Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
File: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft (raw, json)
Hash identifier: Jo1HUW2aG/oUtBZJQUrarU6wbuMz460Kd5sFC3xR69c=
Subject key identifier: 52:B6:F5:F4:A5:D0:92:79:FC:30:66:F4:61:4C:FE:C4:87:6B:F7:97
Authority key identifier: D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
Certificate issuer: /CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Certificate serial: 019F92B6352197FB6648390070B88C0C3DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
Manifest number: 0300
Signing time: Fri 24 Jul 2026 06:00:42 +0000
Manifest this update: Fri 24 Jul 2026 06:00:42 +0000
Manifest next update: Sat 25 Jul 2026 06:00:42 +0000
Files and hashes: 1: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl (hash: xu5xv2WZ623gWPAXQzIlmf0MXRM0N08xYJ7pCYSkZQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:35:21:97:fb:66:48:39:00:70:b8:8c:0c:3d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Validity
Not Before: Jul 24 06:00:42 2026 GMT
Not After : Jul 25 06:00:42 2026 GMT
Subject: CN=52b6f5f4a5d09279fc3066f4614cfec4876bf797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a6:0a:d5:8e:63:e3:83:ee:a8:c4:a4:d3:f3:
66:20:0e:9d:6c:4f:2d:96:2d:e7:39:79:8b:7e:79:
3e:6f:29:b3:e8:93:81:14:0c:bb:9e:d8:41:05:ac:
b5:6d:af:69:ec:69:6a:13:70:eb:c7:9e:aa:b1:26:
49:30:03:08:6b:db:8a:4c:80:09:48:03:8d:f6:ad:
e5:ad:57:e7:98:76:fd:53:43:07:eb:4b:16:fb:12:
7e:f3:6a:fa:be:f0:b7:53:09:85:6e:e7:d6:5c:d8:
73:bf:cf:3b:21:c6:f1:1f:03:d0:f3:e3:96:e5:e8:
11:56:49:3e:50:4c:2d:07:de:b9:c8:c6:06:37:5c:
a4:42:58:24:90:d0:46:7b:05:c6:3c:56:9d:ba:ab:
8f:79:08:07:c2:3c:a0:4f:96:05:af:92:88:c3:b7:
c1:ed:00:33:5e:42:a5:f0:e2:6a:20:05:06:1a:e2:
b2:f9:e5:29:be:e5:8d:17:0a:1f:95:7d:73:ed:dc:
c9:2b:65:fc:0c:7d:aa:fa:77:6c:49:ac:d7:6c:8f:
c6:6d:57:6c:98:db:fb:82:82:ab:f9:2f:da:ce:d5:
af:5d:05:e0:d0:72:d0:f7:f6:32:c4:bc:cd:59:f0:
bf:8e:68:ce:51:f5:1a:cb:16:2d:9c:32:bc:f8:45:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:F5:F4:A5:D0:92:79:FC:30:66:F4:61:4C:FE:C4:87:6B:F7:97
X509v3 Authority Key Identifier:
keyid:D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a8:72:27:6f:1e:69:a1:a9:33:6f:a2:da:ec:54:60:f9:80:
44:03:f2:81:66:ec:bb:04:99:d6:66:6d:51:67:96:15:7a:ff:
80:bb:62:ac:fb:38:d3:5b:cb:73:97:47:43:49:b7:1b:be:3e:
06:1d:6e:79:d8:68:c4:ee:0c:a3:b5:a7:64:f4:47:72:5c:a1:
ef:76:0d:13:41:fe:2e:23:bf:a0:76:3e:15:d6:51:e2:64:ea:
cf:06:4a:7b:91:81:80:98:31:9d:15:3e:75:b8:0b:f3:66:15:
84:d5:92:37:1a:c7:6f:38:66:46:ef:2a:e7:de:8a:43:a1:f3:
4f:3c:57:91:ac:d2:99:db:da:f4:81:bc:63:7a:24:64:77:d5:
42:2f:f8:13:75:92:3d:ef:91:5e:1e:01:f4:e0:3c:02:61:39:
f8:38:40:bf:1d:e0:f3:9d:fe:a2:7f:31:f1:8c:f0:fd:d0:f6:
53:21:91:dd:7d:a0:de:d0:0a:3a:48:ba:7e:01:9e:6d:8c:d8:
b4:0c:35:fd:2f:25:ad:5b:1b:3c:3a:14:0e:0d:dc:52:2a:0d:
f0:ea:13:00:a4:60:00:a5:aa:a0:7c:74:dd:6c:df:a8:fe:cb:
55:70:9b:e9:ee:9b:2a:79:31:7d:15:a1:81:2d:1a:8d:98:cb:
69:ed:f5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StjUhl/tmSDkAcLiMDD3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYTQwMWQxZmMxMWQyMmM4M2Q1ZDNmNTZlZGQ0OGU5NDk4
OWNjMTcwHhcNMjYwNzI0MDYwMDQyWhcNMjYwNzI1MDYwMDQyWjAzMTEwLwYDVQQD
Eyg1MmI2ZjVmNGE1ZDA5Mjc5ZmMzMDY2ZjQ2MTRjZmVjNDg3NmJmNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aYK1Y5j44PuqMSk0/NmIA6dbE8t
li3nOXmLfnk+bymz6JOBFAy7nthBBay1ba9p7GlqE3Drx56qsSZJMAMIa9uKTIAJ
SAON9q3lrVfnmHb9U0MH60sW+xJ+82r6vvC3UwmFbufWXNhzv887IcbxHwPQ8+OW
5egRVkk+UEwtB965yMYGN1ykQlgkkNBGewXGPFaduquPeQgHwjygT5YFr5KIw7fB
7QAzXkKl8OJqIAUGGuKy+eUpvuWNFwoflX1z7dzJK2X8DH2q+ndsSazXbI/GbVds
mNv7goKr+S/aztWvXQXg0HLQ9/YyxLzNWfC/jmjOUfUayxYtnDK8+EW1kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFK29fSl0JJ5/DBm9GFM/sSHa/eXMB8GA1UdIwQY
MBaAFNKkAdH8EdIsg9XT9W7dSOlJicwXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHFRQjBmd1IwaXlEMWRQMWJ0MUk2VW1KekJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85ZWQzZTItOTBlNS00MjJiLThmMzUt
NDQ4MjQxNWM2MjZkLzEvMHFRQjBmd1IwaXlEMWRQMWJ0MUk2VW1KekJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85ZWQzZTItOTBlNS00MjJiLThmMzUtNDQ4MjQxNWM2MjZk
LzEvMHFRQjBmd1IwaXlEMWRQMWJ0MUk2VW1KekJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqhyJ28e
aaGpM2+i2uxUYPmARAPygWbsuwSZ1mZtUWeWFXr/gLtirPs401vLc5dHQ0m3G74+
Bh1uedhoxO4Mo7WnZPRHclyh73YNE0H+LiO/oHY+FdZR4mTqzwZKe5GBgJgxnRU+
dbgL82YVhNWSNxrHbzhmRu8q596KQ6HzTzxXkazSmdva9IG8Y3okZHfVQi/4E3WS
Pe+RXh4B9OA8AmE5+DhAvx3g853+on8x8Yzw/dD2UyGR3X2g3tAKOki6fgGebYzY
tAw1/S8lrVsbPDoUDg3cUioN8OoTAKRgAKWqoHx03WzfqP7LVXCb6e6bKnkxfRWh
gS0ajZjLae31mg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:30:08 2026 by rpki-client