Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
File: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft (raw, json)
Hash identifier: Yy6ZeJJjjeSrJLu0lIxX5lDa9uG1CXIZaZJ0FTwvRQo=
Subject key identifier: B4:EB:87:16:9B:26:34:C2:B9:DD:09:82:75:57:8C:27:00:61:25:42
Authority key identifier: D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
Certificate issuer: /CN=d5a42a0ffd0274c655070609549e6420b63284df
Certificate serial: 019F8BA1389F889C151FEA3C4144B6662D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
Manifest number: 3D
Signing time: Wed 22 Jul 2026 21:00:26 +0000
Manifest this update: Wed 22 Jul 2026 21:00:26 +0000
Manifest next update: Thu 23 Jul 2026 21:00:26 +0000
Files and hashes: 1: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl (hash: +gE1PtuPcnNy2ceWb33yoiX4kdeFJqkLtF4WwULqoXA=)
2: FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa (hash: vbWMXzKS4D5+2q+2t821SHbD4J+yqJXDqLxiG6blyO0=)
3: sAks3DmPZ6CqoQlRY3bGSvOGHik.roa (hash: Ee7Zl0TzS27Mz1IwdlPhsbhVTUojNkqd2MBy8kTqIm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:a1:38:9f:88:9c:15:1f:ea:3c:41:44:b6:66:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a42a0ffd0274c655070609549e6420b63284df
Validity
Not Before: Jul 22 21:00:26 2026 GMT
Not After : Jul 23 21:00:26 2026 GMT
Subject: CN=b4eb87169b2634c2b9dd098275578c2700612542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:7d:b6:24:5a:ee:06:cc:ee:3c:c2:9b:0e:
33:2c:2b:aa:ff:22:da:f3:46:7b:54:70:26:c3:4b:
72:59:56:b9:7d:8c:9b:aa:b3:52:0e:dc:23:09:f0:
38:31:bb:1f:3a:2b:95:43:84:16:b6:ec:2c:f6:a1:
ad:28:59:8c:7a:99:c4:a3:9a:6d:23:91:87:8a:0d:
91:39:0c:c8:46:73:40:8c:fc:8d:4c:79:58:4b:ec:
2b:d1:8e:9e:59:ba:ce:5b:e3:ba:0b:77:57:ef:b5:
8e:ac:65:26:1e:72:61:05:12:3e:5e:ec:a2:db:71:
d2:5f:1c:43:c0:0e:28:f2:aa:78:03:61:5b:12:30:
e3:77:6e:ff:7d:0c:68:f3:13:51:bf:d5:ed:b7:16:
aa:7d:7f:49:87:e1:9c:33:7a:45:e9:93:01:4f:80:
14:a1:1a:c2:cf:32:a3:40:ae:a8:e7:b1:f1:e0:fa:
6d:cb:26:ea:a1:ba:ed:13:53:c1:12:ce:f6:bb:d6:
7a:c4:c3:4e:f2:8c:41:ac:9f:e4:56:d6:2f:dd:0a:
1a:3e:ea:45:d6:22:22:e1:43:94:5e:1d:24:b8:4c:
5e:c8:20:8a:05:2f:cb:0a:f5:03:57:4d:c9:ab:b9:
9a:6c:c1:40:06:37:91:7a:1b:c5:82:8b:9c:2d:52:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EB:87:16:9B:26:34:C2:B9:DD:09:82:75:57:8C:27:00:61:25:42
X509v3 Authority Key Identifier:
keyid:D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:94:ed:f6:f4:e4:95:42:39:d3:b1:9c:91:68:f2:2b:e5:b6:
2a:15:9b:a5:a0:15:5b:9e:c0:b1:ba:23:17:d3:b4:b0:57:11:
89:04:62:c5:1c:0e:b4:78:b5:9f:1d:5c:60:6d:d1:b4:f7:75:
c9:d1:88:08:b6:03:4d:22:fe:8e:1c:ef:a5:b2:c4:2f:fd:ab:
cd:d8:26:5c:0b:2d:7c:b7:37:5d:5e:56:01:9a:9c:1d:c5:64:
98:54:13:03:3c:db:98:52:b0:e7:d2:ce:e6:d8:ce:10:2b:3b:
67:d9:85:22:8e:f4:88:69:99:57:98:ef:a9:6c:a1:0c:3d:70:
f9:e0:2f:e5:ad:56:22:67:8b:90:d4:3f:7b:d0:63:21:d6:fe:
f5:8e:f8:e8:c6:49:55:1a:c2:aa:a9:f9:a7:dc:0f:c5:74:eb:
3d:c3:dc:7e:a8:7d:85:9f:d2:e1:8b:22:88:5f:b0:ae:4b:1d:
e5:be:d0:f6:1c:85:a4:1f:53:ef:5d:50:92:0f:74:a9:7a:6a:
b1:6f:77:a4:a9:99:05:93:b2:26:47:94:58:f2:df:2d:03:ea:
4e:05:4c:e9:9d:23:37:57:f6:33:11:79:8f:fc:32:80:1f:b8:
d8:14:9e:43:2d:e7:6e:31:c4:d4:2b:fa:85:1c:63:99:a5:6b:
36:f6:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:43:49 2026 by rpki-client