Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: we+UgW0jVxbBhhfwDH7HkgFTWvuEyP35PKpKgn3D4X4=
Subject key identifier: 2D:5F:C7:97:9A:3C:42:35:0E:59:55:2E:96:E5:55:D4:F9:58:EC:F9
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 019FA184251BD89737272D5D6975003BED57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 16A2
Signing time: Mon 27 Jul 2026 03:00:19 +0000
Manifest this update: Mon 27 Jul 2026 03:00:19 +0000
Manifest next update: Tue 28 Jul 2026 03:00:19 +0000
Files and hashes: 1: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: 1bYeE9loF1knXQIjN+++OpVtYv4mGFcjdhWiZFm/p6A=)
2: rlMjya3NsVVgO1waTc6yGFx9urk.roa (hash: 9FM63jOjz4W8peZkAPQ1K8fUNKLUxM1YrAhzY91gkyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:25:1b:d8:97:37:27:2d:5d:69:75:00:3b:ed:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Jul 27 03:00:19 2026 GMT
Not After : Jul 28 03:00:19 2026 GMT
Subject: CN=2d5fc7979a3c42350e59552e96e555d4f958ecf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:06:de:27:2e:12:e3:3f:07:91:2d:89:59:
1a:52:15:b8:12:3f:cc:7a:0d:40:e0:89:5a:c7:58:
d6:89:98:36:23:f7:61:fe:bc:cd:37:e6:fd:16:70:
b5:b7:a3:ca:ef:65:23:2c:61:aa:25:2e:bd:df:b3:
7d:4c:0e:0a:3d:b0:74:74:d6:4d:eb:7c:65:ca:85:
66:7b:8c:6f:f9:a6:07:5f:64:de:ba:c2:5a:31:cc:
37:47:8d:78:93:57:70:7f:a2:05:44:70:91:f8:f9:
bc:9a:a3:86:10:fc:37:1d:37:b2:c1:5d:4a:47:a9:
26:03:97:ca:30:fa:f9:e2:b7:f1:bc:87:11:bc:a8:
d2:c3:07:6e:28:80:3f:2f:18:3a:37:50:ef:94:6e:
8d:06:1f:99:d4:bc:a4:48:aa:06:3c:da:81:89:b4:
5c:36:3e:8e:f4:e5:d4:7a:0c:e1:03:ed:d9:89:11:
8a:d6:c1:fe:67:b9:e3:d4:62:42:cf:ee:8c:2f:0f:
8b:3c:49:88:f0:20:17:28:72:6f:18:b8:5b:f8:c1:
81:21:7f:b4:8a:b1:b5:9a:4a:fa:70:de:88:65:8d:
30:b6:45:74:7f:70:bc:86:1a:b3:87:34:82:50:73:
70:6e:f0:ca:72:74:11:6f:39:32:2c:24:53:1a:8c:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5F:C7:97:9A:3C:42:35:0E:59:55:2E:96:E5:55:D4:F9:58:EC:F9
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6a:db:0c:ca:72:36:0d:e6:54:26:d6:09:ca:00:11:a9:69:
89:4d:a7:8d:2b:be:e6:c8:54:97:5d:48:60:44:9d:d0:eb:4d:
6a:84:e6:24:11:38:4a:9e:1f:27:fd:cd:1d:c4:b7:de:0e:97:
d7:a4:ca:62:c5:fe:7b:48:ff:9d:57:fb:1b:24:52:6e:d0:04:
5c:5f:0f:dd:14:40:d4:36:f0:19:88:4e:48:0d:7f:b2:11:bc:
74:60:1a:9f:b8:97:48:50:c3:c7:12:c6:b1:4a:b6:39:00:1c:
78:c6:c8:8e:2f:2a:a9:37:0f:e2:81:19:ca:39:86:31:16:69:
7d:03:98:fa:7f:65:91:a2:43:0f:f2:1d:c8:b8:ec:8f:24:c1:
f1:d0:db:b2:82:82:16:08:40:e1:e8:d5:00:c1:12:07:42:ae:
b2:55:d1:67:bd:e6:87:ce:9f:12:15:2b:70:f4:52:74:1d:8a:
98:6e:81:37:a2:e1:f1:a9:81:65:92:4e:7c:7a:7c:5b:11:af:
2f:36:1a:56:c4:94:5b:8e:05:58:ca:f5:cd:1b:b2:5d:21:49:
e2:6a:b7:f1:c0:c6:08:b7:9b:60:d0:3b:25:c7:3a:e8:86:c2:
04:33:de:ae:08:e4:eb:c6:75:f2:f8:93:cd:f3:c5:d4:af:fb:
7f:a3:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:22:19 2026 by rpki-client