Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: LQVhW+kiX3XwYPu85w1lX89SO/PLk+eKn9zMEZmxCyM=
Subject key identifier: 65:95:E4:32:5C:53:AC:39:E5:87:13:26:18:C6:B4:65:65:1B:50:25
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 019D3A8A722F9BADB4FE2493E5DEB3EB223F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 10AF
Signing time: Sun 29 Mar 2026 17:00:44 +0000
Manifest this update: Sun 29 Mar 2026 17:00:44 +0000
Manifest next update: Mon 30 Mar 2026 17:00:44 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: 3aHhPGc70l0xfH2NcE3u+y7f9GlnE8TibP2bxPCqeqQ=)
2: YU2PfYClu9ods7OIVMXTM1gfT-s.roa (hash: vgGpyNSi4szw0MOFiG3xNxocVMlT/+cj/OnKigyXPcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:72:2f:9b:ad:b4:fe:24:93:e5:de:b3:eb:22:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Mar 29 17:00:44 2026 GMT
Not After : Mar 30 17:00:44 2026 GMT
Subject: CN=6595e4325c53ac39e587132618c6b465651b5025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:68:1d:50:2a:a9:8a:ff:ef:34:55:4f:59:
96:be:7a:f8:47:d0:dd:25:7a:ac:c3:cd:07:38:17:
ce:53:ef:20:ad:6e:ec:51:50:05:41:ed:5a:f2:b0:
8f:91:2b:85:bd:0e:4f:24:4c:8d:31:4d:e9:a2:3d:
24:cb:1b:a1:d5:d1:d8:98:fd:a2:a1:08:ee:e9:ad:
75:8a:48:2c:04:8a:f9:81:a6:ab:4b:0a:e6:0a:e1:
b9:86:74:74:cc:8a:b8:a2:73:e8:c1:dd:cd:37:18:
5c:d6:54:8f:5f:ab:ce:61:12:fb:b4:82:27:74:30:
ce:7c:bc:86:f8:71:74:bb:c1:ff:68:a4:3d:cc:a6:
07:63:da:b1:93:ee:b4:e8:fe:2d:3e:60:c4:6d:e8:
8a:2e:c0:6a:2b:45:b5:5f:6f:01:01:b1:c1:d4:e9:
4f:5f:5c:f1:49:ad:2f:98:cd:8d:88:f4:e2:f6:a9:
6e:cc:d0:0b:93:2f:cb:4f:85:dc:af:65:33:fe:77:
1c:16:51:f7:f5:13:a1:43:79:76:9f:c7:14:a3:a2:
b4:12:71:ca:03:8b:6b:35:2b:bd:f7:06:e9:0f:15:
79:9a:46:9c:49:d2:e2:b3:74:d4:61:2d:fc:d7:ba:
e6:98:42:11:37:c4:15:9d:db:62:bc:5a:ab:01:0f:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:E4:32:5C:53:AC:39:E5:87:13:26:18:C6:B4:65:65:1B:50:25
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:d1:2d:b8:58:88:6c:1a:c9:dd:19:d8:5b:5b:70:42:4f:
50:90:51:a1:d9:81:e3:aa:86:a3:b0:ca:45:eb:a2:54:73:7a:
f3:3b:f6:52:97:e9:05:6e:af:40:11:eb:27:1f:d6:88:20:4e:
18:54:b4:c1:56:e0:82:dd:0e:ed:a2:5c:82:b7:78:1a:79:3c:
58:e5:2b:62:d2:8c:cd:d2:ca:08:0d:f0:c7:d6:b0:f3:90:7d:
bd:d5:8d:6a:b3:5b:6d:ac:e7:0d:2a:83:4c:6a:7b:a5:50:6a:
ca:fe:7a:e0:cf:a3:b5:11:c4:6f:d4:c0:e9:b3:0c:e5:ef:1c:
31:00:0a:5b:ac:d2:4e:22:5e:ce:de:89:f0:e3:3b:67:3b:81:
94:6c:07:fb:d6:f7:c2:74:a2:4f:67:73:38:7c:61:c4:f8:5d:
4f:4e:06:9b:dd:a9:bc:07:56:8c:b6:ff:38:d2:b9:e5:18:21:
99:bb:d1:64:93:81:a5:e2:71:0f:59:32:68:80:ad:47:b1:dd:
9b:ce:6c:fb:af:72:6c:90:02:fa:94:26:c0:b0:90:de:e5:5f:
31:36:18:55:06:5d:a7:3b:24:13:85:5f:07:8a:22:70:8a:19:
0c:fa:b2:d4:4b:66:a9:e4:f2:93:d8:64:d8:c7:7b:72:49:c8:
ec:1c:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:34:19 2026 by rpki-client