Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: insKGn4vMT/xq2BfSNLVRqoZCeiux1OX9Tz2cwA4e+4=
Subject key identifier: 30:0D:85:44:1A:3E:73:B9:DE:65:51:AD:D7:E1:CC:5A:90:0A:6E:15
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 019F276DAC429774E38D8EC732AE4B17CDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 111D
Signing time: Fri 03 Jul 2026 10:02:06 +0000
Manifest this update: Fri 03 Jul 2026 10:02:06 +0000
Manifest next update: Sat 04 Jul 2026 10:02:06 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: H8+it1dw1fq0jg23aVh8oWnmjI+uqYavcMZWge/9M+s=)
2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:6d:ac:42:97:74:e3:8d:8e:c7:32:ae:4b:17:cd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Jul 3 10:02:06 2026 GMT
Not After : Jul 4 10:02:06 2026 GMT
Subject: CN=300d85441a3e73b9de6551add7e1cc5a900a6e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:0f:7d:c7:38:32:c6:2e:31:00:ff:93:7f:
62:d6:2e:5e:a9:24:cf:3a:de:16:66:61:33:a9:8d:
ca:8a:30:75:71:f5:70:2f:86:85:c8:7b:2d:59:bf:
ee:af:db:ed:b7:8c:f2:d5:c0:68:83:16:88:89:5e:
7e:cb:91:e0:84:6a:83:a5:06:4d:65:98:65:30:49:
88:a3:12:01:34:6a:79:8a:9a:69:79:91:c4:67:85:
44:42:49:7e:0d:37:42:b0:83:1a:5e:67:f8:6c:95:
e9:f4:0f:37:eb:bf:a1:a2:72:15:20:a5:29:6f:fd:
b4:20:3f:03:b7:ff:ce:b7:71:e5:78:4b:ba:45:35:
e9:98:b6:00:9c:07:5e:87:5d:a5:16:a1:20:b9:b6:
b0:cc:57:95:9e:d3:34:f2:5a:1c:80:3b:e8:8d:fb:
31:e1:c8:14:8d:84:55:cb:da:e1:61:07:4d:0d:0d:
7b:09:c0:e9:69:aa:0a:3a:a4:21:d2:15:13:f1:48:
f4:39:47:84:e8:d0:d8:7f:a0:af:95:f1:40:ac:69:
da:dd:e5:a4:d2:66:4b:07:cf:47:2f:91:01:0c:e8:
ed:ea:27:d3:bc:3f:45:41:07:7d:44:9c:2b:09:40:
30:5a:04:22:f5:55:06:4a:d5:61:b7:ed:75:2c:6a:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0D:85:44:1A:3E:73:B9:DE:65:51:AD:D7:E1:CC:5A:90:0A:6E:15
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1f:ce:9d:47:fc:3f:6b:1d:85:06:49:fc:43:3c:10:b7:6f:
21:91:f0:61:3a:c9:eb:96:ce:63:43:70:57:53:37:7d:dd:94:
cd:a6:b3:39:8a:a2:bf:25:91:4e:b4:1b:7b:69:c4:b5:ce:63:
4a:74:b1:98:ca:09:4d:3d:1c:45:e1:9a:74:9d:a9:dd:c8:ce:
85:42:bc:d1:f3:55:a5:6f:50:d2:1b:72:8a:12:6b:5f:0c:e2:
05:2c:90:dd:f3:35:2f:62:3e:6b:f4:ae:b2:0a:77:19:47:de:
fe:24:d2:98:91:84:30:fc:55:25:8e:d8:8c:85:79:d6:1b:90:
5b:e0:22:46:6d:4b:a4:6a:53:e2:f0:a0:4c:9d:ee:fc:ed:36:
ca:65:59:75:62:e4:9f:3b:86:18:13:1a:d8:57:49:d5:48:34:
9d:cc:f4:a2:a3:b1:06:78:89:90:29:ee:3c:b4:43:10:f9:2c:
33:10:3b:31:3a:af:0d:48:37:f8:d2:9e:80:c8:cf:c7:db:fe:
cb:98:af:b4:eb:3d:fa:44:a8:a7:f5:04:03:8e:b2:df:5c:32:
67:e9:a7:c2:eb:0b:72:79:d5:c7:29:a2:de:29:95:7a:8c:6c:
b9:1a:ba:83:0b:96:b2:6f:b7:15:fa:fb:cd:d2:51:c8:31:51:
13:2c:cd:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8nbaxCl3TjjY7HMq5LF83hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw
OTMwMjcwHhcNMjYwNzAzMTAwMjA2WhcNMjYwNzA0MTAwMjA2WjAzMTEwLwYDVQQD
EygzMDBkODU0NDFhM2U3M2I5ZGU2NTUxYWRkN2UxY2M1YTkwMGE2ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttwPfcc4MsYuMQD/k39i1i5eqSTP
Ot4WZmEzqY3KijB1cfVwL4aFyHstWb/ur9vtt4zy1cBogxaIiV5+y5HghGqDpQZN
ZZhlMEmIoxIBNGp5ipppeZHEZ4VEQkl+DTdCsIMaXmf4bJXp9A8367+honIVIKUp
b/20ID8Dt//Ot3HleEu6RTXpmLYAnAdeh12lFqEgubawzFeVntM08locgDvojfsx
4cgUjYRVy9rhYQdNDQ17CcDpaaoKOqQh0hUT8Uj0OUeE6NDYf6CvlfFArGna3eWk
0mZLB89HL5EBDOjt6ifTvD9FQQd9RJwrCUAwWgQi9VUGStVht+11LGpE4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDANhUQaPnO53mVRrdfhzFqQCm4VMB8GA1UdIwQY
MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt
NTk1YWRjNWJmZDc0LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0
LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAux/OnUf8
P2sdhQZJ/EM8ELdvIZHwYTrJ65bOY0NwV1M3fd2UzaazOYqivyWRTrQbe2nEtc5j
SnSxmMoJTT0cReGadJ2p3cjOhUK80fNVpW9Q0htyihJrXwziBSyQ3fM1L2I+a/Su
sgp3GUfe/iTSmJGEMPxVJY7YjIV51huQW+AiRm1LpGpT4vCgTJ3u/O02ymVZdWLk
nzuGGBMa2FdJ1Ug0ncz0oqOxBniJkCnuPLRDEPksMxA7MTqvDUg3+NKegMjPx9v+
y5ivtOs9+kSop/UEA46y31wyZ+mnwusLcnnVxymi3imVeoxsuRq6gwuWsm+3Ffr7
zdJRyDFREyzNQw==
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:23:08 2026 by rpki-client