Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
File: rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft (raw, json)
Hash identifier: 2UjcuSjBZL+aKc54GQ6hc7vdSE5/hmKvocoH8HJtQLs=
Subject key identifier: 22:DB:B7:BA:C2:BD:15:43:A3:79:D0:4F:1E:CD:74:92:3E:DF:DF:9A
Authority key identifier: AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
Certificate issuer: /CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Certificate serial: 019F935B0F46E0662F276D0DDD73D8588FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:46 +0000
Manifest this update: Fri 24 Jul 2026 09:00:46 +0000
Manifest next update: Sat 25 Jul 2026 09:00:46 +0000
Files and hashes: 1: 5SWtCRFt6WsOjb-tdJ3j5NUNj0s.roa (hash: 8jRo/6ysSzkjLks/pza54/NHIMmLzqF2Z1dcDNEC0e4=)
2: rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl (hash: VSOrRsinztt2Np1CiTdVswrkn2NVw/GM3mtP5bo2Zmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:0f:46:e0:66:2f:27:6d:0d:dd:73:d8:58:8f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Validity
Not Before: Jul 24 09:00:46 2026 GMT
Not After : Jul 25 09:00:46 2026 GMT
Subject: CN=22dbb7bac2bd1543a379d04f1ecd74923edfdf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:13:21:34:d5:47:21:a7:d1:7f:01:a7:c0:
75:65:fd:ef:b7:1c:c9:5a:d6:a7:fd:0b:e2:94:c6:
cb:a0:cc:d6:3f:88:8d:b4:af:49:24:66:38:94:b8:
1e:e2:8e:cd:3c:43:40:e9:23:8f:48:74:63:2a:81:
0b:c4:4f:3b:b8:48:fe:5d:c7:ca:64:6d:22:7f:5e:
c0:3f:9e:68:0b:55:68:ab:67:dd:fc:71:09:c6:4f:
dc:cf:a4:b9:ef:13:5e:a0:17:ad:e9:c4:1a:8a:fb:
4e:69:30:90:6e:0d:f8:2d:a3:07:a0:62:f9:ef:fd:
42:f0:21:41:94:e5:dd:d6:21:39:d4:58:7b:9b:e4:
09:99:0f:98:c8:6c:30:99:a6:89:a5:6c:06:c5:2b:
bd:9c:82:ff:2e:30:c5:4d:5e:d3:d9:9b:13:6d:ae:
a3:9f:ae:2f:be:93:07:a1:48:d7:96:42:17:3b:cf:
92:8b:13:43:8d:a8:ce:62:c9:54:66:4f:2b:97:ef:
44:58:c9:b0:29:9b:f6:46:d6:27:fa:d0:7c:8c:c3:
fb:d7:d8:ee:5b:5b:f3:7d:8f:7d:f2:2b:cd:f9:f7:
55:f5:48:45:0e:66:6d:d8:a3:e5:cb:1f:fb:9b:ba:
92:27:ea:8b:82:f7:01:5f:3d:8e:85:f8:fb:95:b8:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:B7:BA:C2:BD:15:43:A3:79:D0:4F:1E:CD:74:92:3E:DF:DF:9A
X509v3 Authority Key Identifier:
keyid:AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:75:e6:cf:04:9e:66:05:a1:6e:c9:95:25:82:f8:e7:2b:1e:
19:52:6f:e8:25:7a:1c:d2:17:00:a2:ad:c2:73:42:a7:19:9a:
c9:e8:cf:ec:8e:ea:8b:30:dd:7c:fa:34:a8:7a:f6:07:5c:b3:
6f:59:22:ec:ca:e3:e7:01:23:68:1d:bd:bb:b0:e6:74:6a:60:
b7:bc:95:4f:9d:53:5c:74:da:14:d5:d9:b1:9f:a6:77:09:39:
6d:ad:c1:6d:47:89:98:2e:d6:a3:7b:f3:ee:0b:0d:89:56:ac:
82:1d:ef:37:ab:c9:bb:48:22:e7:51:03:3a:49:97:09:08:2b:
9f:f3:ea:ee:41:2f:76:77:5a:cd:7e:20:60:1d:86:00:a4:85:
35:35:72:fb:7f:83:9d:c7:39:6e:93:81:87:5b:2a:ad:a5:87:
92:41:1f:1c:00:2f:51:3b:87:6d:9d:20:44:d1:15:bb:ee:86:
87:12:0b:f7:f4:ec:40:9a:f4:e1:d0:a3:96:d2:f2:5c:dd:7b:
c9:31:1f:e6:41:2c:18:2a:95:ca:46:16:fc:92:45:9b:12:dd:
fb:87:a2:51:d9:ad:44:ae:b7:01:37:c7:38:fb:4e:3c:09:e0:
3e:d4:ed:fe:3d:1d:68:cb:f8:5f:a8:b3:90:39:ab:bc:d5:31:
eb:6b:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:39 2026 by rpki-client