Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: hsnLwMkEsohzt4pQ/3XLzq9+SXaHo74/1Su4NB8shv8=
Subject key identifier: 9A:E1:14:1C:8E:7E:D1:44:52:A8:6B:68:73:C4:CE:47:5D:00:52:6F
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 019FA0E039C8437FCCAD11DCE306A6E206C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 0904
Signing time: Mon 27 Jul 2026 00:01:17 +0000
Manifest this update: Mon 27 Jul 2026 00:01:17 +0000
Manifest next update: Tue 28 Jul 2026 00:01:17 +0000
Files and hashes: 1: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: F8xUgb9pai8l7vbdRmzHhN5uRkW2qV4tU10hD30SMRs=)
2: Wj_qItvZ8nCv6IAqTKi7edGF_J0.roa (hash: g40LtFFYkGRLTg/R02uueeyuMPwHWbYTIxLpfiRgOHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:39:c8:43:7f:cc:ad:11:dc:e3:06:a6:e2:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Jul 27 00:01:17 2026 GMT
Not After : Jul 28 00:01:17 2026 GMT
Subject: CN=9ae1141c8e7ed14452a86b6873c4ce475d00526f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:83:29:68:d8:0f:8a:95:18:e7:b4:5d:17:
88:c6:a4:0a:ce:6a:9c:cd:34:d5:66:3c:00:12:54:
ac:cf:f6:cd:12:7c:28:ce:1d:1e:60:40:8c:a9:ab:
1d:4f:28:a2:ac:eb:dc:81:90:05:04:fd:e2:0e:17:
03:e5:b6:6d:29:ef:bb:ab:60:b7:2e:9b:60:60:6e:
19:8b:69:3c:b5:a9:f9:78:30:ea:4e:77:cb:16:7f:
d1:eb:f7:8f:fe:2d:b8:65:1b:6b:6a:da:93:2f:75:
16:79:d4:1c:a6:d4:38:60:5d:e3:df:e3:15:7c:94:
9e:24:f9:86:f9:7f:b2:d8:ca:4c:00:36:92:47:1c:
af:9a:07:eb:c5:ec:17:5b:39:25:ad:1a:1c:3e:bb:
63:cd:7f:89:26:c3:a9:35:26:14:7a:ee:7a:ba:16:
ab:e6:70:3e:11:9a:87:58:e7:3f:65:b0:e2:bf:55:
53:86:eb:a6:21:d0:3a:a2:f4:f7:ff:d9:b7:13:d6:
a5:70:2b:04:64:8c:7e:39:bc:ce:0d:aa:2a:95:02:
b0:42:77:64:4e:08:f1:8c:83:c9:d5:9c:94:11:36:
ee:5c:48:d5:21:c7:a5:d8:53:55:31:7d:57:c6:13:
59:fa:8e:68:a6:72:aa:0b:4b:a8:51:59:c4:00:51:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E1:14:1C:8E:7E:D1:44:52:A8:6B:68:73:C4:CE:47:5D:00:52:6F
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:08:b8:b8:92:59:1a:fc:6d:50:9b:a7:31:fd:cc:19:be:09:
68:9e:15:25:90:18:5a:78:df:03:b3:25:cf:c8:bf:82:6d:80:
c9:4e:9d:71:32:45:aa:3a:51:fe:7a:49:22:d2:f7:c2:ae:37:
2f:97:21:b4:fd:c0:bd:cd:c2:6f:45:93:7c:48:97:d8:55:af:
b8:a0:6b:95:98:45:c0:68:ca:4b:ce:a5:a1:d9:14:0f:22:d6:
f0:6e:c0:41:33:7d:b0:fe:29:b5:ec:d9:5b:54:c1:eb:b9:a1:
9d:ee:8d:ba:81:d2:0e:2d:19:e4:a0:43:6e:e9:23:de:48:c3:
98:dc:8f:ce:cf:d5:b9:eb:8f:c5:3d:5d:42:5e:84:aa:c5:b9:
ec:98:b3:6d:0c:2b:9c:1e:9d:62:b8:4f:b2:8b:f1:6d:61:6f:
24:43:b2:a4:cb:2d:31:76:95:1e:6f:65:d7:da:44:a7:65:4d:
47:b4:34:db:4b:52:c1:c6:e1:30:95:08:1b:6e:34:70:ca:f5:
c2:17:c8:37:5f:ac:22:56:aa:36:bf:4c:22:6f:a4:0d:74:94:
10:1e:06:43:9e:ba:1b:c2:4e:c7:79:9e:42:67:d2:03:7a:ce:
72:fe:57:8f:21:06:b6:bf:d9:74:e4:dd:e4:11:47:15:eb:7a:
53:92:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:54:00 2026 by rpki-client