Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: afV5NQsuyYOjfhEHr6asseO2Wme3YU5FzqudtdjdE1I=
Subject key identifier: 1A:DA:90:50:63:6D:BF:69:B9:A8:07:60:27:E0:09:63:DC:31:51:25
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019FA1845F457C4557C34ED4C0B205A828C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1900
Signing time: Mon 27 Jul 2026 03:00:34 +0000
Manifest this update: Mon 27 Jul 2026 03:00:34 +0000
Manifest next update: Tue 28 Jul 2026 03:00:34 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: 7zP9v/wAIXDLfYGylauqpDpyB7xy6jpF1kt7YUR6JK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:5f:45:7c:45:57:c3:4e:d4:c0:b2:05:a8:28:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Jul 27 03:00:34 2026 GMT
Not After : Jul 28 03:00:34 2026 GMT
Subject: CN=1ada9050636dbf69b9a8076027e00963dc315125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:cc:08:9c:fc:d1:43:6b:aa:8f:d5:ff:59:
a2:aa:70:93:17:d7:71:e9:97:0a:f2:c3:00:15:d4:
b8:df:5f:64:6e:da:b0:0f:af:01:25:89:25:08:a0:
70:8a:51:58:3b:9c:2b:a4:62:38:6e:9e:c4:56:dd:
c7:2b:ec:23:d7:3b:3b:ef:fc:b7:66:65:65:b3:52:
f1:c2:55:d3:10:d4:96:94:cb:21:40:36:ef:33:13:
9b:80:15:f0:56:4d:9a:a7:6c:c8:51:71:8c:47:83:
38:66:ae:75:81:cc:de:86:f3:f6:07:21:dc:1e:02:
fb:3c:fb:35:7f:4f:75:96:80:26:b9:c4:4b:db:2c:
ca:ec:29:2c:17:fe:df:ee:cb:d0:7e:84:3b:23:40:
e6:5f:31:cb:b0:c2:23:1c:32:ca:0d:06:77:f9:2d:
d0:42:92:b7:5a:2b:5e:9f:5b:a4:19:54:35:00:09:
3b:a7:aa:7f:04:07:66:52:35:ab:5e:08:44:c0:6d:
58:bf:88:c1:cc:a5:0c:95:e2:2e:05:f2:59:f6:bd:
d7:01:87:63:99:90:85:80:04:58:94:e2:62:86:15:
3d:b8:4f:ca:2f:fe:b6:90:f9:9f:c9:e1:ad:db:01:
1b:c5:a2:a9:5a:52:66:6c:1f:9f:26:25:e4:5d:c2:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DA:90:50:63:6D:BF:69:B9:A8:07:60:27:E0:09:63:DC:31:51:25
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3e:41:5d:c0:06:e0:3a:64:80:23:7e:01:97:1c:84:c2:34:
1e:86:fa:e1:7e:c0:02:fc:cd:4c:94:62:64:5f:ec:62:e9:e3:
ee:94:bc:2a:b7:b8:d3:34:2f:79:c3:b6:c5:2f:61:8a:92:fa:
9d:76:79:6c:cc:a8:3f:7a:cf:ce:0f:bf:5c:08:c6:86:16:34:
94:69:8c:1e:d5:b9:b6:ca:57:a2:15:f2:76:9d:84:c8:83:0a:
7c:02:9d:0f:8d:13:0c:42:15:68:8f:f3:c9:b7:3f:f6:1b:aa:
c6:11:51:97:77:33:4c:61:b4:1f:6f:39:50:33:eb:51:8a:5d:
d7:2b:ab:87:9d:90:a1:7f:9a:15:e4:ee:4c:6f:b6:7f:39:60:
43:6b:72:80:5e:b6:22:65:f0:0e:58:2c:76:f2:d5:ba:58:1d:
98:26:f9:6d:b2:b8:a4:ca:d0:d4:cf:c5:a2:7c:89:54:f9:f1:
30:03:5a:07:4d:c2:52:07:d4:0f:84:a7:e9:52:fe:43:ef:2b:
66:74:01:26:d9:8a:6d:9f:d5:78:9e:b5:f5:f0:72:43:22:70:
68:a1:de:d8:81:ee:da:54:cb:8b:39:5a:1e:34:3f:46:ef:6f:
75:21:f4:c6:2b:9e:ae:eb:76:a4:24:31:85:2c:c3:1d:c4:63:
3c:5e:a4:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhF9FfEVXw07UwLIFqCjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2
YjgyNGUwHhcNMjYwNzI3MDMwMDM0WhcNMjYwNzI4MDMwMDM0WjAzMTEwLwYDVQQD
EygxYWRhOTA1MDYzNmRiZjY5YjlhODA3NjAyN2UwMDk2M2RjMzE1MTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYnMCJz80UNrqo/V/1miqnCTF9dx
6ZcK8sMAFdS4319kbtqwD68BJYklCKBwilFYO5wrpGI4bp7EVt3HK+wj1zs77/y3
ZmVls1LxwlXTENSWlMshQDbvMxObgBXwVk2ap2zIUXGMR4M4Zq51gczehvP2ByHc
HgL7PPs1f091loAmucRL2yzK7CksF/7f7svQfoQ7I0DmXzHLsMIjHDLKDQZ3+S3Q
QpK3Witen1ukGVQ1AAk7p6p/BAdmUjWrXghEwG1Yv4jBzKUMleIuBfJZ9r3XAYdj
mZCFgARYlOJihhU9uE/KL/62kPmfyeGt2wEbxaKpWlJmbB+fJiXkXcL0owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrakFBjbb9puagHYCfgCWPcMVElMB8GA1UdIwQY
MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt
YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh
LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYT5BXcAG
4DpkgCN+AZcchMI0Hob64X7AAvzNTJRiZF/sYunj7pS8Kre40zQvecO2xS9hipL6
nXZ5bMyoP3rPzg+/XAjGhhY0lGmMHtW5tspXohXydp2EyIMKfAKdD40TDEIVaI/z
ybc/9huqxhFRl3czTGG0H285UDPrUYpd1yurh52QoX+aFeTuTG+2fzlgQ2tygF62
ImXwDlgsdvLVulgdmCb5bbK4pMrQ1M/FonyJVPnxMANaB03CUgfUD4Sn6VL+Q+8r
ZnQBJtmKbZ/VeJ619fByQyJwaKHe2IHu2lTLizlaHjQ/Ru9vdSH0xiuerut2pCQx
hSzDHcRjPF6kwg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:28 2026 by rpki-client