Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: okHb5ZKhkpdf3JtJ8qlSgbQVP/uaHkKWonsxifbosnQ=
Subject key identifier: 29:57:95:3D:D3:39:8D:DC:AA:7D:02:7B:87:9A:44:BA:0A:FB:37:CA
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019FACAD2A67CF5412399C5A84ECE7BBD97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0B6B
Signing time: Wed 29 Jul 2026 07:00:57 +0000
Manifest this update: Wed 29 Jul 2026 07:00:57 +0000
Manifest next update: Thu 30 Jul 2026 07:00:57 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: r+NfUqsjKHv9q9mkRSBNJ4rdS+pZjg26HI0TXGVBR3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:2a:67:cf:54:12:39:9c:5a:84:ec:e7:bb:d9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jul 29 07:00:57 2026 GMT
Not After : Jul 30 07:00:57 2026 GMT
Subject: CN=2957953dd3398ddcaa7d027b879a44ba0afb37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:44:3a:17:25:d7:94:a9:66:45:98:db:ff:
f1:a7:c5:f6:a6:ef:cf:0c:95:a6:39:ae:29:b4:46:
b2:0d:64:c3:bd:3b:3c:af:f1:ca:08:88:05:0a:af:
08:91:fe:44:5d:d9:46:6a:19:a8:6e:e0:51:77:09:
20:30:4d:9a:35:15:8c:5c:e1:ca:83:78:57:d0:36:
33:63:54:48:c8:98:44:42:3e:e1:9a:33:8f:3d:be:
a3:e3:e4:44:e8:ce:db:83:f7:46:e9:cc:5d:ce:b1:
38:7d:c1:24:58:77:d7:d1:47:9f:02:f6:59:71:10:
75:d8:b4:b1:46:2c:ba:b5:12:27:00:70:6f:07:12:
99:1f:1b:db:69:fd:b5:4d:5a:62:0e:00:96:30:19:
11:92:3c:75:8b:9f:47:55:d0:66:e5:a4:e4:1a:28:
01:46:4b:75:e8:b1:54:62:c4:59:87:11:36:39:9b:
fe:d4:ee:0c:fc:3d:a3:21:6d:25:f7:91:b0:01:c5:
82:0c:1a:62:c2:54:a7:ec:c6:43:7c:dd:f4:cc:65:
d9:67:23:76:3a:12:3d:76:35:ec:6b:22:97:79:52:
3c:34:a2:b1:a0:d1:72:d9:72:88:21:e8:48:b3:9e:
77:87:1f:9a:5d:a7:e7:84:50:c7:aa:3b:c2:8e:15:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:57:95:3D:D3:39:8D:DC:AA:7D:02:7B:87:9A:44:BA:0A:FB:37:CA
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:80:16:91:5f:cf:79:b1:62:11:bc:b0:06:6c:0c:7d:7e:b1:
6f:f2:fa:87:bb:95:a3:0d:dd:33:c2:2e:62:2a:54:14:fc:da:
6d:8f:ae:01:34:73:b7:ec:6f:eb:1d:11:1e:19:4a:48:bc:42:
28:dc:d4:09:47:bc:f5:28:f7:d5:4f:b8:65:51:ac:d5:13:3c:
6c:6e:5f:63:94:67:4a:9c:4e:3f:6b:d0:2e:e3:85:0d:16:a7:
c5:70:df:77:1e:ff:f6:c6:9d:65:10:5e:38:e7:7e:3f:24:08:
ad:bf:9e:3b:09:61:3b:5a:3d:2e:79:49:1d:61:ac:59:b1:d9:
ce:0c:4f:63:12:0c:8d:1a:bc:6a:4c:60:23:c8:45:56:14:77:
d5:b8:8b:e4:13:ac:c8:6b:fb:fc:6d:d6:e3:fd:48:ca:d2:69:
51:dc:79:d0:87:42:df:f1:ed:50:64:ca:75:36:ae:12:45:9c:
21:77:0d:3a:0f:63:44:0d:36:f2:5c:e4:cb:15:c8:5c:67:19:
1b:38:46:34:6d:5a:39:98:e0:b5:b7:cf:72:32:5f:f6:2c:5c:
52:0a:1d:46:72:10:6a:e9:79:dd:0d:9f:8f:5c:e5:63:bd:30:
13:56:02:e3:93:8f:2c:1b:e6:01:2c:4b:f9:bc:eb:4d:38:c7:
2f:c9:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:35 2026 by rpki-client