Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
File: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft (raw, json)
Hash identifier: Kvzp8k/SQMb3xoIMXHex8daekbyfZlf5VHdrfyENRl8=
Subject key identifier: 4D:24:19:CF:8D:83:DF:02:54:FF:8F:AC:34:B3:6D:39:22:0A:1D:C9
Authority key identifier: D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
Certificate issuer: /CN=d5a42a0ffd0274c655070609549e6420b63284df
Certificate serial: 019FA89A4516F05D1C79E01E2AF6822146BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:50 +0000
Manifest this update: Tue 28 Jul 2026 12:01:50 +0000
Manifest next update: Wed 29 Jul 2026 12:01:50 +0000
Files and hashes: 1: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl (hash: J+nMXwF2+ybIL2eRlWkeGdpeq21DZSQzHe5eoMJ8kwk=)
2: FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa (hash: vbWMXzKS4D5+2q+2t821SHbD4J+yqJXDqLxiG6blyO0=)
3: sAks3DmPZ6CqoQlRY3bGSvOGHik.roa (hash: Ee7Zl0TzS27Mz1IwdlPhsbhVTUojNkqd2MBy8kTqIm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:45:16:f0:5d:1c:79:e0:1e:2a:f6:82:21:46:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a42a0ffd0274c655070609549e6420b63284df
Validity
Not Before: Jul 28 12:01:50 2026 GMT
Not After : Jul 29 12:01:50 2026 GMT
Subject: CN=4d2419cf8d83df0254ff8fac34b36d39220a1dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:71:21:91:1d:39:f7:2d:97:f1:ba:03:8d:
6c:a4:fa:d2:0e:7d:e0:e3:b9:a9:a7:0a:51:e5:ef:
35:fb:93:2a:cc:9c:a2:20:a0:30:7f:5b:90:8a:e8:
cd:4d:dc:f5:e8:a6:72:3b:5d:54:33:f9:ba:b7:58:
be:95:9d:18:61:83:53:3a:8b:4d:ed:ef:31:ba:cf:
ce:64:2e:45:33:26:0c:f4:2e:03:80:dc:97:ef:f6:
1b:bf:48:64:df:c3:ee:b8:2c:19:a3:55:3f:79:f4:
ab:93:07:1e:db:79:46:6a:e3:f6:cf:4e:1c:51:8b:
6a:ba:b4:f1:df:3a:b3:ff:dd:89:17:37:a5:8d:de:
40:85:b6:30:1c:39:38:09:7b:c9:f0:ca:52:dc:83:
84:73:96:89:53:84:69:1a:d0:a4:83:cb:f7:93:7c:
e0:5b:c8:dc:dc:3c:f3:38:67:dd:d7:69:cc:99:25:
09:15:01:ef:88:aa:43:e1:22:07:1e:b7:29:74:3c:
54:e3:9c:04:18:3f:f5:a5:a6:d3:3c:49:2f:77:b5:
0b:8a:aa:92:9d:a3:83:11:86:66:9a:6a:d6:28:66:
a0:b5:33:68:ff:e4:0f:76:c3:b2:a7:af:55:db:ce:
89:c0:c0:ed:4c:b3:d2:5e:89:a9:b5:48:66:2c:6f:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:19:CF:8D:83:DF:02:54:FF:8F:AC:34:B3:6D:39:22:0A:1D:C9
X509v3 Authority Key Identifier:
keyid:D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:69:28:ad:23:e6:f2:b8:37:69:83:8b:c8:19:ee:51:86:03:
f6:3e:d9:24:c2:e7:db:ab:50:be:4c:02:57:16:7e:67:bf:9c:
7c:cf:2d:0e:da:4c:79:77:7d:e8:a5:68:61:58:49:b4:1e:fc:
a4:d5:1d:3c:32:d1:ff:71:fe:50:ed:33:06:0b:81:6c:f9:fe:
ae:c9:91:56:b7:af:53:9d:e6:60:b9:04:4c:69:0b:05:42:fe:
d6:41:db:8f:f1:ad:82:55:78:2d:c5:24:36:d9:e5:75:fa:b3:
fb:52:3f:0c:e1:d2:77:70:01:d8:6e:4b:60:d8:b7:58:83:a9:
4e:4d:5d:5d:db:2c:39:76:a0:bb:4c:a0:e5:79:6d:74:3e:15:
25:0a:6e:fe:0b:18:31:be:b8:d9:90:41:98:f9:44:19:9e:3e:
43:a1:1c:dc:09:cf:b5:95:55:18:b6:a3:a0:7d:cc:56:a1:92:
ef:5e:4d:ce:55:63:5b:d3:36:e1:53:4a:fa:34:91:74:3a:b9:
75:90:cb:c1:3f:16:70:7c:98:54:b6:c9:5e:0c:60:67:2a:d0:
d8:a2:05:dd:fb:58:45:78:10:fb:7d:ef:6c:88:fa:1a:07:99:
31:f2:df:26:6e:7a:0f:aa:7c:7c:b3:f3:49:8e:92:7b:e9:4e:
ac:bc:6d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:02 2026 by rpki-client