Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier: FX6bTsZAoMgU33zhoR1YBH7lqKIiN++NbeNx3oiQGRk=
Subject key identifier: 7F:DA:0E:55:37:DF:4F:EC:7F:5F:94:72:E3:32:63:4B:9E:DB:9F:BC
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 019CACEBE77EBCFB1D0B994A945C87ECBF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number: 0560
Signing time: Mon 02 Mar 2026 05:01:07 +0000
Manifest this update: Mon 02 Mar 2026 05:01:07 +0000
Manifest next update: Tue 03 Mar 2026 05:01:07 +0000
Files and hashes: 1: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: /LM57MPX9IUqMZombxWqlFDV0UAyq3P/ZCuLwypakcI=)
2: z-c9Pey3216LPC0KHV3ix--by3k.roa (hash: 3wJbwPppaRKKbJHcpNB2CmCnMT+2mo4g0n5EWgLuCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e7:7e:bc:fb:1d:0b:99:4a:94:5c:87:ec:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Mar 2 05:01:07 2026 GMT
Not After : Mar 3 05:01:07 2026 GMT
Subject: CN=7fda0e5537df4fec7f5f9472e332634b9edb9fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fa:bd:20:de:33:a5:23:36:d3:f0:15:63:93:
75:e6:38:20:26:b9:f0:22:b6:ac:27:f8:22:73:a5:
0d:b8:cb:ac:10:48:fd:be:b7:18:39:6c:5e:0c:f8:
8c:53:19:54:20:16:88:be:08:d4:c5:a9:2d:0c:44:
c8:ff:ec:32:3c:41:38:e3:81:86:44:7f:90:5a:2c:
17:da:65:a4:c5:a5:cc:7c:d3:d2:ac:3d:4e:5b:23:
1c:95:a0:ed:cd:51:fc:e0:97:d7:8f:3e:0d:37:8b:
e3:20:fc:d3:e3:69:8c:d3:41:91:78:a1:20:62:10:
21:ec:f5:39:b6:c4:3a:d5:24:97:3b:c6:ec:90:e8:
06:f5:b6:b3:17:43:09:ec:5b:19:b3:51:aa:cc:94:
8e:a3:77:9d:a2:2e:f8:c7:f8:2c:8b:1e:d7:45:42:
24:47:e5:5d:38:e8:94:00:9b:fc:ac:a9:7e:0f:20:
2c:2c:48:19:02:0b:f9:62:a9:e1:db:f2:5e:68:30:
02:31:fc:52:6c:99:d5:89:19:a3:5a:93:ee:5f:7c:
1f:2f:c9:b1:dd:d7:47:21:84:b0:db:ff:8f:44:98:
19:9b:1d:ac:f2:88:36:ea:3d:26:dd:6a:4e:1d:ec:
99:67:5b:81:5b:0d:d0:d5:3b:5d:36:8c:c8:c3:d1:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DA:0E:55:37:DF:4F:EC:7F:5F:94:72:E3:32:63:4B:9E:DB:9F:BC
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f3:ce:03:1d:38:73:a7:8d:ba:4c:31:ba:a7:8e:3b:8f:33:
bd:8b:69:cf:f5:a6:3f:f2:94:1b:7d:5f:85:11:1d:78:71:e8:
c4:d5:c4:a8:2f:8f:96:e0:e1:18:32:0c:2a:dd:f5:2a:c6:67:
5c:1a:b7:c7:8c:1b:0d:16:12:36:8d:eb:a4:04:0e:f9:d1:60:
40:30:c4:5c:7a:e8:17:f5:46:76:81:ab:37:4a:51:94:cc:2b:
4d:38:10:67:30:04:5b:d4:2a:92:69:09:28:85:14:34:0f:22:
9d:e2:31:3a:7c:33:9e:44:b7:af:ae:77:d5:8e:56:5a:02:27:
34:d8:70:e0:12:14:5e:59:31:1b:9a:b3:d0:a5:f0:56:ca:83:
30:cc:0d:0e:90:89:c7:5a:61:8d:71:f3:57:98:cb:60:c1:2d:
68:e5:0c:84:01:a7:4d:19:dc:75:0e:43:98:30:f9:29:a9:5a:
9c:07:2f:5e:70:64:2e:d5:96:89:3c:b5:4a:f0:0d:ee:31:5a:
91:35:f8:0c:01:64:1d:69:02:2b:7d:34:94:5d:65:37:be:d6:
fe:32:66:f6:72:20:3a:22:bb:72:ce:fe:f4:b5:45:44:bf:46:
d3:15:a7:df:6f:d1:a9:eb:44:44:43:67:eb:9b:a4:c6:44:ea:
20:f4:b5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:59 2026 by rpki-client