Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
File: kqOPWtZym-9NSerlHAFGmCIewUY.mft (raw, json)
Hash identifier: lzVZuRC5jOKvVcl86Rb3ht3iJk0bGKnuuR+ckt/+5tY=
Subject key identifier: 58:76:29:B2:99:2D:D3:60:BE:0C:07:D6:37:05:B5:8D:24:EE:A9:E8
Authority key identifier: 92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
Certificate issuer: /CN=92a38f5ad6729bef4d49eae51c014698221ec146
Certificate serial: 019FA2CE3E3259E7922DCFC013FDDA916403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:53 +0000
Manifest this update: Mon 27 Jul 2026 09:00:53 +0000
Manifest next update: Tue 28 Jul 2026 09:00:53 +0000
Files and hashes: 1: 3M3gfxZWTlxlBNR3tYw4_tebKeM.roa (hash: xsykozyPFY5/0PUbC/XmVsKSACxFGy1rLASCnELrsxA=)
2: EeuHOP1ld_YxpuE_gQSJqZEtgX4.roa (hash: XyhhD+tamYBfloB02aI97R1OMdqo6L/U/hCCCp5CY44=)
3: kqOPWtZym-9NSerlHAFGmCIewUY.crl (hash: ww9oTLeMPvp07rcuAnpO5ldQegWKpsSD52xpYCeVCCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:3e:32:59:e7:92:2d:cf:c0:13:fd:da:91:64:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a38f5ad6729bef4d49eae51c014698221ec146
Validity
Not Before: Jul 27 09:00:53 2026 GMT
Not After : Jul 28 09:00:53 2026 GMT
Subject: CN=587629b2992dd360be0c07d63705b58d24eea9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:cb:56:59:b6:b8:a4:66:69:c7:47:cc:11:
11:c9:74:83:d4:6b:0c:5e:2a:e3:3c:9a:27:be:4a:
77:16:09:02:0b:6b:6f:72:b2:84:b7:70:09:7d:34:
0e:2b:52:82:ed:9a:37:29:cd:1e:11:96:79:c9:54:
c7:59:ce:b1:e0:da:ff:4d:31:23:cb:2e:08:e7:f5:
67:6b:87:c5:5c:d6:0d:26:2c:81:4c:11:a7:5c:e1:
3e:a7:44:f9:7e:3a:b9:15:a6:85:59:ff:1a:d0:51:
8a:33:37:b9:94:9a:26:b4:b1:f9:f3:7a:ac:20:8a:
13:e5:cb:da:1b:65:0a:07:72:2a:ed:0d:22:a9:96:
03:74:fc:9b:28:a3:a0:bb:bf:99:90:ec:14:60:79:
91:6d:d1:96:ae:c0:20:ec:93:bc:ef:e6:0a:d1:4d:
68:8d:4e:e5:7e:14:da:e2:50:05:65:46:a8:48:69:
d7:05:c6:3c:ec:e0:03:1b:2b:b5:b4:10:c8:9c:f1:
da:73:a8:ec:76:40:90:f4:bb:b0:bd:21:25:0d:be:
da:72:aa:d1:69:66:fe:11:5e:b0:52:45:fc:1a:37:
2f:0c:fb:4b:7f:09:7f:03:dc:4a:24:54:cb:34:02:
79:03:fc:0c:dd:81:49:81:f8:cb:64:8b:11:6f:26:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:76:29:B2:99:2D:D3:60:BE:0C:07:D6:37:05:B5:8D:24:EE:A9:E8
X509v3 Authority Key Identifier:
keyid:92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ea:92:bc:51:7d:11:fa:a4:00:de:c2:71:e2:d9:bc:48:81:
18:25:44:5b:9b:7d:1e:ef:1a:3d:a5:41:81:56:0b:2b:c5:54:
aa:6c:c3:b6:e4:e0:f5:0f:d2:68:51:86:48:fd:76:f8:e9:87:
c2:76:2f:61:67:72:49:f3:ad:5e:43:b9:1a:58:c0:ea:d3:21:
0f:94:14:a4:ee:d2:e1:14:1b:b5:a4:8f:fd:a1:ff:7b:52:8b:
64:44:4b:35:00:39:29:14:6b:1d:2f:23:55:d0:e7:f8:23:30:
a2:1c:f3:4e:be:3a:76:fe:c8:e3:03:e7:aa:03:65:5f:9b:95:
b6:04:ba:20:52:f1:84:de:ed:14:be:56:e3:69:4f:bb:c5:97:
d1:65:52:2c:7c:f6:f2:cd:c2:45:de:5b:0b:02:47:2f:2a:88:
46:96:48:0f:c9:ce:00:29:1b:9f:db:25:87:0b:e0:21:90:72:
fc:e8:5b:0a:8a:90:3c:48:81:55:10:ec:e9:46:2f:b7:7e:09:
48:7f:ee:cf:b5:17:b8:51:e8:34:8e:dc:cd:d0:bd:3a:8e:3d:
d1:f2:66:c9:e8:7d:43:7f:c7:fb:cd:61:75:18:ef:db:52:d0:
7e:6b:5b:9a:81:48:fc:de:bb:0d:2e:98:80:89:48:6a:90:35:
f8:74:bf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:37:56 2026 by rpki-client