Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
File: rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft (raw, json)
Hash identifier: UY4lPUiWOXaagkGfblrC+86SSp39IC4hOvvNP/Vp+9I=
Subject key identifier: 30:A4:36:33:2A:5D:C1:A7:DA:9A:96:BF:DA:06:48:0C:D8:FC:63:1B
Authority key identifier: AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
Certificate issuer: /CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Certificate serial: 019FAC75DD88166EA2E4DE3734F35A4F44DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:33 +0000
Manifest this update: Wed 29 Jul 2026 06:00:33 +0000
Manifest next update: Thu 30 Jul 2026 06:00:33 +0000
Files and hashes: 1: en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa (hash: l3a1Se4v22VtVm5ZL/5W5MYgFfditJOkAKvu9Xf04q4=)
2: rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl (hash: xWuaEh1xafUu1G8wDZHo8j/bBpoKkHwKaIu0MRm9qxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:dd:88:16:6e:a2:e4:de:37:34:f3:5a:4f:44:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Validity
Not Before: Jul 29 06:00:33 2026 GMT
Not After : Jul 30 06:00:33 2026 GMT
Subject: CN=30a436332a5dc1a7da9a96bfda06480cd8fc631b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:8e:a4:6d:5a:2d:4a:a6:65:02:81:ce:6a:
5f:18:cd:fe:c4:f3:aa:ed:d8:ba:5b:b3:7c:cb:74:
1b:c6:36:31:03:aa:c9:bf:65:78:3c:58:a3:1d:60:
97:aa:f6:79:06:b6:3d:49:1e:00:e7:62:37:60:0f:
cd:8a:4c:50:4f:79:45:f1:dc:31:40:30:b7:af:a1:
c5:02:f2:85:58:5c:f7:91:54:b2:ce:8d:7d:9d:a5:
e1:3a:7a:dd:ce:17:d5:6c:59:c7:7a:4b:ab:e3:d6:
ce:ce:a3:a6:f8:10:84:f9:41:15:4a:ed:87:f4:54:
b0:8c:48:57:57:ed:b1:9f:9e:52:15:38:b3:d8:5f:
d4:69:94:61:78:67:19:a8:13:62:40:44:25:60:33:
0d:8e:ee:56:bc:f3:a1:d7:fb:c2:c6:44:31:ae:8f:
5e:53:8d:42:03:b7:25:7d:ff:9e:6e:6f:18:ea:5c:
4f:d9:56:51:57:4e:6d:88:04:eb:df:76:25:84:42:
d1:09:a1:fd:31:36:a8:0f:a2:39:a2:6e:c5:9c:d2:
b1:40:d0:7f:d8:1e:5a:50:34:0b:42:a8:17:ff:34:
dc:16:2d:a2:00:93:3a:fd:de:86:10:f7:9b:fe:f7:
99:b9:cf:c1:47:c8:ca:bd:61:80:15:6c:c2:a4:0c:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:36:33:2A:5D:C1:A7:DA:9A:96:BF:DA:06:48:0C:D8:FC:63:1B
X509v3 Authority Key Identifier:
keyid:AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d4:db:64:04:1c:1c:15:57:41:85:d5:a7:22:07:1a:43:0c:
1c:f5:db:b2:0d:1c:32:6d:51:26:36:ad:2a:c3:61:c5:10:6d:
ec:35:d5:8f:c9:71:89:b5:92:51:37:75:71:07:08:c9:1c:0b:
fa:f2:fb:1d:6d:24:31:6f:38:44:a5:38:7e:5a:2d:81:5b:ed:
a6:cc:ea:66:97:db:56:d0:e5:76:d2:37:c6:b1:db:78:13:8d:
49:82:8f:da:69:88:d5:92:29:c6:0f:e1:cc:2b:9d:d9:1f:f2:
b2:e7:93:1c:49:1e:fa:75:68:4c:23:17:19:e7:69:49:dd:20:
f2:e5:75:1a:dd:ac:72:9f:ea:44:87:51:b2:bb:02:e2:0d:e2:
77:79:c4:b5:41:cb:d2:d8:d7:4c:a8:dc:97:14:9c:01:6e:1b:
74:20:7f:7a:ab:48:ef:90:d5:8f:f9:1f:9e:69:de:c0:72:e4:
cb:85:a4:28:f2:b8:1e:98:37:42:33:cf:8d:c3:80:90:37:da:
aa:01:f2:02:e3:31:b0:9d:c4:06:0d:c8:31:59:17:f8:26:f5:
8e:6b:5d:02:31:8f:49:f1:4c:bb:63:09:fb:75:dd:ac:84:2b:
5b:2c:1e:98:ae:16:21:13:33:56:02:b5:93:c5:47:3d:2f:f4:
8e:e0:96:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:59:18 2026 by rpki-client