Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: mwaz/t0huC3dDkXIWBA6BhyZAFG0fLENKXet26EXZkg=
Subject key identifier: 51:FF:F8:3A:AB:93:B1:DD:43:96:A6:AC:49:17:43:59:7C:23:ED:F9
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 019F0A3EADE14195ED1549C9CF0FAF39E755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 0252
Signing time: Sat 27 Jun 2026 18:01:47 +0000
Manifest this update: Sat 27 Jun 2026 18:01:47 +0000
Manifest next update: Sun 28 Jun 2026 18:01:47 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: 1ByTu8lXPIjdYnc+qpKaMyKvx1F54iX0mhbCNzxvNSw=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: yMSdih1BEkH3pQ4fKRRG34haBVs.roa (hash: zQcIZwJ6Pu/eO5hnk91XHasGs0yD2RAKEuFEjFFSfEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:3e:ad:e1:41:95:ed:15:49:c9:cf:0f:af:39:e7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Jun 27 18:01:47 2026 GMT
Not After : Jun 28 18:01:47 2026 GMT
Subject: CN=51fff83aab93b1dd4396a6ac491743597c23edf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:be:58:f7:14:aa:45:f5:3a:13:be:8a:92:
86:59:31:3f:f8:38:cd:0e:d6:57:c5:70:d2:c3:c3:
d4:d4:ea:c5:39:b1:aa:a3:db:48:af:cc:67:13:e4:
2c:58:22:64:bb:58:44:54:5d:fb:cc:ab:b5:53:2c:
07:3a:ef:1f:2a:84:74:cd:e7:94:2d:e9:83:66:4c:
90:b2:d7:b9:99:39:dc:cc:ff:66:46:33:76:55:a8:
a2:21:59:72:1a:b4:3c:e1:ec:d4:68:31:1c:c7:dd:
e4:de:ef:3f:2c:5f:8d:e0:e9:1e:a5:58:4b:29:c5:
64:8e:70:01:16:c6:fe:4b:e6:ce:a3:d4:73:38:f4:
03:c9:68:fb:4d:9b:95:d8:02:44:e5:55:24:51:fb:
eb:c2:35:5b:12:2e:cd:2d:02:18:4e:11:9e:fb:9b:
67:e2:ec:0e:4c:ba:c3:21:39:5c:4e:9b:97:cb:39:
18:89:fb:a0:7f:f0:31:48:1a:0c:fe:db:98:1c:d7:
68:57:af:f7:63:4f:12:d2:eb:cf:4f:cb:d7:b3:a7:
e8:af:29:3f:f0:b8:23:75:3f:e8:83:e1:51:03:7c:
43:c5:16:dd:e7:00:80:c9:16:64:8e:3b:4e:77:5b:
34:ac:92:04:4b:b0:cb:59:51:0c:a1:71:59:ff:bc:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:F8:3A:AB:93:B1:DD:43:96:A6:AC:49:17:43:59:7C:23:ED:F9
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f5:e7:4b:49:cf:10:2d:47:e2:68:9f:38:61:38:20:ee:bc:
f1:e3:eb:68:31:29:da:2d:bc:0f:0e:cf:ac:d9:14:2e:04:ea:
64:18:b6:1b:d2:06:86:6c:fa:75:c4:55:7a:88:eb:d9:be:60:
e9:80:cc:19:07:ad:f9:89:05:38:9b:8e:99:0b:a3:b1:2f:98:
bb:12:bf:06:e3:c3:d4:4f:21:6b:b3:44:77:a1:2f:73:e5:8e:
74:e6:e8:37:13:22:90:db:ad:16:97:16:2d:28:52:8e:ed:d4:
c9:56:e3:f3:2d:ce:3d:b4:ac:14:e6:13:f5:d2:6e:bc:5c:95:
1f:af:b4:95:41:6f:dc:d0:ea:8e:e3:ad:75:c3:c1:c0:da:6c:
60:f8:2c:1c:85:67:67:31:ac:60:07:ba:79:64:f3:4e:95:6e:
5e:b9:48:1f:80:58:df:1a:55:b0:82:ba:ca:45:8f:09:6b:4e:
b6:86:e8:34:34:14:7c:4d:56:fd:d5:ab:0b:42:ff:d2:63:34:
2f:7d:16:b3:4e:99:ff:18:c3:43:66:b1:49:ca:43:1e:ed:11:
bf:61:bb:c2:63:bb:9f:04:b7:41:52:fa:d8:fc:0b:41:c1:2e:
82:54:5c:48:02:eb:3a:5e:9c:a7:9e:ab:27:ea:74:9a:64:0c:
df:d2:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:29:23 2026 by rpki-client