Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: DEG0ZUX3Vuf6ElIwRjniDlCrJaXZjw8XAEAAOhpIyRQ=
Subject key identifier: BE:15:F4:96:36:15:B0:57:E7:FB:F7:1B:60:12:E9:7A:A7:6F:03:72
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019F9135EC71A7DE306C41F492BFE300C09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 170D
Signing time: Thu 23 Jul 2026 23:00:57 +0000
Manifest this update: Thu 23 Jul 2026 23:00:57 +0000
Manifest next update: Fri 24 Jul 2026 23:00:57 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: xs0Mn/hQEmtpoKHFxnY2NTxTAzxgQ46oTcSCWFbrMig=)
2: HXOFYv-072FsOVg35mkckEgbyio.roa (hash: rr27UIRFNz1qEQQUakpKnuloBOEhVERRXmaajk2GDbc=)
3: iwqmKLXUuOArXvbBkZW7y-ChZt0.roa (hash: YnoIi/iHGRKLb9cTSBFYYYySVFtx+jH8kBK+SYHWRvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:ec:71:a7:de:30:6c:41:f4:92:bf:e3:00:c0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Jul 23 23:00:57 2026 GMT
Not After : Jul 24 23:00:57 2026 GMT
Subject: CN=be15f4963615b057e7fbf71b6012e97aa76f0372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c0:ca:c4:9c:28:05:cf:61:41:ac:6a:ff:2c:
64:11:d3:65:26:d2:6e:bd:fa:17:7e:bd:21:28:06:
01:28:9d:f7:3d:1c:16:93:d5:3e:a5:47:c2:59:09:
39:bd:bd:22:b5:a0:fa:86:25:54:66:cb:91:39:dd:
4e:79:71:76:7a:b9:db:92:47:05:d6:ef:ec:ee:27:
93:b4:45:43:4c:6d:66:86:eb:6f:6d:69:f8:dc:a0:
7e:4e:81:a0:f7:8c:6b:25:b4:e7:9a:e0:d3:57:a2:
65:62:68:47:b5:e6:06:76:5a:7a:bc:23:67:2d:03:
61:9f:c0:6f:7c:19:dd:ad:59:3a:a2:cb:38:3e:60:
3a:9a:bb:78:b9:87:4b:0a:be:ca:d6:4b:f5:18:69:
04:e7:96:e6:4e:78:fb:99:eb:e9:6a:b9:04:4b:d9:
c7:fb:bc:a7:fd:1f:66:be:03:da:4b:c0:14:43:e4:
de:77:43:16:5e:e3:8f:1f:5d:55:7b:82:b0:27:be:
7f:de:34:a3:ac:0d:08:f9:58:f1:0f:0d:9f:70:3b:
17:fb:65:0f:6d:51:22:82:7e:40:54:82:c5:f1:aa:
1f:e9:05:29:2a:ea:1c:9d:5b:97:2a:54:5b:4c:d4:
e7:04:14:e6:dd:0e:a4:65:b5:cb:99:ec:b6:a6:c5:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:F4:96:36:15:B0:57:E7:FB:F7:1B:60:12:E9:7A:A7:6F:03:72
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e3:df:f0:4d:de:00:ac:3c:65:35:d0:7d:df:2a:91:df:74:
ad:ae:ba:54:ac:ea:01:ae:c3:3a:de:05:2d:b0:63:97:d1:cc:
bb:6b:af:a9:fe:ec:97:68:bb:d0:f5:af:dc:a0:7b:c3:38:50:
1e:a2:22:d9:9b:90:87:7f:5a:8e:b9:82:d5:5c:b0:82:e0:74:
7a:d5:ee:fe:d4:0b:f0:a7:2d:ac:51:5e:47:d7:c7:0c:5a:9c:
46:81:83:91:fe:0b:7a:2e:3e:37:36:98:06:49:21:b6:85:d7:
f9:af:0e:3b:3a:3a:d8:80:3f:c8:0a:ce:37:3a:ad:7a:6e:fe:
ed:06:20:aa:8c:80:da:d8:af:97:14:67:59:bd:cf:71:19:9d:
65:3b:83:ae:ba:dd:cd:43:d8:60:b1:eb:e5:4f:ee:c4:f2:f5:
58:67:7b:b1:ad:2b:d2:e9:e2:0f:a8:78:f2:a2:0b:6b:48:aa:
6e:35:25:01:c4:1a:54:d7:a1:7b:a8:08:dd:94:42:c8:60:dc:
2f:8e:b6:bf:16:a3:67:c1:8b:3d:88:e1:21:de:57:f6:75:bb:
fe:1f:5d:d4:ec:d3:e6:43:23:6b:2a:45:33:c9:22:58:6f:99:
97:66:00:ec:f5:1f:eb:5b:92:c4:a0:0c:f3:5a:6d:b8:74:8e:
a5:42:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:47 2026 by rpki-client