Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
File: RqlWvtJoh-zDNOme-RpZrXvBwg0.mft (raw, json)
Hash identifier: 8q6BsQWk3HyLtkMPZaARf0/Q/vbWyopUHE+rVL20HfM=
Subject key identifier: 57:D3:BA:A9:3B:EC:66:64:16:A4:F9:93:A7:00:F1:03:42:8E:14:30
Authority key identifier: 46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
Certificate issuer: /CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Certificate serial: 019F8F7FA826847B05E39A56508754F4CC44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:15 +0000
Manifest this update: Thu 23 Jul 2026 15:02:15 +0000
Manifest next update: Fri 24 Jul 2026 15:02:15 +0000
Files and hashes: 1: RqlWvtJoh-zDNOme-RpZrXvBwg0.crl (hash: Ho/JqPsV6jGGTshjx9LzbPo/OMSCLZXUhj70+et7sk4=)
2: iKuPyI8zLCgawXSKX7-BKU55u_A.roa (hash: MfsvzyIXZkMQ/jz1uJByq5Hlv40Mpv4XoWbE4eac8sA=)
3: jlb1JR39IZf6Kz4j-cidvZRw1XU.roa (hash: Lqj4swNPp/lea9TA80l8kyLyCZmi6zz9jIqgO1fuqCw=)
4: v1sDuaAhI8RktqCN1F9A6U4PuUQ.roa (hash: nbLLR8O00X3nu5KSCFNmcVmiRFRIuKaoskqHKWizJhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:a8:26:84:7b:05:e3:9a:56:50:87:54:f4:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Validity
Not Before: Jul 23 15:02:15 2026 GMT
Not After : Jul 24 15:02:15 2026 GMT
Subject: CN=57d3baa93bec666416a4f993a700f103428e1430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:47:ee:f7:f4:1e:c7:2c:de:a5:74:28:54:
71:5f:9e:77:ef:81:ba:df:0c:cf:3b:02:b2:63:d2:
5e:5a:78:8c:07:1c:6a:8b:ee:3a:4a:c9:fb:c8:da:
fd:40:84:df:90:0e:cf:6b:f0:95:da:6e:33:fb:d8:
6d:f2:07:c7:09:ac:b5:7e:ad:49:91:b6:4b:98:36:
74:6a:36:8b:46:48:b2:8f:0d:6a:b6:96:02:ff:69:
e3:45:f9:46:58:61:21:7e:37:24:a1:5e:74:01:c9:
7a:ba:c5:88:97:ab:e2:8b:73:dc:43:28:cb:e1:d4:
e9:2b:b4:5b:84:58:b9:45:24:1b:6d:80:97:b2:af:
27:36:c0:b9:9d:26:40:d7:80:cc:b4:ae:ce:b5:4e:
5c:00:53:a0:a0:72:04:f0:31:29:46:8d:20:d0:f7:
42:0b:2b:2a:ea:f2:66:03:89:5a:d2:17:e4:c6:c6:
2d:e2:36:c6:b1:45:5e:66:7f:a9:5a:54:a2:22:ff:
e8:2b:61:e4:d4:02:a2:37:f5:7f:87:a6:37:ad:a9:
25:cc:8d:54:84:7e:57:60:7e:05:95:ec:18:48:1f:
d6:de:96:26:fb:f2:60:b9:04:6d:05:14:bf:22:ef:
32:17:1b:c6:00:a8:4d:50:d2:f2:83:d0:6e:20:3f:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D3:BA:A9:3B:EC:66:64:16:A4:F9:93:A7:00:F1:03:42:8E:14:30
X509v3 Authority Key Identifier:
keyid:46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c2:0c:c5:b6:6d:a8:ef:a4:51:a1:99:4f:f0:2c:32:01:95:
1e:36:f1:13:4e:b7:c8:5a:01:85:5d:e6:c0:c3:12:ca:65:c0:
19:8d:cf:ac:12:21:81:38:3a:71:f1:a3:23:05:40:3d:0f:dc:
e8:16:d3:c7:48:eb:df:63:a1:f7:b7:3d:57:5a:1c:81:6d:43:
59:ca:72:20:08:08:18:3b:1f:71:a5:4f:f2:6a:03:d6:59:a2:
1e:df:3c:86:28:2d:d0:c6:5f:e2:73:bd:3d:7b:3a:ce:5f:3c:
44:f3:15:50:3f:3d:f4:54:a3:b2:d8:a4:f1:9c:a0:93:7b:22:
34:98:aa:e7:4c:d9:0d:1d:07:cd:32:25:0b:4e:04:f3:c7:56:
13:73:bf:0c:b6:d8:da:5a:2b:08:e7:9d:60:6b:07:19:38:f6:
35:25:e8:97:cc:96:35:ef:6b:ef:b4:84:1d:30:02:99:d9:0d:
30:29:bd:56:8c:53:30:28:d2:a6:23:b5:8f:f7:fc:18:d8:45:
10:10:e4:93:36:ec:9d:4a:fd:ab:28:40:4d:53:6b:b5:6c:72:
45:dc:43:54:83:ce:66:11:ea:81:ad:94:89:32:1f:c4:92:d8:
28:e9:83:ed:57:17:07:6a:6e:a6:52:e1:94:78:72:a5:95:2d:
21:40:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:16 2026 by rpki-client