Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
File: RqlWvtJoh-zDNOme-RpZrXvBwg0.mft (raw, json)
Hash identifier: WwLsJzcxrDCe0/XPX6/5ILQcxWosHDmB03pMImFUdXk=
Subject key identifier: 18:0F:EC:AB:96:49:5F:74:E1:DA:F4:39:9C:D0:33:75:E0:6E:49:AB
Authority key identifier: 46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
Certificate issuer: /CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Certificate serial: 01A02056259599060CAAA84CA2CF70133AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:01:51 +0000
Manifest this update: Thu 20 Aug 2026 18:01:51 +0000
Manifest next update: Fri 21 Aug 2026 18:01:51 +0000
Files and hashes: 1: RqlWvtJoh-zDNOme-RpZrXvBwg0.crl (hash: O8vRQkqGR87y5bfHn1QPicl6KOQiBUAcsf1Zrc5227w=)
2: iKuPyI8zLCgawXSKX7-BKU55u_A.roa (hash: MfsvzyIXZkMQ/jz1uJByq5Hlv40Mpv4XoWbE4eac8sA=)
3: jlb1JR39IZf6Kz4j-cidvZRw1XU.roa (hash: Lqj4swNPp/lea9TA80l8kyLyCZmi6zz9jIqgO1fuqCw=)
4: v1sDuaAhI8RktqCN1F9A6U4PuUQ.roa (hash: nbLLR8O00X3nu5KSCFNmcVmiRFRIuKaoskqHKWizJhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:25:95:99:06:0c:aa:a8:4c:a2:cf:70:13:3a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Validity
Not Before: Aug 20 18:01:51 2026 GMT
Not After : Aug 21 18:01:51 2026 GMT
Subject: CN=180fecab96495f74e1daf4399cd03375e06e49ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:82:f6:3c:dc:80:49:0c:fe:c6:3e:97:76:
f2:c0:cf:1a:f1:1a:cb:87:ad:f2:e6:1e:40:cd:d7:
61:6e:cc:25:38:c9:70:54:30:4c:7f:91:7a:3a:19:
43:35:8d:65:cb:ec:77:02:c0:f0:a6:9e:37:65:32:
c9:cf:88:de:20:67:af:74:c1:10:ad:b8:df:68:1d:
62:48:18:ea:75:de:84:82:1f:92:d6:a7:7d:21:35:
29:62:ca:8c:f2:62:f1:90:8b:e1:5b:be:24:d3:5f:
c2:62:d6:b3:04:67:d0:0f:02:0a:e9:bd:52:e4:62:
40:86:bc:e9:97:5e:78:62:ee:90:e1:55:49:c2:b2:
80:73:1f:b4:c7:e0:c8:8e:8d:e8:66:ec:f0:2c:02:
2b:91:fb:63:0b:c7:bf:8f:1e:53:e7:8a:5e:d7:46:
d0:06:9c:b4:fd:f8:c6:17:b4:98:6d:54:b4:fd:b9:
75:c0:d9:f2:0d:58:c1:0c:77:82:1c:fd:ed:c7:00:
b4:34:ad:e2:37:aa:c3:52:4e:9b:7c:da:ab:4a:93:
ab:45:ff:65:aa:cf:a8:1a:53:e0:4f:f3:73:45:3d:
05:93:12:4b:50:26:7c:b8:28:20:14:20:93:f1:bb:
3f:6b:e3:ec:8c:9f:a4:1a:45:07:e2:62:92:49:91:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:EC:AB:96:49:5F:74:E1:DA:F4:39:9C:D0:33:75:E0:6E:49:AB
X509v3 Authority Key Identifier:
keyid:46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ec:73:bf:a1:1c:da:a4:5f:f5:70:23:48:55:a5:c6:a8:f8:
a8:9e:3e:bf:84:45:01:0a:da:68:74:60:48:56:bc:2b:0a:7b:
72:f6:97:9e:d6:b6:28:6a:f5:4b:25:b5:a2:cf:1b:8a:54:58:
b5:6c:3e:b2:d6:03:bf:61:72:d7:d9:d0:3e:75:b4:7e:bc:da:
10:9d:3c:a3:57:3b:52:08:3b:63:1c:43:15:71:5c:0d:18:33:
23:88:f5:84:26:d6:94:7a:2c:ad:6e:7e:17:58:71:ee:eb:9e:
2a:7a:b3:01:7e:79:13:b8:81:22:74:0b:9e:3c:cb:e6:e0:f5:
0a:0c:74:a5:be:f6:43:2d:d2:2a:68:af:a4:cf:99:ec:b2:48:
16:ab:eb:c6:87:6b:7f:59:28:96:e3:a9:ac:1d:0d:03:24:8d:
41:24:21:c5:17:75:55:0d:dd:7f:cb:b8:37:5d:53:4a:8a:f1:
19:d1:f3:a7:eb:1d:c3:7c:49:8b:cd:aa:7a:77:46:fe:56:de:
74:d3:8b:cb:b3:49:0d:3d:93:f6:9c:5d:0f:57:97:fc:b3:7e:
8e:88:26:63:46:82:72:85:da:e6:9c:16:c3:86:ec:6f:fa:62:
7f:cb:c7:6b:40:55:3c:04:00:c2:78:70:70:f9:a8:dc:3b:cb:
04:97:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:30:55 2026 by rpki-client