Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
File: rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft (raw, json)
Hash identifier: jhwJWLKZiw7QleeMccehV4qyD4jGtfNCkla8jSTCKMc=
Subject key identifier: 98:9E:F6:31:A0:D8:82:10:E0:F8:BF:D3:86:EC:5F:E8:33:C1:6B:10
Authority key identifier: AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
Certificate issuer: /CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Certificate serial: 019FA0E09C631B7539EF07198CEA5E9E3DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:42 +0000
Manifest this update: Mon 27 Jul 2026 00:01:42 +0000
Manifest next update: Tue 28 Jul 2026 00:01:42 +0000
Files and hashes: 1: 5SWtCRFt6WsOjb-tdJ3j5NUNj0s.roa (hash: 8jRo/6ysSzkjLks/pza54/NHIMmLzqF2Z1dcDNEC0e4=)
2: rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl (hash: pL9JatCH9jxcjG+h4MQ+q+MN8j+cjqQO3qCb8RZMYBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:9c:63:1b:75:39:ef:07:19:8c:ea:5e:9e:3d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Validity
Not Before: Jul 27 00:01:42 2026 GMT
Not After : Jul 28 00:01:42 2026 GMT
Subject: CN=989ef631a0d88210e0f8bfd386ec5fe833c16b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:b5:da:8c:04:66:d7:36:76:fd:a9:80:b7:
be:6f:34:b8:c3:0f:77:35:c3:cd:1a:c5:a3:10:4c:
6e:5f:d7:f6:a1:56:e9:64:ce:bf:a3:55:26:1e:e9:
33:07:cb:95:76:82:31:22:8a:11:9e:99:21:6f:e8:
89:b2:5b:e1:bd:ed:74:87:8a:c0:db:e8:06:9c:83:
cc:cf:6e:d1:7c:34:e3:08:cf:ce:53:d3:ef:5f:5b:
0c:30:e8:4a:3d:86:8e:c8:10:15:d7:8b:9c:f2:b4:
e0:56:d1:92:ab:6d:3c:20:54:2b:44:6b:a1:20:a3:
24:ac:4c:da:30:5f:8a:c4:57:1f:c4:a5:b0:e7:62:
02:63:47:ab:d0:7d:2f:94:e6:cf:b5:77:b2:f6:2d:
e9:0a:9e:a0:d0:b5:d1:97:da:88:03:60:4c:8e:15:
35:51:94:90:fc:cb:05:37:79:28:02:51:9a:42:4e:
f6:35:32:8c:e3:18:b2:8d:a7:1b:7d:59:27:10:38:
bb:ee:05:e4:93:34:51:26:2c:0f:0d:77:d1:f9:c7:
85:3d:bc:fa:49:c7:50:5c:2f:18:05:64:6f:05:dc:
d3:e4:7a:44:e3:cf:dd:f2:01:65:80:11:10:31:c0:
4e:ad:24:11:c3:33:57:18:bf:0c:c4:57:c9:ba:0f:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:F6:31:A0:D8:82:10:E0:F8:BF:D3:86:EC:5F:E8:33:C1:6B:10
X509v3 Authority Key Identifier:
keyid:AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:35:14:fd:ee:76:b5:c8:0e:ee:70:5a:53:82:43:91:94:cb:
44:39:73:dc:23:7b:74:e5:44:d8:03:40:13:12:20:ec:e6:81:
74:8f:c6:25:1f:75:8d:3a:49:d4:b2:ef:7b:2d:48:7c:d5:0d:
cd:23:a2:12:c6:e2:bc:fc:e9:92:5d:89:70:8b:9d:58:54:28:
b6:f6:1b:83:ed:fe:f5:e1:62:04:35:e5:8d:61:b2:d5:51:f4:
c0:c1:c9:50:5d:c4:82:f8:bd:88:dd:f2:8b:d0:77:c7:7e:31:
e2:9a:9d:9b:48:7c:3d:9a:9f:07:fc:db:a1:83:de:3d:54:c3:
39:63:f8:9f:ef:c0:4c:0c:be:4d:d0:e3:f6:d8:c4:bf:73:16:
b7:af:fd:18:fe:6d:66:31:0d:88:cd:1e:8b:ed:72:c6:0c:4d:
2c:a9:49:8e:65:14:a0:10:3d:b2:e4:c9:ba:ab:55:7e:d2:82:
49:ea:22:29:18:ac:d0:be:d6:58:2e:03:d9:fa:3a:a1:1f:1f:
ac:1a:17:07:31:58:ae:a9:77:52:28:75:38:0f:0d:4d:23:99:
90:bf:78:ce:f2:ce:76:ce:f2:4f:48:04:e0:d6:fb:b4:ca:09:
9c:23:f3:f9:de:2d:dd:04:0f:52:e9:0c:f3:07:c4:3f:60:4e:
e1:fb:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:07:04 2026 by rpki-client