Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
File: rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft (raw, json)
Hash identifier: RVUqjYkFNclU/SSRWB4tOGaaYSoAN0uoCeLztrbj96I=
Subject key identifier: B4:A4:78:6D:F0:03:B4:BE:A2:DC:EF:CB:08:DA:17:DB:A8:C5:45:2B
Authority key identifier: AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
Certificate issuer: /CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Certificate serial: 019FA0E074B1E330671326F75A5D6F3917C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:32 +0000
Manifest this update: Mon 27 Jul 2026 00:01:32 +0000
Manifest next update: Tue 28 Jul 2026 00:01:32 +0000
Files and hashes: 1: en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa (hash: l3a1Se4v22VtVm5ZL/5W5MYgFfditJOkAKvu9Xf04q4=)
2: rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl (hash: Ve4REPOlY+GOsVEoZlZScCaWV/T2R8VjrybGiKHeI4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:74:b1:e3:30:67:13:26:f7:5a:5d:6f:39:17:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Validity
Not Before: Jul 27 00:01:32 2026 GMT
Not After : Jul 28 00:01:32 2026 GMT
Subject: CN=b4a4786df003b4bea2dcefcb08da17dba8c5452b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:ac:1a:74:8a:ae:eb:f2:ee:8f:a1:d5:69:
b5:13:ab:24:d9:74:a3:d9:0e:f7:2c:e8:ba:6f:bf:
ce:1d:a5:04:96:21:ba:af:e0:c3:05:a2:46:2c:e4:
73:cb:aa:0a:39:29:a2:d4:68:6b:04:15:0b:a2:a6:
26:d7:2f:4e:1c:b5:34:75:e3:42:41:f2:bb:89:6b:
fc:60:1c:cc:4b:3b:4e:4e:fc:bd:9d:18:cd:e7:96:
af:32:92:e3:3f:90:12:e2:f9:56:e9:92:ea:94:f4:
2d:d3:22:4f:31:91:f4:3a:76:5f:4e:42:03:5b:45:
9f:7d:69:35:ce:01:d6:8d:f5:32:4d:71:b5:4c:03:
b2:d8:bb:23:7e:c0:05:e7:80:a8:71:68:8a:94:39:
1b:b3:f9:65:a5:5d:1a:e5:a8:fb:63:26:f6:00:a0:
ac:94:c5:f0:07:38:0b:b5:88:20:cd:b2:48:c7:0c:
7c:b4:c0:f8:9d:da:be:2b:51:0a:28:f3:d0:d3:00:
56:e5:c5:59:97:69:a9:4f:ee:69:bd:0a:42:e7:43:
16:af:73:6b:03:36:5d:36:bb:9f:71:4e:cd:e6:64:
2b:d5:34:83:a4:7c:20:69:95:e6:d7:ba:23:f6:63:
51:d8:97:6b:65:d4:82:55:6b:4b:d9:3d:ed:55:c8:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:78:6D:F0:03:B4:BE:A2:DC:EF:CB:08:DA:17:DB:A8:C5:45:2B
X509v3 Authority Key Identifier:
keyid:AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:53:c9:03:1e:29:fa:65:96:0f:0e:a9:ca:f9:0f:c2:1a:a4:
e0:5e:32:fc:e7:c1:72:00:ec:2c:71:a1:4f:f9:8c:b1:fe:be:
b2:70:8e:2b:ec:da:40:29:e9:ab:70:0c:ee:43:39:d8:d9:df:
1a:87:2c:04:d2:0d:08:8f:5d:67:25:a4:7f:cc:98:27:74:e8:
55:c8:0f:3d:ef:81:4e:ac:c8:a5:e5:3f:49:2c:d7:77:1a:44:
14:a7:6d:94:da:41:1b:a7:40:10:32:82:87:85:47:8d:19:ff:
9d:92:0f:1a:ae:89:e2:8b:41:06:3e:c0:40:26:c7:c1:77:b0:
13:63:ce:a5:02:38:56:14:8e:5a:aa:cf:6e:87:a0:06:35:5d:
f6:a2:72:2e:9f:b4:af:1e:18:cd:6a:3d:af:c1:4d:dd:4c:59:
f2:6d:a4:3e:54:07:f3:24:b3:c2:2e:be:ed:d9:68:71:23:c9:
54:79:13:2b:07:94:1f:81:88:17:a8:2a:d2:5c:d1:7b:46:70:
3c:56:a5:94:19:74:b2:11:46:70:29:03:59:e7:17:08:d0:02:
0b:6c:0c:12:e0:70:82:17:cd:ac:44:1f:e3:79:2a:c3:eb:70:
a7:2a:c7:ea:89:f4:70:9e:b6:c3:d1:40:1f:a3:c6:22:cd:10:
4e:44:3f:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4HSx4zBnEyb3Wl1vORfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjJkMDg1N2IzNGE5YzQ0ZTNlNTQ1YjU2YTgxNjliYzdj
M2VkOTgwHhcNMjYwNzI3MDAwMTMyWhcNMjYwNzI4MDAwMTMyWjAzMTEwLwYDVQQD
EyhiNGE0Nzg2ZGYwMDNiNGJlYTJkY2VmY2IwOGRhMTdkYmE4YzU0NTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcqsGnSKruvy7o+h1Wm1E6sk2XSj
2Q73LOi6b7/OHaUEliG6r+DDBaJGLORzy6oKOSmi1GhrBBULoqYm1y9OHLU0deNC
QfK7iWv8YBzMSztOTvy9nRjN55avMpLjP5AS4vlW6ZLqlPQt0yJPMZH0OnZfTkID
W0WffWk1zgHWjfUyTXG1TAOy2LsjfsAF54CocWiKlDkbs/llpV0a5aj7Yyb2AKCs
lMXwBzgLtYggzbJIxwx8tMD4ndq+K1EKKPPQ0wBW5cVZl2mpT+5pvQpC50MWr3Nr
AzZdNrufcU7N5mQr1TSDpHwgaZXm17oj9mNR2JdrZdSCVWtL2T3tVchttwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSkeG3wA7S+otzvywjaF9uoxUUrMB8GA1UdIwQY
MBaAFK3y0IV7NKnETj5UW1aoFpvHw+2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZMUWhYczBxY1JPUGxSYlZxZ1dtOGZEN1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQt
NTJmZTQ0MzQzNTBlLzEvcmZMUWhYczBxY1JPUGxSYlZxZ1dtOGZEN1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQtNTJmZTQ0MzQzNTBl
LzEvcmZMUWhYczBxY1JPUGxSYlZxZ1dtOGZEN1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1PJAx4p
+mWWDw6pyvkPwhqk4F4y/OfBcgDsLHGhT/mMsf6+snCOK+zaQCnpq3AM7kM52Nnf
GocsBNINCI9dZyWkf8yYJ3ToVcgPPe+BTqzIpeU/SSzXdxpEFKdtlNpBG6dAEDKC
h4VHjRn/nZIPGq6J4otBBj7AQCbHwXewE2POpQI4VhSOWqrPboegBjVd9qJyLp+0
rx4YzWo9r8FN3UxZ8m2kPlQH8ySzwi6+7dlocSPJVHkTKweUH4GIF6gq0lzRe0Zw
PFallBl0shFGcCkDWecXCNACC2wMEuBwghfNrEQf43kqw+twpyrH6on0cJ62w9FA
H6PGIs0QTkQ/2A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:15:56 2026 by rpki-client