Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: gdlX2k6vu69zfGCjqGGKCdjYKHxOt/LbyDQFoN3pHxo=
Subject key identifier: 69:37:E8:F5:D2:99:AA:DD:49:BB:11:E9:42:4C:20:97:45:68:69:1F
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019FA0A91D19A5A729627689A1F204CFE6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0C17
Signing time: Sun 26 Jul 2026 23:01:05 +0000
Manifest this update: Sun 26 Jul 2026 23:01:05 +0000
Manifest next update: Mon 27 Jul 2026 23:01:05 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: cVk89dlXjB7sM907dlyKNpO5NcrK5i6bszt+0OWMjC8=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:1d:19:a5:a7:29:62:76:89:a1:f2:04:cf:e6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jul 26 23:01:05 2026 GMT
Not After : Jul 27 23:01:05 2026 GMT
Subject: CN=6937e8f5d299aadd49bb11e9424c20974568691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:ba:a6:6c:46:28:55:13:87:c3:21:39:6b:
64:27:a7:77:5e:38:9a:a2:55:20:2f:25:94:ba:1a:
28:3a:67:76:b8:8a:28:81:a2:6b:d6:1b:b8:94:e6:
1b:76:03:56:b8:b5:27:73:c1:28:01:9e:b8:e4:f6:
8b:06:71:c9:3e:a4:e5:55:70:75:f6:92:cf:e3:72:
22:9a:c3:b9:06:94:b6:d9:cd:03:dc:47:74:be:12:
9a:e8:a1:f2:39:d5:3a:cd:16:19:cb:dd:61:c2:db:
62:b4:ca:76:55:df:84:1a:06:73:9d:50:56:98:83:
7d:12:ef:b9:d8:6b:57:ab:4e:83:62:77:ca:3c:b5:
b5:1d:4e:65:e7:c1:0c:88:a2:2d:98:bb:70:3e:3a:
79:3f:9e:e6:cd:9b:24:1f:63:c7:56:87:77:35:76:
cf:30:5a:75:59:f8:31:e8:65:77:47:23:93:5c:b9:
ac:76:70:32:63:11:b0:1d:b5:84:70:b1:21:54:f3:
6c:03:aa:3f:e3:7c:99:8b:52:ab:12:1e:8c:02:0d:
9e:8c:3d:1b:2b:51:02:35:49:72:6e:00:bd:d8:8a:
4c:73:57:7d:9a:25:5f:6d:55:08:20:3c:a0:30:a4:
a0:f7:0c:48:c7:3c:6d:0b:93:31:b8:78:be:83:e7:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:E8:F5:D2:99:AA:DD:49:BB:11:E9:42:4C:20:97:45:68:69:1F
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:20:31:08:00:66:12:ff:ee:75:72:65:23:20:31:b8:a0:8e:
ff:64:0d:8b:41:df:07:11:73:d6:5f:4b:05:2e:4c:04:d3:7f:
94:25:83:97:a4:62:dd:df:12:b6:e4:46:3b:3b:bb:8f:4d:34:
e5:f5:dc:a7:62:01:ab:17:66:52:4c:cd:22:d2:23:7e:b2:4f:
fe:64:ba:5e:b9:a8:4d:86:82:23:06:58:f4:f5:0d:02:54:8e:
bf:69:1b:c8:6c:22:8e:da:00:9f:85:af:f2:02:8e:2b:51:29:
29:99:8c:d7:c8:9e:ea:63:53:51:63:86:9a:d3:1e:d4:18:d6:
34:f4:f4:6b:d1:ed:00:ed:c9:00:44:74:2f:7d:87:ff:b8:08:
20:74:bb:9e:e2:3d:92:ee:4f:75:66:cf:07:92:7f:60:e0:95:
2a:55:74:c0:75:74:ea:03:b8:f5:8c:e6:a2:25:e4:c4:ee:c8:
17:e8:ed:7c:f2:29:01:d0:4c:71:92:61:a6:a7:d1:bf:39:05:
9e:d0:db:e2:c7:61:d4:c7:1a:a9:04:bf:97:f3:ef:d6:dc:dc:
4c:f5:49:c3:e8:e3:07:0e:83:df:e0:ef:6a:0d:a4:c4:9e:25:
d2:19:e4:32:2a:bd:b2:f5:fd:43:40:6f:e2:fc:f0:b9:0a:af:
cb:c6:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:07:52 2026 by rpki-client