Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: Pn4K2xlA9q1mgYyaYXHePvEau72EJJHCT36plFNSiQs=
Subject key identifier: 01:D9:1B:AE:BD:2D:A7:39:6E:57:6A:08:9A:1D:88:7B:C2:1B:EF:0E
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 019F423F447827C3D1209AE5C769DC2D191B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: 01FA
Signing time: Wed 08 Jul 2026 15:01:10 +0000
Manifest this update: Wed 08 Jul 2026 15:01:10 +0000
Manifest next update: Thu 09 Jul 2026 15:01:10 +0000
Files and hashes: 1: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (hash: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: BckHAFXBja5jjudi2njO7rbWLftnDThXbRLJ5oBbwbA=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:3f:44:78:27:c3:d1:20:9a:e5:c7:69:dc:2d:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Jul 8 15:01:10 2026 GMT
Not After : Jul 9 15:01:10 2026 GMT
Subject: CN=01d91baebd2da7396e576a089a1d887bc21bef0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:27:8e:72:e6:d5:97:f5:87:3c:93:00:a0:
a7:9c:a3:8d:a8:54:8a:1b:36:95:ba:6f:12:c7:26:
84:5a:4c:7b:da:c9:98:1c:13:57:04:b9:98:b5:65:
08:09:c0:66:de:0f:47:4e:e1:18:d8:55:de:57:78:
54:ac:d7:29:67:18:23:f6:d0:1a:19:62:83:91:ed:
7a:da:08:30:28:28:a2:99:2c:be:8c:52:f7:d2:d4:
8d:b9:04:88:c3:00:8c:8f:6a:a0:64:0f:5e:8f:c6:
ac:db:22:80:b0:fd:c7:bf:7b:58:2f:65:d8:13:45:
60:5b:7c:76:1f:d8:53:4d:c5:6f:94:f9:fe:ad:11:
3f:40:48:e5:be:3e:ce:2a:da:ee:58:8f:38:d6:a0:
79:e4:78:8a:51:c8:3b:b7:2c:a8:c3:f6:9c:bf:b2:
4d:77:95:a9:31:01:7e:2b:8c:58:b4:03:a0:dc:1a:
8d:29:71:2a:38:db:fe:a8:8c:2c:fb:a0:b5:88:cd:
c0:e7:f6:e2:17:4a:9f:40:5f:c9:d6:0b:85:cd:98:
1d:e9:57:b2:20:57:3e:af:e4:19:ce:e3:d5:53:ba:
f6:f9:60:ae:10:69:3a:31:05:70:5e:2b:a4:1c:ed:
e6:f0:51:68:27:d2:74:57:e5:df:c1:04:ef:9d:12:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:1B:AE:BD:2D:A7:39:6E:57:6A:08:9A:1D:88:7B:C2:1B:EF:0E
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fb:eb:ca:c5:8c:91:89:f5:90:8c:ac:64:73:56:12:39:41:
7d:5b:a0:9d:34:3b:d3:c0:f2:df:04:2a:60:f4:a2:86:d0:71:
b4:c1:4b:7d:76:7b:1a:ee:0f:6d:67:5f:62:c0:65:c9:27:ad:
bb:3e:9f:d7:73:75:b1:9f:7d:94:7d:fc:ac:e4:d8:6c:bd:a5:
d1:2d:6c:95:87:45:44:3b:9d:b6:4f:aa:b7:18:54:65:73:21:
31:60:f6:02:83:98:7a:fd:84:5a:03:60:65:4e:7c:91:2e:7f:
c2:81:d6:1c:31:1f:78:63:15:15:65:68:dc:e7:6f:ca:43:9e:
d2:be:ee:9e:f5:b0:68:06:34:98:0b:11:22:27:48:c3:d4:13:
d4:e0:51:ba:8f:43:fc:07:6f:cd:1a:e5:f2:63:a2:57:fe:81:
2a:68:9b:0e:50:a2:1e:fe:e7:28:20:40:05:f7:5a:d6:c9:39:
da:3e:9c:c0:56:66:cb:03:90:e2:31:85:4d:98:64:9e:b6:46:
aa:2e:ce:9b:a3:23:42:30:4b:1a:be:e4:1f:f3:e2:51:a7:ae:
eb:6d:5e:f3:10:9b:23:d9:77:a7:e9:00:ef:b6:09:5e:0a:4b:
f3:33:f4:dd:fd:fd:ec:3b:c5:00:9f:32:90:9d:f3:bc:67:e1:
12:68:ad:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9CP0R4J8PRIJrlx2ncLRkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDhkNzFiNzcyYTAzMTc0MGUxZDQxMmRlZjY4NTdjYzRi
MWQ0NWEwHhcNMjYwNzA4MTUwMTEwWhcNMjYwNzA5MTUwMTEwWjAzMTEwLwYDVQQD
EygwMWQ5MWJhZWJkMmRhNzM5NmU1NzZhMDg5YTFkODg3YmMyMWJlZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLEnjnLm1Zf1hzyTAKCnnKONqFSK
GzaVum8SxyaEWkx72smYHBNXBLmYtWUICcBm3g9HTuEY2FXeV3hUrNcpZxgj9tAa
GWKDke162ggwKCiimSy+jFL30tSNuQSIwwCMj2qgZA9ej8as2yKAsP3Hv3tYL2XY
E0VgW3x2H9hTTcVvlPn+rRE/QEjlvj7OKtruWI841qB55HiKUcg7tyyow/acv7JN
d5WpMQF+K4xYtAOg3BqNKXEqONv+qIws+6C1iM3A5/biF0qfQF/J1guFzZgd6Vey
IFc+r+QZzuPVU7r2+WCuEGk6MQVwXiukHO3m8FFoJ9J0V+XfwQTvnRJrBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHZG669Lac5bldqCJodiHvCG+8OMB8GA1UdIwQY
MBaAFEYI1xt3KgMXQOHUEt72hXzEsdRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTc2OGEtOGQwYi00OTBmLTk4YmUt
NzRlMTE2OGExMTY0LzEvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80OTc2OGEtOGQwYi00OTBmLTk4YmUtNzRlMTE2OGExMTY0
LzEvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPvrysWM
kYn1kIysZHNWEjlBfVugnTQ708Dy3wQqYPSihtBxtMFLfXZ7Gu4PbWdfYsBlySet
uz6f13N1sZ99lH38rOTYbL2l0S1slYdFRDudtk+qtxhUZXMhMWD2AoOYev2EWgNg
ZU58kS5/woHWHDEfeGMVFWVo3OdvykOe0r7unvWwaAY0mAsRIidIw9QT1OBRuo9D
/AdvzRrl8mOiV/6BKmibDlCiHv7nKCBABfda1sk52j6cwFZmywOQ4jGFTZhknrZG
qi7Om6MjQjBLGr7kH/PiUaeu621e8xCbI9l3p+kA77YJXgpL8zP03f397DvFAJ8y
kJ3zvGfhEmithg==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:39:30 2026 by rpki-client