Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: nt0TW2pRnrY/tajl4A4XxcFhZbRxr8dh0ZYJQE/1puk=
Subject key identifier: 21:90:4B:7B:3E:B1:C3:82:D9:F1:03:4B:41:86:59:C4:47:F1:39:63
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019F197A2488EAC47DD6865513327FFA56FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 133D
Signing time: Tue 30 Jun 2026 17:01:02 +0000
Manifest this update: Tue 30 Jun 2026 17:01:02 +0000
Manifest next update: Wed 01 Jul 2026 17:01:02 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: CGx0KaKrrfJeGM4l+95zyXUxemixookWhU/coo6b1YI=)
2: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
3: G8ok4WnRssMF_kSU0fMKahJetsU.roa (hash: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=)
4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
8: nU05wjCCjQdvD0N5GwShQguLcMg.roa (hash: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=)
9: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:24:88:ea:c4:7d:d6:86:55:13:32:7f:fa:56:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jun 30 17:01:02 2026 GMT
Not After : Jul 1 17:01:02 2026 GMT
Subject: CN=21904b7b3eb1c382d9f1034b418659c447f13963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:da:a8:5e:b4:1b:da:ac:96:d0:e9:50:a7:
83:25:8e:94:6d:f9:7a:42:48:fb:da:1e:27:53:45:
4b:9c:e0:29:a8:cd:b5:f7:5e:b9:82:20:2f:9e:2e:
c3:98:a9:2a:61:d4:af:ec:e8:ca:11:1b:1c:e1:a4:
dc:4f:1d:ed:83:01:18:9e:84:e2:1d:8a:43:53:fc:
f0:b0:82:94:49:07:8a:a3:aa:c2:2a:38:c9:06:b4:
be:4f:c1:2d:c4:97:9d:16:ea:8a:16:21:ea:89:b0:
38:f3:f2:66:8a:19:92:2c:2e:ed:52:23:1a:0a:b5:
15:72:41:03:f9:d7:8d:aa:90:cf:3e:a7:a6:f5:2a:
b9:a1:e7:32:a2:fa:5a:e9:38:4d:7f:b8:e9:03:3f:
b9:3b:8e:d9:27:29:65:4c:da:8a:4a:ab:36:f4:b8:
d8:de:5e:f0:38:ba:9d:f0:f1:07:6d:a4:19:19:15:
e2:eb:d8:79:89:4a:65:21:2a:6b:48:aa:59:bf:a8:
c4:68:cb:c3:ca:68:09:46:e0:b0:ba:bd:99:4a:15:
4e:e8:b5:d7:38:f3:72:36:91:20:7c:e5:c5:da:28:
d9:37:85:67:ef:41:b3:cb:d9:ca:20:38:e4:62:bf:
84:53:80:f1:cc:b3:e7:29:28:64:49:a5:a4:75:89:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:90:4B:7B:3E:B1:C3:82:D9:F1:03:4B:41:86:59:C4:47:F1:39:63
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c8:3d:91:79:ca:23:bd:28:d0:13:af:00:54:18:a6:38:f6:
92:9c:38:8d:1d:25:d4:e2:2a:01:ff:1a:61:55:97:e0:e0:67:
0d:c5:1f:11:83:15:19:a9:2b:5b:be:ae:4a:ea:2c:ee:1a:6f:
12:81:cf:54:24:5a:b2:9b:ca:72:c2:db:9a:d7:82:ab:fe:64:
3d:1c:8b:09:58:98:85:1a:d5:b4:ff:30:1f:38:34:83:6f:24:
b3:97:85:83:57:8a:4d:6a:ee:0a:c2:bc:44:77:c6:06:ba:6b:
25:fd:17:e8:f5:4e:cd:bb:2d:93:4b:68:9d:c5:10:6f:8c:49:
0c:70:85:5a:cc:ee:cd:de:f1:0b:87:95:78:61:7c:73:fa:cd:
83:00:d2:d4:82:76:21:32:d4:49:e1:68:60:b2:1e:fa:4e:e9:
79:d7:6a:d5:8e:81:81:dd:9d:0d:d5:b4:cf:32:75:5e:87:76:
93:71:e9:71:72:2f:e7:8f:eb:70:81:6c:ed:40:67:54:93:73:
2d:00:91:98:c9:d0:1b:7f:2a:fb:7a:45:f0:07:8e:e7:96:da:
2f:9f:e1:0d:d1:12:7a:99:14:ec:64:d0:18:66:3e:5a:45:67:
a0:40:12:a0:25:dc:b1:92:49:07:e4:3c:d8:f4:7c:9f:43:66:
34:5c:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:33:42 2026 by rpki-client