Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
File: RqlWvtJoh-zDNOme-RpZrXvBwg0.mft (raw, json)
Hash identifier: tH5d4osc6rNiTp+okIJS6/2zBctE/f8sMSqcgOpYKnQ=
Subject key identifier: 25:6C:90:A7:77:E3:51:96:78:C7:3B:45:A3:03:45:A9:53:A1:32:B3
Authority key identifier: 46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
Certificate issuer: /CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Certificate serial: 019F36A9FE4297773BD337D6BEB6E73B70F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:02:18 +0000
Manifest this update: Mon 06 Jul 2026 09:02:18 +0000
Manifest next update: Tue 07 Jul 2026 09:02:18 +0000
Files and hashes: 1: RqlWvtJoh-zDNOme-RpZrXvBwg0.crl (hash: ge55ulUfb4Awr+k8iV2otAirDstNwypp59eOgEWKcjw=)
2: iKuPyI8zLCgawXSKX7-BKU55u_A.roa (hash: MfsvzyIXZkMQ/jz1uJByq5Hlv40Mpv4XoWbE4eac8sA=)
3: jlb1JR39IZf6Kz4j-cidvZRw1XU.roa (hash: Lqj4swNPp/lea9TA80l8kyLyCZmi6zz9jIqgO1fuqCw=)
4: v1sDuaAhI8RktqCN1F9A6U4PuUQ.roa (hash: nbLLR8O00X3nu5KSCFNmcVmiRFRIuKaoskqHKWizJhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:fe:42:97:77:3b:d3:37:d6:be:b6:e7:3b:70:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Validity
Not Before: Jul 6 09:02:18 2026 GMT
Not After : Jul 7 09:02:18 2026 GMT
Subject: CN=256c90a777e3519678c73b45a30345a953a132b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:6f:79:3a:3f:98:e5:d1:3e:b9:11:20:9c:
03:ce:3b:10:42:da:cb:a2:48:4f:36:5f:ed:3d:98:
af:51:b8:bb:00:62:d1:b5:03:25:6e:d6:dd:02:92:
59:fe:b0:d6:41:0f:ce:2a:fb:bc:2f:46:89:2d:94:
f6:c8:0c:56:88:60:ca:4f:4f:d2:b9:7d:0e:e7:81:
e3:34:4e:6b:30:2e:74:fc:27:60:3c:72:d7:9b:a9:
e2:8a:e6:60:18:3c:10:b2:77:ca:c6:4e:0b:6e:73:
35:67:e7:1a:6e:61:96:72:56:7f:8b:1c:a1:da:a7:
3b:1d:05:73:9a:63:03:a1:ac:eb:cb:41:1c:63:1d:
ba:dc:82:85:1b:0c:49:1f:9f:a6:df:85:06:2d:60:
0f:6c:3f:f1:ed:8a:18:38:c5:50:6c:e9:c9:95:ee:
0b:ba:b0:2f:dc:06:98:1f:09:09:24:ae:06:74:1d:
fd:1c:9e:2e:02:89:90:58:1c:c8:fa:bc:90:5a:d9:
ff:24:e7:45:41:16:dd:cf:09:d5:70:e9:90:1b:8e:
9e:93:d5:05:f9:e9:f7:61:27:b9:bc:fc:ef:ef:b2:
1c:4f:21:46:73:9a:22:30:d4:1e:3f:41:6b:95:19:
58:3e:98:fd:82:d8:7d:ee:18:78:7c:30:6d:aa:a0:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6C:90:A7:77:E3:51:96:78:C7:3B:45:A3:03:45:A9:53:A1:32:B3
X509v3 Authority Key Identifier:
keyid:46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:25:4c:12:0f:40:19:ea:5f:ba:60:eb:2b:73:f6:fd:da:3d:
5d:2a:f7:de:36:02:69:d4:51:ac:22:8f:f6:cd:5e:b0:55:56:
67:c5:e6:f7:53:46:64:39:55:45:7a:38:7f:b1:12:83:21:be:
ae:be:e8:5e:2c:d3:58:ed:3e:fc:3a:46:3e:e8:77:c3:1d:f3:
a5:62:70:b9:ee:70:75:2c:6a:bc:32:24:ae:85:56:e7:dd:91:
c2:cc:80:60:ec:6f:2c:14:fc:cc:ff:b9:35:37:b0:88:a1:74:
79:b0:80:be:83:1d:86:d3:d0:04:78:ad:d4:73:e3:76:d9:8a:
ad:2b:f3:0d:25:0e:e1:64:cc:f6:71:99:fe:db:6f:8e:15:f4:
05:98:3b:e6:2c:b2:d8:8f:ae:28:fb:04:48:83:ea:53:f1:79:
71:f8:e3:9f:ae:da:46:13:8e:ea:a4:22:be:1c:0f:16:99:d8:
c5:1d:09:da:14:12:a4:11:73:3b:14:15:d7:22:f3:54:25:e1:
78:97:1c:66:c1:42:4c:14:83:f5:05:46:1e:a8:4e:dd:d6:80:
05:33:a9:14:95:21:25:5e:8e:1e:1c:10:1f:6a:de:70:40:a1:
ce:3a:00:b2:32:0b:aa:c3:1b:b7:b0:45:ea:6c:10:73:07:80:
65:23:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:01 2026 by rpki-client