Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: 4b6ecQ13HZtYFlnm/ajxLKAKx2e3Qyep9kj9h8ymj9o=
Subject key identifier: CF:A1:15:E3:93:00:19:58:EF:BF:22:05:A4:3D:54:8B:51:30:1F:F1
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 019F924805E15DA474D8F9559464B96464E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0B5D
Signing time: Fri 24 Jul 2026 04:00:21 +0000
Manifest this update: Fri 24 Jul 2026 04:00:21 +0000
Manifest next update: Sat 25 Jul 2026 04:00:21 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: wnEJgcXy6wZM7WDAeaZT3313ZxY3H13AtuKo8HnZ/9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:05:e1:5d:a4:74:d8:f9:55:94:64:b9:64:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Jul 24 04:00:21 2026 GMT
Not After : Jul 25 04:00:21 2026 GMT
Subject: CN=cfa115e393001958efbf2205a43d548b51301ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:33:62:cf:19:80:85:ca:c3:c9:72:82:d5:
b4:cc:75:8c:40:3a:67:83:b3:3e:21:52:13:06:5b:
8e:cc:f6:58:fd:a3:6d:a4:42:21:7f:28:4c:0f:26:
cc:9c:0a:6d:0a:2e:49:cd:8e:27:43:14:a3:3f:d4:
fa:80:e3:20:20:80:dd:f1:99:df:14:86:da:38:21:
cd:d3:f2:fd:3e:10:32:80:0e:9e:cf:d8:cd:3e:ff:
f1:2a:0d:5f:ee:46:6c:4c:40:66:98:2c:83:00:48:
4d:b6:04:ae:87:c3:7b:56:d8:e4:a9:b4:02:aa:37:
ae:62:35:f5:11:53:0f:df:e6:93:45:27:1b:e5:3f:
81:5b:d3:87:0a:b9:07:72:df:be:ea:0c:65:3e:30:
20:44:9b:9a:15:19:d9:a6:c6:2f:d4:17:34:01:39:
9b:71:63:99:50:2f:fe:b3:44:37:db:60:28:42:60:
56:db:e8:ee:1f:a4:bc:2f:d1:79:a3:64:ab:14:d0:
cf:e8:15:95:2a:9f:ad:03:bf:bf:56:82:d2:1b:dc:
a2:df:38:d0:a6:67:14:89:8a:1f:12:f5:f2:3a:0f:
49:cc:58:60:24:22:24:46:c2:c9:f3:0c:76:1d:42:
a0:84:59:03:b3:79:1d:35:49:e8:c8:21:35:77:01:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A1:15:E3:93:00:19:58:EF:BF:22:05:A4:3D:54:8B:51:30:1F:F1
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d9:68:1e:12:22:cb:d1:20:af:f9:d1:d5:9a:03:56:e3:b6:
2b:6c:cc:b4:5c:e0:ce:5c:45:dc:0f:26:77:ee:40:fa:53:b6:
c9:c2:3b:b6:ab:74:74:f6:6b:50:da:65:7a:a3:73:e5:e6:71:
df:71:80:2b:d0:97:41:84:03:4d:a7:50:27:b4:0b:d7:b4:d2:
1f:34:ea:b0:79:12:1c:7b:b7:af:cc:4d:a7:49:ba:fe:9b:47:
4d:e2:e6:c9:d0:08:82:fe:c5:a9:a3:b8:62:81:e2:21:73:8b:
21:1e:fb:37:24:9a:d0:2a:4a:b1:e0:21:6e:70:42:23:c4:ec:
87:ac:6f:eb:b9:05:f2:c0:02:39:0c:44:c1:0e:81:84:ca:69:
52:3f:56:53:9b:d0:8b:3a:47:c0:31:4a:bb:76:2e:6e:29:98:
ad:b7:a9:94:fc:78:44:9c:f7:13:78:93:d5:ad:ca:2c:5c:4d:
e4:97:92:2b:6d:51:69:d9:b7:a5:ac:c3:b3:dc:80:6e:0a:0b:
69:5b:94:8f:c2:25:19:bd:7b:ef:a6:aa:fc:a7:e1:99:a7:bd:
96:a4:bf:44:2b:d9:8b:e9:3d:0f:01:bf:f1:91:39:d4:e2:1e:
25:7e:5e:69:f4:31:5e:24:c9:2f:75:57:8d:9c:ff:ba:aa:78:
83:48:6c:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSAXhXaR02PlVlGS5ZGTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi
YmQ4MzgwHhcNMjYwNzI0MDQwMDIxWhcNMjYwNzI1MDQwMDIxWjAzMTEwLwYDVQQD
EyhjZmExMTVlMzkzMDAxOTU4ZWZiZjIyMDVhNDNkNTQ4YjUxMzAxZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbczYs8ZgIXKw8lygtW0zHWMQDpn
g7M+IVITBluOzPZY/aNtpEIhfyhMDybMnAptCi5JzY4nQxSjP9T6gOMgIIDd8Znf
FIbaOCHN0/L9PhAygA6ez9jNPv/xKg1f7kZsTEBmmCyDAEhNtgSuh8N7VtjkqbQC
qjeuYjX1EVMP3+aTRScb5T+BW9OHCrkHct++6gxlPjAgRJuaFRnZpsYv1Bc0ATmb
cWOZUC/+s0Q322AoQmBW2+juH6S8L9F5o2SrFNDP6BWVKp+tA7+/VoLSG9yi3zjQ
pmcUiYofEvXyOg9JzFhgJCIkRsLJ8wx2HUKghFkDs3kdNUnoyCE1dwHSjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+hFeOTABlY778iBaQ9VItRMB/xMB8GA1UdIwQY
MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt
NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx
LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdloHhIi
y9Egr/nR1ZoDVuO2K2zMtFzgzlxF3A8md+5A+lO2ycI7tqt0dPZrUNpleqNz5eZx
33GAK9CXQYQDTadQJ7QL17TSHzTqsHkSHHu3r8xNp0m6/ptHTeLmydAIgv7FqaO4
YoHiIXOLIR77NySa0CpKseAhbnBCI8Tsh6xv67kF8sACOQxEwQ6BhMppUj9WU5vQ
izpHwDFKu3YubimYrbeplPx4RJz3E3iT1a3KLFxN5JeSK21Radm3pazDs9yAbgoL
aVuUj8IlGb1776aq/Kfhmae9lqS/RCvZi+k9DwG/8ZE51OIeJX5eafQxXiTJL3VX
jZz/uqp4g0hsUQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:41 2026 by rpki-client