Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: sv31mzMAuQFTbhEVoOI/3WhMuXLauUEE5N6pATqVZGM=
Subject key identifier: 6A:44:18:65:6C:1B:82:D6:82:8F:0B:64:D8:8E:0B:94:75:ED:95:AB
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 019F53A15FC076C40578A17CF9966599D1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 0A66
Signing time: Sun 12 Jul 2026 00:01:52 +0000
Manifest this update: Sun 12 Jul 2026 00:01:52 +0000
Manifest next update: Mon 13 Jul 2026 00:01:52 +0000
Files and hashes: 1: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: 2GMJUnoZsbTFhZlqSpQvTnnAE6/ndu5Nf0S0fW62dzE=)
2: uRy6lNHq57rdX7_VPdepBDiNmnc.roa (hash: 65Rm9CIooU3CDnzNITl4VhD3i1B6DOi7f6KdO4ec990=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:53:a1:5f:c0:76:c4:05:78:a1:7c:f9:96:65:99:d1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Jul 12 00:01:52 2026 GMT
Not After : Jul 13 00:01:52 2026 GMT
Subject: CN=6a4418656c1b82d6828f0b64d88e0b9475ed95ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:c4:a1:80:44:88:5f:32:bc:89:db:2b:3f:
2d:71:2f:4a:ac:45:86:df:c8:86:42:48:eb:78:6b:
dd:4e:96:03:58:00:b0:e4:88:ea:e1:5e:30:f3:34:
43:e9:39:bf:23:96:fd:37:97:95:ad:72:5f:41:bb:
bf:76:1e:2b:80:51:ee:2f:12:c0:6f:35:50:ef:e9:
5f:a8:f2:f2:5c:1c:a0:a7:80:19:02:17:c2:04:91:
7d:1a:b0:3b:3b:98:ea:cf:71:63:7e:d3:57:f1:0b:
eb:3e:68:40:f8:06:89:ef:c3:b6:ca:31:9d:7a:29:
e4:0d:65:42:ac:af:65:53:bf:8f:44:e0:db:91:a9:
94:47:81:fe:79:06:8a:dc:5a:17:c7:5c:a2:3d:d1:
bc:06:67:33:85:3f:56:c5:0b:69:2e:27:b8:ab:a3:
1d:67:99:5e:7a:18:3b:e0:6d:0c:5f:fb:7e:9a:d1:
23:64:73:07:16:f7:28:3c:16:a9:8b:f5:73:f8:da:
5e:11:3d:4d:4e:28:72:fe:4b:97:e8:4f:01:40:e8:
07:ab:1f:67:02:1b:f8:a4:37:cc:d0:0d:9e:9f:a8:
7a:01:8c:51:b3:60:d6:87:86:b3:44:6f:d8:79:b7:
ea:18:57:aa:0c:4c:7c:72:05:a4:80:2c:a9:de:8c:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:44:18:65:6C:1B:82:D6:82:8F:0B:64:D8:8E:0B:94:75:ED:95:AB
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:25:33:6a:c8:05:86:30:bf:73:72:d7:3b:f7:f7:b3:b0:96:
2e:77:d3:11:83:55:03:3d:d2:ab:0e:1c:ba:fb:e7:69:09:29:
de:00:c9:06:87:09:db:28:83:de:d3:74:31:d7:9a:83:72:5d:
8a:7f:5c:d0:b7:a2:fb:42:73:39:34:e8:ce:75:ac:5e:d3:e6:
34:c1:ad:fb:e5:07:a5:d2:c0:31:ed:53:ef:6a:8f:a8:8c:79:
31:28:71:13:91:5e:68:7c:6f:c5:45:c1:c2:ee:1e:ff:b0:69:
86:5e:44:7d:4b:1f:34:2e:ac:94:dd:16:4d:b4:ea:62:3b:a3:
4c:9f:fe:2a:e0:27:ec:a7:4b:d5:87:bc:3d:f1:f7:97:0c:4b:
bf:40:a6:69:37:eb:42:fd:07:ed:5a:00:88:7b:7c:b7:4e:09:
3b:4e:f1:9e:f6:82:b1:43:d6:a8:17:1d:0a:7c:78:89:94:1a:
34:2e:bc:80:e6:8e:f0:0a:82:a2:38:59:e4:9f:e9:2b:f2:7f:
7a:65:fb:1c:97:e5:d3:49:ec:2c:3c:45:4d:01:10:2a:7b:7a:
b3:f8:96:2e:8e:01:22:90:1e:82:28:20:9a:b5:c2:ca:51:8f:
65:0a:43:9a:8e:00:4a:41:d0:ea:72:26:68:62:46:76:cf:6e:
0f:16:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 02:19:41 2026 by rpki-client