Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: tJ+R5ulNqFyRI6i9enrb2a5BKlFi0BP6xDDFTfbB0/0=
Subject key identifier: 67:DA:A2:C8:66:70:C7:F4:5B:42:77:96:E2:94:74:7F:AA:64:B3:37
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 019F1830295487AF33EBFBA665E8E5037AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 11:00:37 +0000
Manifest this update: Tue 30 Jun 2026 11:00:37 +0000
Manifest next update: Wed 01 Jul 2026 11:00:37 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: qhe+Ip+j2IqjBOw4PF6jHaNFxzfbOX93k6ucG2SdIXU=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:29:54:87:af:33:eb:fb:a6:65:e8:e5:03:7a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Jun 30 11:00:37 2026 GMT
Not After : Jul 1 11:00:37 2026 GMT
Subject: CN=67daa2c86670c7f45b427796e294747faa64b337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:25:3b:a1:d3:94:15:ac:89:a0:0d:0d:cb:
00:68:9d:d0:4f:ab:a5:8b:ab:1c:4b:bc:04:4c:54:
17:cd:ff:e8:ce:4a:e7:f7:67:65:cd:8f:78:21:d0:
15:26:1c:9a:86:49:e4:68:a9:e3:5f:42:f1:41:71:
64:0a:6c:e6:3e:fd:3b:68:46:f1:3d:68:69:ed:2d:
cf:0c:c5:28:b7:6f:6a:01:27:4b:c5:c4:0a:be:4b:
b6:1a:a4:ba:ae:40:1b:e4:0a:85:99:2c:96:95:8e:
03:70:d6:f6:63:4c:89:76:98:51:ba:f8:a1:40:fc:
57:9c:f2:98:c4:9a:bd:6d:2b:d4:da:d6:08:b4:93:
af:0f:15:8b:c6:b9:7d:d7:7f:44:0e:8c:ee:20:16:
d7:7e:f1:f2:03:1f:7c:87:c7:9d:9c:9a:ce:62:54:
d9:66:4f:64:85:03:b9:c5:88:4e:86:d1:45:39:0b:
1a:e3:99:ea:46:53:28:8c:ac:71:78:5a:5f:82:1a:
b0:fb:9b:55:22:90:c8:2b:b4:bb:d1:2f:22:15:42:
94:1c:51:69:90:e3:79:dc:0b:b2:90:b5:d7:ce:65:
81:d0:a2:3c:b5:0f:4f:b1:07:9e:36:9c:6a:f5:0f:
4e:ae:4d:bd:e6:1f:ff:16:7d:d7:a3:a0:48:89:95:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:A2:C8:66:70:C7:F4:5B:42:77:96:E2:94:74:7F:AA:64:B3:37
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:ba:c3:9e:f4:ad:87:98:7d:a4:df:3a:9f:79:76:d9:97:
e5:8e:53:12:9e:12:48:73:9b:c0:b8:54:7c:59:57:a1:89:a5:
20:03:0d:fb:e0:d8:e7:11:44:46:72:47:41:b3:dc:66:a6:44:
d3:b1:e7:77:fe:f1:74:51:21:1c:1c:b7:89:d4:74:d9:a6:79:
ab:3a:19:6e:ea:cb:12:91:00:f8:59:35:f8:55:5d:8e:cf:7d:
3e:c7:db:18:46:1c:93:be:b2:73:dc:24:38:c6:0c:a5:5a:f9:
3b:7c:e6:07:c0:53:12:39:4a:8b:64:5a:b2:fe:a0:1c:90:4b:
e1:bf:e3:61:6e:ac:49:99:42:96:0d:ae:1f:80:f2:d8:fa:e2:
4d:2e:eb:3b:c9:f7:08:a4:2c:f0:35:45:5d:31:13:73:6a:5c:
dc:68:91:a2:32:e4:f2:61:14:9f:22:87:30:13:88:1a:84:1d:
56:21:19:d0:4e:39:41:db:c9:6a:2c:4f:99:c9:25:53:78:08:
fd:8e:e3:d9:69:97:01:a5:96:0e:c2:14:c9:8c:78:25:a9:2a:
e3:f6:d3:e9:44:51:59:c6:11:ab:ed:c9:82:b0:5b:7d:18:76:
42:49:f3:5a:d8:36:d0:82:79:f7:24:80:41:b4:fb:c1:f8:b5:
1b:ca:23:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:49 2026 by rpki-client