:d3:28:a9:bd:e5:98:52:
e3:b1:71:a0:c8:60:02:7b:d1:fe:0b:d8:f6:e0:2d:ec:c9:78:
c8:40:fc:5c:45:64:e2:5f:ae:ef:99:29:33:86:de:87:7a:31:
0d:42:96:ad:9c:e8:93:2e:10:9d:32:f6:af:4d:07:80:02:12:
40:29:19:df:a7:23:a3:0a:13:b9:ae:ce:cf:bf:fa:85:31:ef:
e2:c4:42:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:06 2026 by rpki-client