Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: Jdlbx3erJy4r58X1v/lRfhnwDz0TidVNx9b6rTptLac=
Subject key identifier: 7D:B1:25:FF:1D:1A:CD:41:F8:DC:99:41:B6:B1:0D:E1:F0:25:C1:7E
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 01A184BE85348FCF39CED041BFEF2F5B3B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0F6F
Signing time: Wed 28 Oct 2026 23:00:40 +0000
Manifest this update: Wed 28 Oct 2026 23:00:40 +0000
Manifest next update: Thu 29 Oct 2026 23:00:40 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: I1T5QzBMDrtBd+Hmz9bNd5dqrUGfeBYWjkmyq2c3Vxs=)
2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:be:85:34:8f:cf:39:ce:d0:41:bf:ef:2f:5b:3b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Oct 28 23:00:40 2026 GMT
Not After : Oct 29 23:00:40 2026 GMT
Subject: CN=7db125ff1d1acd41f8dc9941b6b10de1f025c17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:3f:24:01:d2:84:ec:17:0c:51:53:09:19:
e1:4f:24:9a:e0:41:fb:ba:53:c4:8b:70:a7:a0:e7:
bf:14:35:c8:2a:61:5c:b0:cf:3e:0d:05:fb:b0:3a:
b9:5f:ad:cd:d0:2c:47:71:14:d0:23:96:34:e2:cb:
1e:43:7c:5e:26:53:7b:f0:02:5a:db:88:95:46:be:
fa:22:bb:2c:94:35:af:14:30:5d:fb:c8:85:61:98:
f0:49:22:9f:25:a2:fb:44:48:45:17:12:22:67:06:
e4:c4:ef:8b:92:3b:71:82:18:5d:72:b3:67:4d:7f:
5c:8c:1c:16:9b:d7:a7:1a:a6:26:ce:b6:67:91:44:
c1:c4:32:da:c8:db:59:12:74:44:0c:a6:de:a1:37:
c0:c7:00:55:35:2e:c3:41:67:bb:58:a2:d0:54:66:
a5:b5:f3:7b:f5:e8:92:8c:55:e1:5e:46:19:10:9f:
b1:70:a7:3f:80:96:39:a9:c6:18:dc:6b:d5:12:fd:
40:dc:fa:51:11:f3:6e:6f:cc:6b:48:06:52:83:69:
0f:83:a8:d7:70:c7:8d:0f:ab:9e:5d:61:b6:77:0a:
ca:8c:7c:c8:a7:8d:c8:bc:b9:72:5a:21:1c:7c:55:
8e:93:46:a5:8d:a2:91:96:9f:03:1e:d5:5f:86:eb:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:25:FF:1D:1A:CD:41:F8:DC:99:41:B6:B1:0D:E1:F0:25:C1:7E
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cc:87:fc:fd:8a:74:99:52:8a:9d:b2:e5:20:77:e7:53:e1:
57:06:72:b3:8e:39:cc:f3:d8:dd:14:cd:46:55:04:e3:1d:af:
6d:83:57:e4:9f:5a:58:1a:4f:fb:56:92:05:f1:63:88:10:37:
8c:02:cd:f0:d7:e7:94:69:e8:b2:f1:3b:39:94:a0:23:d2:0b:
fe:21:41:9c:07:ce:1c:8b:c8:7b:dd:30:f9:8b:b7:7a:97:a5:
09:87:4c:dd:e6:25:e8:26:f4:7d:87:74:94:03:27:4a:f9:3c:
62:7a:ea:55:9a:79:d8:52:8d:d0:e0:cb:f9:eb:02:d5:ab:75:
9e:ab:d6:e3:c3:03:91:63:3d:ac:6e:7d:73:bc:d4:17:9f:a2:
25:b0:c1:29:cc:00:ba:a8:8a:28:01:72:46:ec:c9:24:ee:66:
d0:9b:28:aa:f5:c2:e2:6a:d1:a5:96:15:f0:08:85:b1:a6:2a:
d4:0b:57:f5:41:77:94:de:78:c1:f5:81:5c:f4:6e:6a:ce:95:
c5:6b:06:31:62:f6:43:d0:b9:ce:39:70:4c:f3:65:18:8f:31:
95:8c:00:f0:00:35:a2:da:34:33:c3:7a:10:30:68:c0:cc:8c:
d2:e7:12:fc:4d:18:ad:07:83:3e:65:b7:ac:52:02:24:44:41:
45:1e:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:27 2026 by rpki-client