Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: 2oc7yEjgx60a/M27d2Y2r3NtjvEEuyzqwuxNR93Q0rU=
Subject key identifier: 43:1A:0C:45:1C:1F:D0:1B:2D:27:55:47:12:D9:4A:0F:13:5C:E5:33
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019F18D69AD6748CB8B1EE0A192357AAB918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1947
Signing time: Tue 30 Jun 2026 14:02:25 +0000
Manifest this update: Tue 30 Jun 2026 14:02:25 +0000
Manifest next update: Wed 01 Jul 2026 14:02:25 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: cFwjPMvWPO+oesuj5dXwyAqYjFskQ+lMrDwP20RGAI4=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:9a:d6:74:8c:b8:b1:ee:0a:19:23:57:aa:b9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Jun 30 14:02:25 2026 GMT
Not After : Jul 1 14:02:25 2026 GMT
Subject: CN=431a0c451c1fd01b2d27554712d94a0f135ce533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:c6:5a:41:3d:e5:8a:fc:34:58:f3:e2:48:
e5:c9:e2:3d:23:37:b5:88:40:ec:4e:a5:22:ba:5c:
22:e2:98:0f:1d:e4:3b:72:10:1a:5e:a5:29:0b:86:
c1:83:a2:8a:7e:c2:17:46:39:f8:cb:e9:42:71:97:
b8:2f:64:a3:21:8b:26:c1:b6:fc:f2:bb:f6:04:c7:
d1:2f:cc:46:9c:2d:74:35:de:03:7e:8b:e9:09:47:
c2:2c:c9:6d:d3:80:89:db:65:fa:a8:6c:41:f6:b9:
be:00:2f:5c:e6:9d:b1:b4:0b:50:10:97:92:9b:0f:
ae:b3:88:02:aa:c4:9c:3b:bc:d6:66:f4:32:fc:c4:
3c:28:f9:2e:a0:5d:76:6c:8f:4d:05:6a:5d:a7:9a:
32:e7:38:ed:76:59:cd:fd:17:9a:50:21:b7:d1:ce:
d2:ec:48:db:a9:8e:cb:85:99:da:8b:0f:14:fd:2b:
be:8e:26:46:39:fa:dc:47:c6:86:99:14:62:a9:a0:
cd:7f:8e:65:ac:c8:50:5c:be:62:e2:b2:2b:3d:ed:
b2:82:ec:77:43:03:82:41:6d:34:c1:a2:9b:9c:36:
ed:ba:5e:e6:76:08:f9:20:8b:97:0a:83:fd:3a:94:
37:c5:89:2e:44:e0:8c:73:93:0c:8f:13:64:66:b4:
c2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:0C:45:1C:1F:D0:1B:2D:27:55:47:12:D9:4A:0F:13:5C:E5:33
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e8:50:6e:d2:ca:b4:53:f6:e3:cc:bc:52:d2:4e:67:a6:5b:
a7:71:a1:b1:64:b5:68:d9:81:0e:4e:3d:ac:87:84:8b:ff:95:
1b:7a:36:a3:71:f0:aa:19:fd:3b:82:fc:96:68:a0:17:85:f5:
e3:dc:98:3f:69:a2:11:bb:4b:31:37:56:e0:8e:cf:a7:c9:0d:
6e:f5:51:7c:79:30:6b:08:a2:f9:f8:60:8b:b3:32:a6:95:03:
dd:17:4e:a7:e7:18:d6:50:7f:7b:cb:b1:aa:04:a7:3e:c3:2d:
f5:6b:12:48:0d:67:d2:67:ae:52:99:dc:78:97:e8:cd:94:ea:
b4:49:00:8e:b0:4b:da:05:c7:53:ce:02:9b:0e:92:c5:05:cb:
a0:ce:d6:c9:da:6e:54:0b:fa:ea:ac:a3:90:67:69:c1:44:32:
c3:38:d3:89:a0:24:f9:88:da:6f:8a:31:d5:7d:f3:48:b5:4c:
ea:32:34:5b:f7:a3:95:03:95:25:40:3c:c0:ee:52:03:43:e5:
b8:6d:0c:41:fc:10:f1:9e:60:81:45:39:04:21:95:eb:3d:31:
8f:6f:aa:10:aa:64:bd:a9:f3:5f:64:03:f1:3a:a0:35:f0:fc:
ed:55:f2:41:bf:63:01:bd:e5:5e:77:d4:f7:bf:80:2a:bf:46:
96:5a:e8:c4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8Y1prWdIy4se4KGSNXqrkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzQyZDc3N2QwODI0MTZhMmQ4NDdkNDAwM2EzMzFiNTBl
MjQyM2UwHhcNMjYwNjMwMTQwMjI1WhcNMjYwNzAxMTQwMjI1WjAzMTEwLwYDVQQD
Eyg0MzFhMGM0NTFjMWZkMDFiMmQyNzU1NDcxMmQ5NGEwZjEzNWNlNTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xDGWkE95Yr8NFjz4kjlyeI9Ize1
iEDsTqUiulwi4pgPHeQ7chAaXqUpC4bBg6KKfsIXRjn4y+lCcZe4L2SjIYsmwbb8
8rv2BMfRL8xGnC10Nd4DfovpCUfCLMlt04CJ22X6qGxB9rm+AC9c5p2xtAtQEJeS
mw+us4gCqsScO7zWZvQy/MQ8KPkuoF12bI9NBWpdp5oy5zjtdlnN/ReaUCG30c7S
7EjbqY7LhZnaiw8U/Su+jiZGOfrcR8aGmRRiqaDNf45lrMhQXL5i4rIrPe2ygux3
QwOCQW00waKbnDbtul7mdgj5IIuXCoP9OpQ3xYkuROCMc5MMjxNkZrTCewIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEMaDEUcH9AbLSdVRxLZSg8TXOUzMB8GA1UdIwQY
MBaAFPl0LXd9CCQWothH1AA6MxtQ4kI+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YUXRkMzBJSkJhaTJFZlVBRG96RzFEaVFqNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNDgyNzA4LWMxZDQtNDBmYy05MzIx
LTY2OThiOTMyMzNkNi8xLzEtWFF0ZDMwSUpCYWkyRWZVQURvekcxRGlRajQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q0LzQ4MjcwOC1jMWQ0LTQwZmMtOTMyMS02Njk4YjkzMjMz
ZDYvMS8xLVhRdGQzMElKQmFpMkVmVUFEb3pHMURpUWo0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuhQ
btLKtFP248y8UtJOZ6Zbp3GhsWS1aNmBDk49rIeEi/+VG3o2o3Hwqhn9O4L8lmig
F4X149yYP2miEbtLMTdW4I7Pp8kNbvVRfHkwawii+fhgi7MyppUD3RdOp+cY1lB/
e8uxqgSnPsMt9WsSSA1n0meuUpnceJfozZTqtEkAjrBL2gXHU84Cmw6SxQXLoM7W
ydpuVAv66qyjkGdpwUQywzjTiaAk+Yjab4ox1X3zSLVM6jI0W/ejlQOVJUA8wO5S
A0PluG0MQfwQ8Z5ggUU5BCGV6z0xj2+qEKpkvanzX2QD8TqgNfD87VXyQb9jAb3l
XnfU97+AKr9GllroxA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:15 2026 by rpki-client