Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
File: Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft (raw, json)
Hash identifier: A/b5IZ6kKWUSuPLrZflJk7IuXSCaFxF+x2E6WSXDPwM=
Subject key identifier: 48:11:8C:BD:E4:D2:E2:99:42:4D:1B:82:6B:67:50:93:0B:DD:FC:E2
Authority key identifier: 43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
Certificate issuer: /CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Certificate serial: 019F935B4EBBDE86544229A2C00F9BBAE0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:02 +0000
Manifest this update: Fri 24 Jul 2026 09:01:02 +0000
Manifest next update: Sat 25 Jul 2026 09:01:02 +0000
Files and hashes: 1: HuS9HEQnmgwkuk6nNfxYJWoTZfg.roa (hash: Gax45SA31eyvFfTp8hHtUBasQUGl4kGyHCARRtiz6pQ=)
2: Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl (hash: o7HtcneCjEHGnUCBamD2jYKaSqTM0bZSv+ANDYn3GwE=)
3: xBKM8I38qGeVMeob4yWir2gnqCk.roa (hash: KcgLf5khcgwTitCwhZW6SThRiWSlxfBJuDkexFoQ3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:4e:bb:de:86:54:42:29:a2:c0:0f:9b:ba:e0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438e934d1d4e8b202ea527c5dd9442d0a276e718
Validity
Not Before: Jul 24 09:01:02 2026 GMT
Not After : Jul 25 09:01:02 2026 GMT
Subject: CN=48118cbde4d2e299424d1b826b6750930bddfce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:d2:4d:60:71:a2:e9:5a:99:40:69:2c:00:
0b:c7:b7:53:e6:76:82:46:ee:84:36:b8:f4:38:4f:
cd:02:d2:d3:fd:6d:ee:8d:db:3e:a0:c6:de:bd:7c:
2a:d4:60:21:9b:14:f7:09:9d:1c:65:5e:74:6e:8e:
7f:cd:22:a0:c3:a0:44:4f:0a:22:24:b7:ca:e1:2e:
7b:e9:35:5d:59:b7:db:c3:5c:97:7d:ff:28:c2:f5:
2b:6d:57:4d:e6:18:67:83:05:ee:e5:86:93:61:19:
12:21:f4:f8:f0:f9:5c:dc:b1:55:69:dc:65:1d:f1:
04:65:b3:08:30:2b:29:18:7c:55:fa:5a:4b:10:6d:
b7:29:cf:7a:a5:32:ef:0e:92:14:08:bd:44:c9:bc:
30:ee:93:3d:c2:b5:ae:d3:ee:2a:d4:cd:ff:12:b0:
2e:e1:fd:77:a5:69:62:9d:0c:61:13:05:cf:3b:82:
cd:d7:4e:11:11:06:0b:de:4d:45:9d:a5:1c:59:69:
63:0a:3b:30:e8:f8:fe:a2:d5:97:68:78:76:f0:6e:
dc:d7:1c:e7:54:45:d8:9b:75:d4:f5:a6:91:41:a6:
2e:2b:8d:23:4e:62:2a:3a:bb:87:1f:cd:40:6e:08:
6a:72:92:c1:fa:4a:3c:34:a3:f0:5c:df:ff:ea:40:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:11:8C:BD:E4:D2:E2:99:42:4D:1B:82:6B:67:50:93:0B:DD:FC:E2
X509v3 Authority Key Identifier:
keyid:43:8E:93:4D:1D:4E:8B:20:2E:A5:27:C5:DD:94:42:D0:A2:76:E7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q46TTR1OiyAupSfF3ZRC0KJ25xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/Q46TTR1OiyAupSfF3ZRC0KJ25xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a5:2c:c6:1b:fa:46:3f:ce:2f:60:18:5d:79:4f:22:15:33:
