Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: lDbK+QjSKe9xXLwMPASOI7cQPNuOSyRpOiyn2R3ZQ/0=
Subject key identifier: 61:17:57:58:9E:C8:ED:A0:D6:9C:E0:D0:5C:D0:D2:1B:F0:A6:BE:9F
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019F189EC47D922017BA39A81779ABDAC7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 14B7
Signing time: Tue 30 Jun 2026 13:01:25 +0000
Manifest this update: Tue 30 Jun 2026 13:01:25 +0000
Manifest next update: Wed 01 Jul 2026 13:01:25 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: wENgyFjKq8MNjzIYaUlBPyWFZ904qAz5wlLhBoj8kOg=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:c4:7d:92:20:17:ba:39:a8:17:79:ab:da:c7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jun 30 13:01:25 2026 GMT
Not After : Jul 1 13:01:25 2026 GMT
Subject: CN=611757589ec8eda0d69ce0d05cd0d21bf0a6be9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:5d:b6:17:79:07:50:4d:9e:51:82:f0:ea:
02:40:93:97:99:c9:71:64:38:91:3f:56:a1:02:da:
66:e0:5c:1c:69:6a:12:0e:ff:35:ff:05:31:27:7d:
8b:72:fe:df:c7:e4:a7:3a:29:98:30:d3:73:ba:a8:
01:ce:37:38:d3:ee:c2:73:bf:11:5e:53:2e:b7:27:
cf:9a:0c:77:2f:d3:2d:15:b6:1b:b8:d7:89:99:16:
0f:3e:b4:13:59:9b:ee:08:23:3f:fb:b2:6b:18:c7:
c5:76:27:27:09:92:5a:35:52:a6:64:a8:be:fa:c8:
6f:c4:6d:e5:e7:1d:93:10:80:07:9c:18:6c:4e:60:
ff:27:9c:ad:a2:75:9d:42:3b:f9:72:1c:28:f9:47:
af:5e:5e:72:65:06:78:f3:eb:b7:4f:c9:e7:4f:ae:
d5:46:92:ff:b2:bb:37:98:d4:8c:8a:e1:ed:fe:18:
7a:0f:30:df:9e:e2:dd:03:b6:7c:52:aa:59:82:29:
d5:0e:6f:a9:50:da:f5:9e:a9:f6:66:cf:88:50:b5:
37:8d:27:f4:99:1b:b0:25:cf:b1:9d:3c:5b:15:1a:
36:b7:cc:77:d2:7a:e4:09:27:00:54:d2:69:0b:02:
54:eb:b1:47:2f:99:fe:1a:7b:c3:3c:d1:54:ce:01:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:17:57:58:9E:C8:ED:A0:D6:9C:E0:D0:5C:D0:D2:1B:F0:A6:BE:9F
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:45:cb:75:86:b2:f3:26:66:5e:e1:38:5b:10:10:98:d9:8c:
3e:b4:db:1f:9c:e4:0f:6f:ca:0c:c4:75:4c:f9:10:36:21:7d:
11:63:ab:40:6b:dc:56:e7:45:0c:3f:cc:73:29:31:11:7d:7c:
bf:25:3d:17:7e:f3:e9:cb:99:46:80:5f:16:d5:8b:8c:5e:4f:
7a:81:cd:1e:fd:f4:e8:d7:da:3f:2c:79:cc:00:a3:05:f0:ba:
34:2a:b1:19:c2:99:39:b1:ed:c3:02:64:78:f9:73:61:e6:dc:
fb:ab:48:b1:78:af:de:02:d2:4a:56:e2:fd:a2:75:02:ed:23:
46:d6:58:a9:09:5d:02:48:db:ed:fe:f8:83:3b:f0:09:9a:f9:
f6:07:05:ad:07:9c:a2:31:4c:01:c4:95:98:06:f3:b0:fc:2c:
00:99:90:83:be:32:17:9e:b1:df:50:72:a5:84:a0:1a:b4:e2:
98:fb:3e:58:f5:12:d3:ae:a9:f6:29:1f:8a:69:07:3e:92:b6:
34:98:69:f4:aa:04:f2:8d:69:51:84:e9:c0:2f:2d:1b:b7:9c:
f4:ae:f5:c6:60:1e:0e:70:a8:f7:d2:b0:03:f8:21:63:d6:f1:
c9:95:9b:0c:0e:7d:53:d1:a4:b5:24:b9:03:0a:b6:29:3f:4e:
d9:3a:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 15:18:29 2026 by rpki-client