Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
File: RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft (raw, json)
Hash identifier: 6Tpra1HXKz2LGl936Vht6ty5aWvQEClOJGOh40Ldb3g=
Subject key identifier: B8:F4:18:F4:2F:E9:BC:FF:E3:0A:9D:88:C1:CB:A4:B0:C0:CD:B9:78
Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
Certificate issuer: /CN=462767a7375f1ac546691aaf2a511fbb6277031d
Certificate serial: 019F8EA23229822599A0959BE4C9A2AAF4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
Manifest number: 0246
Signing time: Thu 23 Jul 2026 11:00:22 +0000
Manifest this update: Thu 23 Jul 2026 11:00:22 +0000
Manifest next update: Fri 24 Jul 2026 11:00:22 +0000
Files and hashes: 1: 0ppkgAkMVUZmtvxiis_JaRg_jKc.roa (hash: hmBjjzY/GLh0BaP+YN19dWeqC0F3ldt8pYexHB8bxW0=)
2: RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl (hash: NPrUcflWm9wOIfDdiVt5X4lYGAFjVOk6xE06YPt/e1c=)
3: gFOGmZRlX2Va7a4eZJorJSldfM0.asa (hash: iWV8IrqVD+U7+lJQU0PeeR9WILJwhPNuOe7C9EI2EN0=)
4: hvFmobLJgv_FtphUoy5jADPJJnc.roa (hash: jnuVvbpAgeJ1NUOXj3up5SgN82P8AgWr5+BqvtU3HaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:32:29:82:25:99:a0:95:9b:e4:c9:a2:aa:f4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d
Validity
Not Before: Jul 23 11:00:22 2026 GMT
Not After : Jul 24 11:00:22 2026 GMT
Subject: CN=b8f418f42fe9bcffe30a9d88c1cba4b0c0cdb978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:91:8c:62:39:dd:28:04:5d:7b:0b:08:d5:
60:01:07:32:5d:48:ac:85:58:c0:34:17:14:07:5d:
a8:1d:35:35:f5:24:61:29:64:37:5c:3d:b8:c7:13:
1a:79:f3:10:3e:9f:f4:ce:2d:dd:3b:d0:74:7a:81:
33:30:6b:16:d7:01:b3:a0:d3:21:ae:d0:74:21:b3:
e9:98:e6:cf:85:40:c7:2b:b1:26:b0:25:7e:5e:68:
12:01:26:c7:66:62:12:07:cd:22:22:f6:c6:76:6a:
47:68:38:57:a8:86:31:89:c9:40:d5:89:ec:18:62:
c0:a3:d7:2d:ec:34:2a:02:18:97:dd:77:8d:1e:5b:
3d:2c:e2:8f:3a:c6:16:0a:f6:dd:df:ab:bc:02:92:
a6:b2:bb:68:bd:95:ac:61:97:1a:9b:46:a4:ff:54:
7c:50:2f:86:c0:b0:13:2c:71:65:43:33:3b:6e:c6:
77:c8:dc:d2:cb:96:a5:d6:1d:5a:9b:55:ae:eb:80:
47:80:35:14:69:62:c5:6b:c5:ef:90:4c:a4:27:8f:
43:95:62:fb:71:4c:90:63:ae:97:46:39:78:12:96:
6e:07:3a:84:a9:44:36:d2:88:f3:b4:3c:f5:27:e3:
4c:55:59:10:8d:ae:ce:2a:4e:fb:23:8a:32:88:8f:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F4:18:F4:2F:E9:BC:FF:E3:0A:9D:88:C1:CB:A4:B0:C0:CD:B9:78
X509v3 Authority Key Identifier:
keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:48:39:b9:b8:15:40:6c:14:cb:2e:cc:b3:d3:7b:38:84:ee:
78:c3:43:3d:1e:2c:17:dc:44:c9:07:80:70:52:fc:c6:55:35:
bd:2f:db:f7:20:7c:a8:12:1d:04:31:d7:67:1a:a3:3f:47:bf:
26:81:f3:a8:5d:e0:b9:b2:7b:9f:cc:ba:3b:66:51:5a:d7:65:
80:d6:66:d5:97:24:9d:0e:b4:15:a3:24:60:c4:32:04:20:f0:
62:b1:bb:fa:86:0d:19:dd:82:a0:ec:d0:09:9d:e5:34:b0:fa:
25:a8:f0:21:67:46:56:f4:2d:00:ec:d9:53:16:3f:2c:fb:13:
fd:41:cc:5c:71:f3:cd:96:f4:b5:4a:a3:01:02:70:68:a9:02:
f2:f0:dc:9a:e8:4a:91:07:cf:73:cc:57:ba:c6:af:ee:7a:aa:
44:9a:a1:a0:a5:59:d3:30:68:5a:da:1e:11:ec:6a:bb:92:5c:
2e:2c:81:78:9d:1c:c8:e3:5e:19:fe:e7:59:f2:47:28:19:cc:
36:78:57:e3:6a:72:ca:51:7b:b2:2f:dc:09:2c:ee:1e:f8:ba:
10:d5:8e:91:50:83:10:a5:70:9a:8e:bf:af:cc:de:ab:60:27:
c5:83:09:e5:f8:a8:74:2f:da:af:2f:d3:fe:2e:b7:8a:6d:bb:
8d:4b:e5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:48 2026 by rpki-client