Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: /8RrZZi6cmQiEw2AqO3Of1mwnodi2tMPFuasOqS/EYw=
Subject key identifier: 67:12:16:3A:45:45:A8:DD:56:DA:8C:A5:F8:81:10:D0:73:13:DD:56
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 019F9549626EA058E9E270BACF06AA24E56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: 0225
Signing time: Fri 24 Jul 2026 18:00:42 +0000
Manifest this update: Fri 24 Jul 2026 18:00:42 +0000
Manifest next update: Sat 25 Jul 2026 18:00:42 +0000
Files and hashes: 1: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (hash: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: z8xN7Quf24C1yRqv9d4HRNvo0c/rZGpoUofwUDWv6gk=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:62:6e:a0:58:e9:e2:70:ba:cf:06:aa:24:e5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Jul 24 18:00:42 2026 GMT
Not After : Jul 25 18:00:42 2026 GMT
Subject: CN=6712163a4545a8dd56da8ca5f88110d07313dd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:b9:5a:4f:b3:07:3b:69:c3:b8:03:3b:fa:
ea:47:1b:cb:d0:12:6b:10:f5:96:11:f8:c9:55:5b:
a2:d7:02:3b:9d:a5:98:5b:45:50:31:38:51:b2:0a:
a5:d2:22:f9:b7:f6:37:18:70:de:5e:13:1c:cf:18:
2b:b3:46:1d:7c:19:dc:aa:cc:1c:9f:10:6a:b2:26:
b7:e8:3b:af:dc:d8:32:c6:71:a8:61:1d:da:b5:f3:
49:8f:1b:be:21:ec:a6:ff:ba:5c:8e:de:b1:76:81:
a0:3b:11:07:40:ef:8a:d2:1d:25:af:a8:a6:37:cc:
c5:9f:5e:51:88:da:7f:73:78:5a:85:ce:61:98:d8:
03:db:c0:28:ae:92:ea:35:97:a7:8f:5f:da:0d:c4:
05:77:94:29:6d:1d:40:44:51:54:ff:e9:94:4a:4e:
64:21:b1:d3:0b:59:87:f4:f9:49:ed:6f:81:42:d1:
7c:a0:4a:92:e4:ef:87:43:56:9c:73:56:bf:03:db:
05:12:20:7c:ca:00:1a:65:eb:63:0a:0b:04:1a:d9:
e2:29:c8:34:37:3e:49:63:60:05:6b:00:e0:db:0d:
ed:2c:51:3f:0f:94:57:67:e0:f2:0e:ac:73:f4:90:
15:fd:2c:61:c4:17:77:e7:ab:99:07:06:e3:73:7c:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:16:3A:45:45:A8:DD:56:DA:8C:A5:F8:81:10:D0:73:13:DD:56
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:71:99:67:8a:75:67:55:88:36:c2:ac:64:0d:82:19:76:77:
35:d6:bf:5d:91:77:f6:b2:8a:4b:e8:42:c1:32:b7:2d:6c:4e:
50:5c:2c:3a:7f:d8:7f:0e:1b:ea:ad:5d:67:26:f9:6e:33:35:
b5:94:88:1e:64:b2:f0:44:cf:39:de:a3:92:fa:8c:cb:05:85:
85:35:22:ba:2b:b9:39:76:13:43:0b:e8:ae:d4:23:ea:94:5b:
a3:43:d2:22:63:41:34:7b:55:8f:c0:77:ad:23:27:34:cd:83:
e4:0d:cf:cc:fa:fc:23:9c:c1:18:cc:51:0c:f1:de:32:34:f5:
5e:b9:bb:c3:8b:2b:9d:55:cd:a4:0f:06:8b:8f:51:a7:5a:a7:
71:0a:ac:1c:53:29:ba:49:1b:f8:b5:7f:b5:b0:74:91:57:90:
60:46:f6:8d:3b:9e:7b:cc:0f:de:04:42:ad:b1:d4:34:4f:90:
f7:e5:60:53:ed:18:ea:ff:94:52:fb:ef:ad:08:bf:0a:33:af:
fc:5b:de:77:d7:3d:d3:ad:8f:0c:5d:99:e6:c2:9c:aa:d4:4b:
13:93:39:66:90:8e:2f:38:98:d3:eb:4a:9a:22:d6:51:f0:a0:
91:18:fb:ce:8b:7e:b6:dc:78:0b:dc:2b:e9:a2:0d:fd:64:ef:
72:7a:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:32:13 2026 by rpki-client