Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
File: kqOPWtZym-9NSerlHAFGmCIewUY.mft (raw, json)
Hash identifier: Sn9XV3dXZ0dLgG1V+jyavubj4ZAtZFWPCJ7YacRJdNM=
Subject key identifier: 46:41:CD:B5:8F:3B:C1:54:6B:78:5B:8A:1B:E6:03:04:98:70:42:A5
Authority key identifier: 92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
Certificate issuer: /CN=92a38f5ad6729bef4d49eae51c014698221ec146
Certificate serial: 019FAC75F5EC44B5D9C3FDF47BDAAE600C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:39 +0000
Manifest this update: Wed 29 Jul 2026 06:00:39 +0000
Manifest next update: Thu 30 Jul 2026 06:00:39 +0000
Files and hashes: 1: 3M3gfxZWTlxlBNR3tYw4_tebKeM.roa (hash: xsykozyPFY5/0PUbC/XmVsKSACxFGy1rLASCnELrsxA=)
2: EeuHOP1ld_YxpuE_gQSJqZEtgX4.roa (hash: XyhhD+tamYBfloB02aI97R1OMdqo6L/U/hCCCp5CY44=)
3: kqOPWtZym-9NSerlHAFGmCIewUY.crl (hash: eNQpH3jJjWdgW8BetvQhAOQoqK+ezYUjCz4WmGHATkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:f5:ec:44:b5:d9:c3:fd:f4:7b:da:ae:60:0c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a38f5ad6729bef4d49eae51c014698221ec146
Validity
Not Before: Jul 29 06:00:39 2026 GMT
Not After : Jul 30 06:00:39 2026 GMT
Subject: CN=4641cdb58f3bc1546b785b8a1be60304987042a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:00:1d:68:eb:b7:8f:87:18:31:a9:fa:18:
4f:02:06:44:0f:66:38:92:9c:ec:59:e7:d2:52:59:
9f:22:cf:76:62:e4:60:4d:cd:79:86:e0:7e:ae:78:
62:08:76:e3:6b:02:69:f0:f6:d3:2f:14:61:5a:30:
1f:2a:4d:7c:f2:db:99:8a:a0:f1:e4:34:aa:b1:d9:
9f:fe:b6:89:8e:2f:f6:34:a5:ff:c2:f4:8f:9c:72:
80:a1:cb:b9:dd:a4:9c:5b:23:74:e2:a1:43:2f:cd:
9d:4b:fd:c7:97:b7:17:86:3e:dc:1e:6e:2d:e4:bc:
84:60:85:63:8e:ad:db:f6:b4:3b:01:fb:76:b2:5a:
3a:f9:44:f5:4c:fe:af:b8:8f:d3:6e:ed:ea:01:05:
44:79:ab:5e:d5:52:85:95:b8:91:e1:2b:2e:62:e8:
68:c1:34:78:a2:73:3a:6b:f9:2f:21:06:c6:37:cb:
fd:54:8c:8d:10:51:a6:62:fa:f3:76:35:a6:9b:f1:
4d:c4:10:53:3e:58:fe:07:50:ec:d5:36:68:95:5a:
50:e4:dd:28:70:47:b5:46:73:c6:7f:89:91:80:dc:
89:dc:0a:9b:f9:88:10:98:81:5f:c9:18:e9:a3:e4:
8b:6c:9d:10:f4:4e:32:f1:7c:31:9b:85:54:74:50:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:41:CD:B5:8F:3B:C1:54:6B:78:5B:8A:1B:E6:03:04:98:70:42:A5
X509v3 Authority Key Identifier:
keyid:92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:43:6a:e3:bd:14:f9:0d:5b:f3:9e:bf:c6:02:e8:91:a9:cd:
29:41:c3:d6:b9:df:56:d9:60:f3:fc:b4:51:46:a8:58:55:df:
6e:6b:b8:7c:58:cc:01:60:1d:c6:20:25:b7:9c:32:73:92:d8:
1b:44:e9:d6:98:18:23:e0:72:b8:ee:df:a3:ca:cb:8c:20:b3:
38:48:c9:11:9c:68:ca:d4:65:5a:9d:52:c4:06:34:b8:94:75:
91:c8:a3:f0:b6:42:a9:f3:5c:04:9e:7d:4d:1e:a3:74:b6:71:
ee:08:c9:a9:c0:83:86:8e:2a:4b:b0:94:ba:3f:e0:8c:39:e3:
f2:21:50:50:22:f2:c2:52:bc:89:be:94:7f:60:0b:c9:0e:bc:
28:22:aa:d3:39:6d:be:75:91:93:5e:5a:6b:3f:d6:fa:68:46:
68:3d:46:cb:8e:f0:9c:a7:c2:ba:2f:00:31:77:e4:9f:2f:db:
71:a7:3d:12:4d:a0:39:9a:00:b9:0b:fe:c9:f6:c8:25:c3:59:
34:f2:93:93:d9:1c:92:1b:49:ed:3f:bb:b3:ea:64:99:b0:6d:
36:93:17:9c:6f:d3:e4:75:2f:46:a1:3b:f0:66:bb:02:0b:c0:
a0:cc:de:1a:ac:5b:19:a1:d7:5d:7b:8e:a2:f3:9f:73:2e:20:
82:3e:7a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:19:32 2026 by rpki-client