bb:ba:28:f6:32:e1:8e:fc:ad:29:2f:55:83:4a:bd:4c:a7:6b:
51:05:5a:a9:94:55:2f:51:f6:56:54:cb:51:7b:7f:53:77:e1:
5a:6a:f2:31:d8:05:06:1a:89:d4:c0:ec:48:a7:3e:6c:d3:d9:
8b:1b:12:b0:d2:1c:43:49:9a:76:6a:4e:a6:27:d2:28:05:22:
a6:89:6f:f5:80:ba:53:b5:b6:68:b8:f5:85:50:c5:e8:75:13:
8e:34:44:d4:ad:a4:d4:29:ee:ef:68:d9:94:50:07:34:58:f2:
ff:b6:9a:85:7e:31:8b:9c:a7:c7:9d:90:62:88:d2:e4:6c:d6:
2e:f1:f3:fd:20:4d:3a:c4:4c:6a:78:1d:16:51:34:1e:bb:ac:
8d:d4:98:68:ab:99:5a:72:0f:ab:ea:c8:cc:ad:38:3e:e4:04:
ec:8b:b7:ae:98:82:1e:b1:97:cc:fb:8e:d8:cd:0d:24:cc:d2:
55:64:68:39:72:ad:53:b1:ac:63:03:b6:e7:20:56:f3:5d:0e:
87:68:c7:1c:1f:87:6f:3a:8e:44:dc:79:06:47:80:e7:77:8c:
58:9b:d0:de:93:51:4e:66:f3:98:14:5a:df:2e:c8:9d:ad:1a:
0e:c5:f6:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW0673oZUQimiwA+buuD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOGU5MzRkMWQ0ZThiMjAyZWE1MjdjNWRkOTQ0MmQwYTI3
NmU3MTgwHhcNMjYwNzI0MDkwMTAyWhcNMjYwNzI1MDkwMTAyWjAzMTEwLwYDVQQD
Eyg0ODExOGNiZGU0ZDJlMjk5NDI0ZDFiODI2YjY3NTA5MzBiZGRmY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6PSTWBxoulamUBpLAALx7dT5naC
Ru6ENrj0OE/NAtLT/W3ujds+oMbevXwq1GAhmxT3CZ0cZV50bo5/zSKgw6BETwoi
JLfK4S576TVdWbfbw1yXff8owvUrbVdN5hhngwXu5YaTYRkSIfT48Plc3LFVadxl
HfEEZbMIMCspGHxV+lpLEG23Kc96pTLvDpIUCL1Eybww7pM9wrWu0+4q1M3/ErAu
4f13pWlinQxhEwXPO4LN104REQYL3k1FnaUcWWljCjsw6Pj+otWXaHh28G7c1xzn
VEXYm3XU9aaRQaYuK40jTmIqOruHH81AbghqcpLB+ko8NKPwXN//6kAmbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgRjL3k0uKZQk0bgmtnUJML3fziMB8GA1UdIwQY
MBaAFEOOk00dTosgLqUnxd2UQtCiducYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTQ2VFRSMU9peUF1cFNmRjNaUkMwS0oyNXhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt
NmIzYTQ3NjY3Y2E4LzEvUTQ2VFRSMU9peUF1cFNmRjNaUkMwS0oyNXhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4
LzEvUTQ2VFRSMU9peUF1cFNmRjNaUkMwS0oyNXhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKUsxhv6
Rj/OL2AYXXlPIhUzu7oo9jLhjvytKS9Vg0q9TKdrUQVaqZRVL1H2VlTLUXt/U3fh
WmryMdgFBhqJ1MDsSKc+bNPZixsSsNIcQ0madmpOpifSKAUipolv9YC6U7W2aLj1
hVDF6HUTjjRE1K2k1Cnu72jZlFAHNFjy/7aahX4xi5ynx52QYojS5GzWLvHz/SBN
OsRMangdFlE0HrusjdSYaKuZWnIPq+rIzK04PuQE7Iu3rpiCHrGXzPuO2M0NJMzS
VWRoOXKtU7GsYwO25yBW810Oh2jHHB+HbzqORNx5BkeA53eMWJvQ3pNRTmbzmBRa
3y7Ina0aDsX2MA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:39 2026 by rpki-client