Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: z64KK46oibbVBXeytDS1VYxxgq2jTXLkNc+wUj/5jOQ=
Subject key identifier: 50:04:6D:5A:27:6A:20:A5:E7:4E:25:92:2D:FB:E3:7B:DC:2B:C5:F4
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019F92B603C4792953A26EE62B2E09F0076C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 0890
Signing time: Fri 24 Jul 2026 06:00:29 +0000
Manifest this update: Fri 24 Jul 2026 06:00:29 +0000
Manifest next update: Sat 25 Jul 2026 06:00:29 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: PanDFUWz91fn0vUfWxlwPNz/8kOIwheoglF3PCZ2KRg=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:03:c4:79:29:53:a2:6e:e6:2b:2e:09:f0:07:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Jul 24 06:00:29 2026 GMT
Not After : Jul 25 06:00:29 2026 GMT
Subject: CN=50046d5a276a20a5e74e25922dfbe37bdc2bc5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:47:62:6f:44:a6:7b:25:b4:ca:94:ff:5a:
46:b4:5f:f9:36:38:f3:fd:4a:00:48:b2:92:fe:cd:
dd:48:69:b6:5c:aa:74:0c:88:2a:81:9d:19:a1:36:
c6:ee:17:3a:d1:6b:65:a3:c6:ad:7d:9a:b0:fb:fe:
8a:c6:77:89:7e:e8:ad:e4:72:04:4e:67:62:47:62:
ae:e1:bd:3d:12:bd:ba:19:56:da:1b:97:26:79:af:
48:cc:24:8e:bb:51:ab:a0:ca:54:a0:4f:eb:f5:52:
f1:8b:c9:ca:02:63:1a:25:e4:02:8b:5f:be:a5:37:
67:4b:2f:f2:90:d3:d8:5f:f5:76:fb:de:2e:ae:86:
b9:4c:de:21:df:80:91:bf:18:2c:6b:f4:d8:02:f4:
d1:a3:32:ac:29:d5:a4:e5:0e:84:50:13:3c:2c:ac:
3d:c6:70:dd:8f:81:56:0e:a0:07:2c:0c:64:4c:a1:
4c:4d:3c:d7:07:21:07:58:bd:74:56:73:c2:53:38:
a4:81:f4:7b:1e:8c:e3:df:a1:ea:09:04:b3:f5:f7:
39:78:de:65:1d:ad:74:0e:75:a9:60:b6:e5:af:e1:
9d:eb:02:0e:e2:03:72:e1:5f:3f:17:34:71:be:90:
41:27:6a:e2:09:02:23:cc:ed:31:fe:a3:ea:18:47:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:04:6D:5A:27:6A:20:A5:E7:4E:25:92:2D:FB:E3:7B:DC:2B:C5:F4
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fd:d5:c6:b5:c4:b5:5c:5f:cf:c3:10:f0:23:a1:fc:1e:a9:
99:32:15:f1:15:b3:45:b4:dd:bf:43:19:72:fc:09:23:1c:6d:
e8:04:3d:26:68:c9:d7:7a:4b:29:6d:14:75:9f:6d:06:37:d4:
34:d1:97:ec:eb:2b:61:4b:1c:b1:8c:27:d5:94:59:84:b5:c4:
0b:6f:c6:de:c7:4e:fd:03:56:73:1d:9c:c2:d3:65:a9:e0:a2:
ef:a8:94:68:d6:96:01:97:9d:55:0f:9c:a8:b6:44:dd:bf:ed:
8e:f3:34:9d:92:67:93:ba:1f:aa:e2:3b:36:65:3e:c8:c4:a6:
90:ab:7b:2d:39:5a:fd:8e:f7:99:7b:c7:10:a6:4c:b1:73:0f:
40:a4:a2:8d:e3:35:48:49:1f:a7:4f:31:97:15:82:cb:98:5c:
52:fa:ca:fe:dd:90:1c:6a:57:a0:82:a8:44:69:0a:4b:d5:5e:
4a:01:67:2f:05:53:cb:fa:a8:92:50:1f:3d:6f:d0:1b:7b:76:
6d:fb:99:26:12:e4:97:db:31:ad:b8:2c:76:67:b2:fb:2a:a4:
9e:f9:b5:d7:1f:ec:38:ee:ce:2f:65:0d:5f:f7:c8:a0:97:e5:
d7:a8:ce:0f:db:72:fa:ac:47:47:b4:ea:cd:0d:ca:91:12:c1:
29:57:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:50 2026 by rpki-client