Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: S79QP+27kxuUUjJFioPtKRDUB7vBVSIkFjhWf+G1Zh4=
Subject key identifier: D1:96:29:F8:A8:49:15:57:4D:70:03:64:A2:DC:78:CA:EC:77:5C:DD
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 019F1265F4DAECD045F48183E593F2420CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 08:01:39 +0000
Manifest this update: Mon 29 Jun 2026 08:01:39 +0000
Manifest next update: Tue 30 Jun 2026 08:01:39 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: mH1x3KC6ai9qXng0fLywaGZJjWFGNrMDpxebYMhcfGI=)
2: P1yj3gjDhxChJcFO8Skm9pkXt48.roa (hash: xfZq4sva3XVYvdr878z0V/BBEkb+f01RPeig0MyhrEo=)
3: ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa (hash: 7GTm6dNpL+1aKtBHlqS15Lk5zVrRS8hQJ81O+NY5Eh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:f4:da:ec:d0:45:f4:81:83:e5:93:f2:42:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jun 29 08:01:39 2026 GMT
Not After : Jun 30 08:01:39 2026 GMT
Subject: CN=d19629f8a84915574d700364a2dc78caec775cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:de:9b:f7:0f:9c:e9:34:05:95:ec:e2:f1:
4c:48:37:a3:67:f4:0a:cc:0e:fe:71:d3:dc:30:df:
66:44:e4:59:86:77:5d:5b:77:f1:a0:ac:3d:9e:67:
4e:5d:07:e8:a0:cf:eb:d2:95:f4:cc:4b:47:5c:5f:
43:1c:bf:75:ef:5c:a8:d7:80:7a:73:de:29:63:38:
fd:e1:3b:8c:57:c8:9f:52:9a:42:71:aa:ff:00:1f:
2b:e8:23:15:46:18:b1:7b:77:d4:70:b1:33:c2:06:
7c:d1:d8:7f:d6:31:48:89:41:7e:ce:59:c7:a1:69:
70:f9:6e:3c:c8:94:a8:1f:f0:55:23:ae:7f:08:70:
fd:71:10:b6:9b:be:81:9d:51:e2:e7:86:18:22:b7:
5d:cc:0b:ed:45:94:10:de:d9:1f:ab:3f:4e:00:87:
a2:82:5d:05:ea:25:45:e8:27:26:da:1e:56:20:0a:
d7:aa:9a:1e:9c:47:3a:7b:89:86:e9:a1:73:c7:5b:
94:7e:39:0c:45:08:65:c0:b6:09:9e:90:ea:43:40:
d4:76:69:6b:c0:10:11:7c:ef:ff:22:08:49:6b:85:
f9:1f:d9:97:13:5e:1c:69:9b:ce:53:24:3c:ed:8a:
bb:d7:54:76:a6:6d:ef:b1:03:bc:ab:6e:aa:84:70:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:29:F8:A8:49:15:57:4D:70:03:64:A2:DC:78:CA:EC:77:5C:DD
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c5:4b:93:a1:f9:de:64:70:07:b1:aa:d0:5b:bf:ca:e7:8b:
56:84:b2:35:6d:d6:1a:c9:62:db:6b:33:88:57:f4:fb:b3:64:
d7:f5:3e:91:2c:b2:69:c6:0c:ab:65:e0:05:7d:a9:ee:19:03:
d7:49:e9:64:56:18:a9:4d:1e:cc:44:27:b1:e5:ee:7c:11:b9:
57:86:85:04:00:82:0c:df:65:b1:7f:1c:51:2c:0a:16:f8:7f:
6e:1a:ed:c9:e1:dd:c2:00:f6:0e:0c:bc:ef:60:37:73:51:24:
fe:f3:3d:38:52:ad:37:32:b6:5e:52:41:f1:05:44:51:fa:53:
d8:9b:42:65:b1:80:ec:7f:79:c8:2d:5f:ce:5e:f2:45:b8:83:
11:14:e7:58:d3:a8:29:7f:02:d0:df:36:6e:49:62:4d:e7:47:
8d:47:0f:61:c0:fb:2c:36:52:1a:b5:6b:00:03:2e:a0:cc:09:
9d:6e:df:f7:12:70:54:bb:b7:54:66:2b:03:cd:42:ac:01:65:
60:b1:2c:4e:fc:90:89:c5:15:5e:68:07:86:41:cf:17:cb:96:
3e:e7:18:55:2d:b8:c7:32:80:7e:d8:77:e5:a2:20:7a:21:a0:
2e:c5:6a:cb:e7:b8:07:84:f7:ef:25:b8:d5:fa:b3:5c:65:07:
b6:bc:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:08 2026 by rpki-client