Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: Kx8VsYqW4AKuRYWW7h+4OfrdtHHOZ9Bm6bn7JMwFWWI=
Subject key identifier: FD:B8:65:C0:B4:5D:A1:C7:CA:E0:D0:C7:FC:5B:58:29:C7:92:3A:F6
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 019F935C1EF89C7519919DE4543CEE5DF240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 0623
Signing time: Fri 24 Jul 2026 09:01:55 +0000
Manifest this update: Fri 24 Jul 2026 09:01:55 +0000
Manifest next update: Sat 25 Jul 2026 09:01:55 +0000
Files and hashes: 1: Mw3ACAhcMDXBuRq_X19P75n7CqI.roa (hash: 0uTqpS4C1XoKrdQcU5VVh2z78vf6LmyT+JyUmMpcNqg=)
2: dw0pzmkTaZts4fybHtDLSMI8pwU.roa (hash: POq13Xf4ByDXuaJoDtQFN2IdIJQyKKVS8tZJvFhZ98Q=)
3: pgBIs-3GoZthMmbw9U-r3itRgXQ.roa (hash: +p2wOZUmpgnrYwvX+umOGcelDbIr/AvBcaa1sjakkaA=)
4: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: WEY62x60m+L96N0zwPcfkkK2cfNgf/4d0UNliBbkj5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:1e:f8:9c:75:19:91:9d:e4:54:3c:ee:5d:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Jul 24 09:01:55 2026 GMT
Not After : Jul 25 09:01:55 2026 GMT
Subject: CN=fdb865c0b45da1c7cae0d0c7fc5b5829c7923af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:5a:cd:8b:d7:78:b3:02:b2:21:69:57:2d:
41:f6:22:9c:0e:2e:68:ca:76:8f:e9:97:b3:1a:c9:
e7:f2:56:3b:c0:77:24:a0:66:5c:f9:41:38:b5:58:
00:3c:29:74:d2:df:69:f8:12:83:a9:ee:28:6e:c3:
26:09:a0:dc:cb:90:88:fd:1d:d2:9b:f3:3a:b9:15:
08:85:65:9c:19:50:97:d6:22:ca:cf:f0:e2:ab:2a:
0c:c5:06:ea:04:1e:e2:e9:a1:58:ab:43:b9:2b:5c:
1d:d4:e7:ad:29:72:0a:43:88:61:66:f1:3d:54:6a:
aa:ec:c3:ca:0c:30:79:55:ee:1f:aa:1d:b4:5e:f7:
18:a8:57:29:a9:9c:e4:04:2f:89:26:af:33:e7:07:
40:96:72:9f:6e:e9:99:46:2b:da:d8:36:bc:54:19:
df:05:af:b2:fb:ad:d8:c5:39:02:bc:63:23:09:d0:
c3:60:d3:0c:e4:56:d3:7b:71:f5:fa:d0:55:a9:58:
8c:37:26:45:3e:00:0c:30:8f:a5:e9:6f:42:65:d3:
23:58:8f:cf:bd:6c:c7:8c:c6:d4:62:2d:86:b1:84:
52:69:34:b4:a3:b6:71:a8:fa:55:be:d1:72:5c:55:
60:0f:5b:50:f8:7b:cf:e7:13:8b:24:12:a4:4a:de:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:65:C0:B4:5D:A1:C7:CA:E0:D0:C7:FC:5B:58:29:C7:92:3A:F6
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:04:2e:7b:d8:23:b9:ed:fe:0e:b9:c0:f3:78:a0:98:21:87:
c5:a3:a1:7e:bc:e7:d5:d2:ca:27:88:7a:2a:1b:65:9b:4a:ca:
27:87:19:e5:21:54:73:c7:8f:21:a9:71:94:2e:d2:88:23:12:
d6:2d:ef:c8:b8:85:63:4c:77:42:36:f2:a2:13:d2:d0:f6:65:
25:dd:c1:7c:ed:44:0e:eb:ca:42:44:54:b0:96:de:31:8d:e8:
a7:56:d8:c1:47:c0:6d:d9:10:dc:ee:11:27:bc:84:5c:b4:93:
8d:e9:c6:13:d4:88:a7:7f:e1:d7:72:89:c1:6d:d7:9e:b2:b2:
13:d8:63:1b:84:ca:39:c6:48:06:f4:c7:64:fb:5b:b6:1c:05:
6f:91:2c:d9:d0:35:62:52:b3:78:09:94:ca:b1:d3:66:11:cf:
bc:28:0c:8b:48:ba:8f:f9:45:e4:47:66:d9:be:b2:74:75:05:
8d:6b:5e:15:a4:00:e9:0f:ef:2a:1e:e6:5d:56:8e:fc:04:db:
a8:db:ec:1e:d3:73:45:65:37:4a:8d:09:41:3b:bf:40:83:46:
9a:a8:49:a7:03:ad:33:fa:18:df:58:f9:68:e6:e9:31:43:c5:
c6:5c:b4:5e:ad:cf:f7:e3:a1:47:8b:3c:44:c6:bd:ea:77:56:
6a:92:47:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:41 2026 by rpki-client