Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
File: RQi117NzxB3b6pjaW8lxcpDkF_k.mft (raw, json)
Hash identifier: uowrLXDl/6MmfI5di+22Jq0TMD3r0kSi65NYjVz0D4s=
Subject key identifier: F0:AF:BA:DB:9B:7C:D6:C3:C0:7C:95:77:63:19:AD:E8:EF:49:08:4D
Authority key identifier: 45:08:B5:D7:B3:73:C4:1D:DB:EA:98:DA:5B:C9:71:72:90:E4:17:F9
Certificate issuer: /CN=4508b5d7b373c41ddbea98da5bc9717290e417f9
Certificate serial: 019FA8D09E46E9691BA7B3B0803C5A343916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
Manifest number: 2A
Signing time: Tue 28 Jul 2026 13:01:11 +0000
Manifest this update: Tue 28 Jul 2026 13:01:11 +0000
Manifest next update: Wed 29 Jul 2026 13:01:11 +0000
Files and hashes: 1: RQi117NzxB3b6pjaW8lxcpDkF_k.crl (hash: ulbi0Ry92AwwHwGQ0JNCzHK7IfbnQ7EjTSWXG+eUR2M=)
2: n96x_KV9AIPo6sljEniHgrYwYdo.asa (hash: MZQfPY2YJsa6skvxi4+gsitkkwqOwZWNNGCWs8mjX6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:9e:46:e9:69:1b:a7:b3:b0:80:3c:5a:34:39:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4508b5d7b373c41ddbea98da5bc9717290e417f9
Validity
Not Before: Jul 28 13:01:11 2026 GMT
Not After : Jul 29 13:01:11 2026 GMT
Subject: CN=f0afbadb9b7cd6c3c07c95776319ade8ef49084d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:e2:60:ed:3c:84:42:9d:cc:1e:f5:39:39:
e1:62:5b:b9:92:32:50:81:a3:83:e2:88:62:97:43:
87:62:43:6f:95:f4:70:f5:21:5f:34:ac:ad:64:25:
ff:17:9a:dd:44:30:a4:22:28:90:4e:7f:63:d4:ad:
4d:79:26:2d:57:c9:2d:5c:fb:27:e8:c8:6c:65:5c:
ac:08:b8:80:d7:aa:37:50:37:b6:c1:5a:2a:af:55:
b6:0a:c7:09:df:64:64:c0:5b:2a:6d:3b:eb:18:b0:
6e:d6:58:01:6e:d2:72:ed:60:7a:6b:d0:00:87:ac:
f3:e2:06:ce:32:09:f6:e0:5c:c7:4d:d4:79:d5:24:
fc:0c:df:e8:66:03:cf:bf:62:0a:93:ad:7c:a2:3d:
46:48:14:78:0f:04:76:61:02:06:e5:e7:a1:1a:76:
16:12:44:e1:43:ba:5e:f7:2c:fe:e6:e8:2e:c8:6e:
eb:ef:a6:78:a6:74:a9:66:d2:92:03:1e:8c:1e:7d:
f8:ae:c6:43:31:68:d8:ad:85:e8:dd:18:83:ed:95:
4a:b5:c2:61:db:45:aa:35:40:0b:e9:93:80:98:16:
1e:32:e1:63:93:8d:5f:92:9e:40:c8:c1:89:b6:e8:
57:ef:5d:5d:0d:f5:bf:8f:8f:1d:8e:1a:de:e1:03:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AF:BA:DB:9B:7C:D6:C3:C0:7C:95:77:63:19:AD:E8:EF:49:08:4D
X509v3 Authority Key Identifier:
keyid:45:08:B5:D7:B3:73:C4:1D:DB:EA:98:DA:5B:C9:71:72:90:E4:17:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f7:f0:04:1f:df:fb:b6:dc:c0:68:03:87:de:d8:ed:12:a3:
85:e4:44:ee:ea:3d:81:4d:ae:69:ea:67:72:05:42:eb:0d:da:
3f:63:0d:f5:a4:17:2f:84:e1:f0:b0:c2:c3:06:2d:d5:74:7b:
6d:c5:e5:ae:4c:37:7e:1a:72:75:3a:1c:e1:6c:8f:32:c5:e2:
e5:27:e8:ee:27:0c:b7:9a:7e:78:12:97:ea:6d:57:23:10:20:
75:77:40:53:64:c2:64:c1:6f:ec:e7:27:6f:c7:ca:a0:05:0c:
c4:68:33:a1:c9:40:c3:be:c6:b3:a8:5f:90:82:70:5f:c4:d6:
b5:85:d1:f3:ba:c3:22:d3:e9:b3:d0:55:10:fc:e5:56:aa:a5:
e6:88:49:25:4e:eb:c4:64:af:f9:5f:c1:c3:71:17:2c:0d:bf:
fb:7e:75:3a:fa:f8:19:94:e5:b6:9c:d9:66:94:85:37:fa:75:
ab:70:41:ab:b3:1e:e1:27:fd:cf:63:f6:58:11:7f:30:db:f6:
1d:27:ba:c9:1e:64:e7:41:6d:88:48:25:de:55:d2:52:5b:27:
36:22:00:d7:59:8f:c1:7a:84:c1:39:4e:c9:b4:1e:b4:b6:af:
13:61:b1:ac:bf:f6:d2:a2:9a:89:56:60:5d:68:3d:bc:2a:9a:
5e:74:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:51:16 2026 by rpki-client