Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: rDa6oAOX/mylKtf2JE53APBi5fbKY7VnWNdwhXxbji8=
Subject key identifier: 7D:95:18:01:8D:90:21:8E:B5:48:5B:01:C2:9C:EA:7E:02:9B:AF:CD
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019FA1169011DFE4614BCFDC6288BAF46157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0B65
Signing time: Mon 27 Jul 2026 01:00:38 +0000
Manifest this update: Mon 27 Jul 2026 01:00:38 +0000
Manifest next update: Tue 28 Jul 2026 01:00:38 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: ILWtz4uoaApBUOhSNaIOR0v4/s5t9XIQJL+XwAffJ78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:90:11:df:e4:61:4b:cf:dc:62:88:ba:f4:61:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jul 27 01:00:38 2026 GMT
Not After : Jul 28 01:00:38 2026 GMT
Subject: CN=7d9518018d90218eb5485b01c29cea7e029bafcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:ea:dc:69:15:ad:cd:ee:87:e4:6e:1c:12:
ff:1a:38:4c:5c:f0:d6:b2:49:69:37:03:22:8d:31:
36:71:ac:6c:f1:07:da:e7:af:1a:4b:6f:42:93:91:
d2:dc:aa:0b:d7:cc:08:30:b4:3c:72:27:6b:80:c1:
42:e4:18:6c:05:db:93:46:52:02:a9:44:05:e9:6f:
ae:54:dd:4e:69:be:21:d7:13:f7:19:cf:2e:ec:0c:
d5:89:76:2b:4f:44:48:fb:82:75:52:e1:29:3a:44:
c3:ff:91:27:e4:9c:ef:a1:15:c7:91:0b:65:8d:2b:
bc:0a:a8:18:38:d3:e8:d0:2f:cd:08:87:c1:be:ab:
b8:34:39:53:26:a6:93:13:1c:3b:a2:82:e6:2d:a9:
d8:fc:ec:8d:d8:1f:02:27:aa:fd:fa:05:0f:7b:cf:
d1:3e:6c:2a:09:7d:5a:a0:2b:b7:30:76:07:c5:76:
06:a3:29:37:49:5b:30:72:bb:25:76:db:58:e7:9b:
05:f7:0f:4e:67:f2:90:a6:8e:36:5b:06:f0:3f:ae:
78:06:31:de:62:f0:55:22:0f:d3:41:9d:06:59:b5:
37:14:d9:50:1d:88:60:cd:a6:3d:42:d0:32:73:5f:
1b:0e:57:17:c1:5b:ce:c8:87:4d:03:31:d3:0e:90:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:95:18:01:8D:90:21:8E:B5:48:5B:01:C2:9C:EA:7E:02:9B:AF:CD
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5d:e2:be:b6:b9:0c:de:57:90:9a:09:82:70:e4:37:22:eb:
9e:ca:07:cf:87:16:04:54:35:3b:68:f0:8f:66:3f:38:9f:bb:
45:db:8a:1a:24:22:a5:74:bc:c9:83:d4:17:5b:d5:36:0e:91:
36:67:b1:ab:ec:48:77:75:21:26:12:ec:c6:19:a6:7d:03:3a:
1e:92:d1:78:ce:83:4e:aa:9e:2d:f0:c9:df:d7:f6:e6:9a:49:
63:4a:b4:be:55:1a:e4:ae:a9:16:cf:2a:d8:b0:30:e6:38:5b:
f9:ef:cd:f1:a3:83:a1:9b:47:43:53:9d:6d:e9:16:d9:0a:45:
21:5f:40:60:56:bc:13:f0:9c:ec:66:24:a1:cf:e7:53:4f:2e:
86:a3:29:db:38:0d:57:6f:c0:c7:a6:d5:01:b2:e1:5e:87:9b:
84:31:24:32:12:7c:47:92:d4:25:16:30:8e:75:08:7c:f5:2d:
c8:09:45:bb:86:48:66:16:9d:ae:aa:5c:6d:6a:3e:10:0d:22:
bc:5f:28:4d:e1:f6:34:bc:8a:f0:38:9e:5d:2c:36:89:b3:a7:
3e:8d:52:45:0c:52:16:03:d1:83:38:98:5b:f9:7f:14:30:d3:
1a:d4:90:9e:a1:86:af:f2:9a:bc:fb:3d:0a:06:19:24:29:79:
bc:7f:5b:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hFpAR3+RhS8/cYoi69GFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh
YWUyMjgwHhcNMjYwNzI3MDEwMDM4WhcNMjYwNzI4MDEwMDM4WjAzMTEwLwYDVQQD
Eyg3ZDk1MTgwMThkOTAyMThlYjU0ODViMDFjMjljZWE3ZTAyOWJhZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEjq3GkVrc3uh+RuHBL/GjhMXPDW
sklpNwMijTE2caxs8Qfa568aS29Ck5HS3KoL18wIMLQ8cidrgMFC5BhsBduTRlIC
qUQF6W+uVN1Oab4h1xP3Gc8u7AzViXYrT0RI+4J1UuEpOkTD/5En5JzvoRXHkQtl
jSu8CqgYONPo0C/NCIfBvqu4NDlTJqaTExw7ooLmLanY/OyN2B8CJ6r9+gUPe8/R
PmwqCX1aoCu3MHYHxXYGoyk3SVswcrsldttY55sF9w9OZ/KQpo42WwbwP654BjHe
YvBVIg/TQZ0GWbU3FNlQHYhgzaY9QtAyc18bDlcXwVvOyIdNAzHTDpCjwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2VGAGNkCGOtUhbAcKc6n4Cm6/NMB8GA1UdIwQY
MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt
MzUyZjdjYTAxMWFlLzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl
LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbl3ivra5
DN5XkJoJgnDkNyLrnsoHz4cWBFQ1O2jwj2Y/OJ+7RduKGiQipXS8yYPUF1vVNg6R
Nmexq+xId3UhJhLsxhmmfQM6HpLReM6DTqqeLfDJ39f25ppJY0q0vlUa5K6pFs8q
2LAw5jhb+e/N8aODoZtHQ1OdbekW2QpFIV9AYFa8E/Cc7GYkoc/nU08uhqMp2zgN
V2/Ax6bVAbLhXoebhDEkMhJ8R5LUJRYwjnUIfPUtyAlFu4ZIZhadrqpcbWo+EA0i
vF8oTeH2NLyK8DieXSw2ibOnPo1SRQxSFgPRgziYW/l/FDDTGtSQnqGGr/KavPs9
CgYZJCl5vH9bKQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:32 2026 by rpki-client