Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier: MfOr4bzN4gJXsosM0UeNDm80MYGzuZ5OQ8SF1MKzo9M=
Subject key identifier: DC:DC:24:B6:67:C8:EC:92:85:2D:8C:85:E9:76:5F:A0:08:0A:6E:42
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 019F593525A8F100C4521CD7D53194071CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number: 013A
Signing time: Mon 13 Jul 2026 02:01:22 +0000
Manifest this update: Mon 13 Jul 2026 02:01:22 +0000
Manifest next update: Tue 14 Jul 2026 02:01:22 +0000
Files and hashes: 1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: Pl8bQDznSd8jWJoPB5V6nkEAR6XVj1RTQvBLiDGPMv0=)
2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:35:25:a8:f1:00:c4:52:1c:d7:d5:31:94:07:1c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: Jul 13 02:01:22 2026 GMT
Not After : Jul 14 02:01:22 2026 GMT
Subject: CN=dcdc24b667c8ec92852d8c85e9765fa0080a6e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:15:2a:02:2a:65:3f:8a:5b:9d:1d:1f:a7:
f2:6d:6b:ab:cc:9f:e0:3c:37:ab:ba:69:72:de:75:
02:1f:68:52:e5:c4:e3:ac:8e:81:44:a3:c6:df:de:
a4:b7:39:45:94:ae:44:0b:13:2c:be:88:17:50:95:
d4:db:e6:7a:5d:1c:1e:52:1a:33:c7:f2:34:84:a1:
e7:77:5a:1a:0a:d2:07:46:01:cf:0c:06:28:b4:0b:
33:cb:41:6a:2d:ea:d4:27:ce:ca:e6:8e:8b:39:d2:
9d:1b:8e:43:d4:54:3a:cd:35:96:8c:3c:c1:da:72:
81:d1:ae:8a:fe:03:de:d3:82:3a:dc:80:3b:46:17:
3b:0a:5c:6d:0c:56:b4:cf:62:3f:81:ae:4f:40:84:
5f:68:cd:df:94:27:3f:36:88:3a:d0:38:e8:16:e2:
63:8a:27:92:58:f4:e6:af:5c:9e:ad:95:73:9c:d0:
06:4b:3e:7c:19:e9:eb:b5:1d:3a:05:c1:bc:01:0b:
9b:2f:91:72:f8:95:83:74:4f:95:9d:c4:cc:44:83:
17:bb:19:8a:47:5f:af:ce:47:9b:ae:05:e1:d6:69:
fb:29:58:77:ff:89:6a:f5:1b:2d:72:f0:3c:cb:8e:
dd:40:55:43:7b:2f:29:13:f3:1d:d8:ce:f4:a3:ad:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DC:24:B6:67:C8:EC:92:85:2D:8C:85:E9:76:5F:A0:08:0A:6E:42
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3e:36:95:c9:fa:d1:69:ae:64:ae:93:29:1b:8a:58:4a:e6:
e2:e2:14:31:6a:86:e7:e6:f7:0a:73:b4:5e:61:9f:f4:49:11:
8c:7a:a6:70:33:dd:29:99:35:16:bd:94:99:a9:e0:b2:72:ac:
aa:86:df:07:38:60:a4:b1:ff:db:f0:21:44:53:14:92:61:9c:
79:db:b4:56:47:b5:52:13:4f:e5:86:a5:e0:83:cb:07:ef:76:
64:f2:a5:12:2e:64:2b:7b:7e:c8:1b:4c:6f:df:a1:ec:3b:09:
9f:df:9d:86:ba:90:2c:a0:84:f1:c6:d4:e1:f7:76:4c:d0:dd:
92:24:54:14:b6:16:33:7f:45:ea:c3:de:45:6b:41:2a:34:11:
df:b1:16:27:9c:91:28:e5:d9:9b:d2:56:ee:09:bd:28:c5:f1:
5a:28:39:bd:4d:4e:2b:68:8d:3e:40:2d:92:a7:40:05:26:52:
83:d8:bc:1f:77:97:78:93:9a:b0:bf:24:2f:52:a5:b0:56:4d:
6b:2e:34:87:78:09:82:ce:44:b2:b5:e7:36:04:10:37:e9:18:
58:ab:83:91:0b:e2:83:e0:6d:a1:43:f9:89:64:60:7a:aa:7c:
8a:e7:b1:19:c6:b2:f5:7a:03:70:0f:ea:64:e7:ce:2b:3e:29:
d0:d0:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:15:25 2026 by rpki-client