Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier: izKxE2S7zaR+mLzisEDkMU0J/Cllf994yeV6mItLqrQ=
Subject key identifier: 1D:86:80:09:B9:D7:1D:1D:A1:78:16:8B:9C:7B:45:68:C1:53:6B:7B
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer: /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial: 019F86B1A17AF63D6FB873873DC9EE66A273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number: 1250
Signing time: Tue 21 Jul 2026 22:00:15 +0000
Manifest this update: Tue 21 Jul 2026 22:00:15 +0000
Manifest next update: Wed 22 Jul 2026 22:00:15 +0000
Files and hashes: 1: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: zU29EMlw/H3LDqpmGqvyhPivjI4NhdUEZyuxB84NWKo=)
2: yk4NlmsnyBCHJU5rRWtCYUNukhY.roa (hash: RTQQ5QrcW0bLs5QDvpSA/0ZM/8To3uVOT0sFVQ3EI/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b1:a1:7a:f6:3d:6f:b8:73:87:3d:c9:ee:66:a2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Validity
Not Before: Jul 21 22:00:15 2026 GMT
Not After : Jul 22 22:00:15 2026 GMT
Subject: CN=1d868009b9d71d1da178168b9c7b4568c1536b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:a8:31:0a:2a:83:cf:91:b3:55:83:5b:13:
06:82:f7:5e:72:b3:a3:c2:0b:17:a0:03:54:1f:6a:
9d:29:10:36:dc:23:78:46:b5:c1:60:98:82:14:c7:
c5:dd:2e:31:db:72:0d:77:21:7f:ae:69:a1:b3:4a:
3a:86:9b:b6:ea:0a:a7:99:06:e3:4a:66:2b:1f:70:
df:37:85:62:4e:86:62:f4:4f:8e:0a:8f:37:06:bb:
22:30:d6:b4:77:39:28:86:c2:54:46:1e:bb:b6:ce:
29:00:9d:b8:34:6e:da:0e:b1:c3:1b:c1:30:d2:e6:
74:f5:8f:8a:81:ca:9e:4a:71:a3:7c:a5:da:6b:f1:
21:f8:26:e4:17:c3:ad:42:f7:ee:e4:21:b2:2e:84:
2a:49:62:d7:bc:5e:67:1b:65:51:5e:8f:37:b3:51:
b7:06:3c:64:ee:77:3e:db:a1:22:a6:6d:b8:44:dc:
50:4a:8d:ed:f7:ad:0a:b6:0a:b7:96:a2:54:77:56:
16:c8:bf:81:bc:70:44:22:a1:70:cd:a0:6f:d8:2e:
f5:87:97:5c:bf:53:f5:1f:cb:64:85:43:ef:f8:c6:
38:2f:0e:14:5a:45:cf:bf:80:99:47:ad:5c:67:40:
60:62:be:ca:85:90:17:e6:98:64:e4:c5:58:a8:df:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:80:09:B9:D7:1D:1D:A1:78:16:8B:9C:7B:45:68:C1:53:6B:7B
X509v3 Authority Key Identifier:
keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e1:dd:31:ba:b4:6f:57:cd:8b:03:b4:17:21:5e:d7:c3:4b:
7c:6a:ac:4f:c5:b7:84:0d:0b:3c:35:8c:81:b1:96:10:be:e4:
de:dd:7a:a2:22:d3:18:be:e9:c3:58:d1:c8:f7:c6:36:c1:b0:
39:93:d6:90:a0:6d:aa:fd:b5:e3:bb:95:01:b6:ec:d8:ed:ca:
8b:ba:e5:e4:4a:5d:d3:59:2c:d6:d6:79:ec:25:e4:f4:0b:c7:
0a:d6:9c:9c:51:9d:a7:48:32:87:5c:5f:0d:46:08:d7:0d:fa:
7c:89:fd:16:35:e7:30:94:ad:9d:ed:94:f6:d7:1f:10:d1:af:
aa:df:46:b3:6a:23:0d:64:55:cf:01:5e:c1:2a:26:a3:bf:f2:
96:b3:9d:1d:53:cb:cd:f8:60:a9:04:f4:46:ae:37:f1:b0:11:
5c:bc:9d:8c:d2:c7:37:0e:28:0b:62:89:2b:e3:f1:bf:3b:14:
d9:c5:39:00:ef:2e:9b:50:07:b8:46:d0:f6:ad:57:ae:5c:87:
fd:c9:48:75:c3:97:8b:2c:a7:f8:2e:3a:c2:06:ab:dc:6c:12:
16:0c:b7:d0:e0:35:be:11:36:44:61:c4:ca:f9:fb:bd:14:17:
33:6d:2f:f1:f1:94:7b:9a:fe:60:34:3c:e9:d5:60:ad:0a:4d:
65:0d:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:47:17 2026 by rpki-client