Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
File: RKw-QPgEbPOHzJFwxdFifUIh190.mft (raw, json)
Hash identifier: QORur34xAWNG46cCECvSkLcKjYyRXhlR41CX2LFqFU4=
Subject key identifier: 2B:D8:0D:CB:72:05:13:87:41:5D:1B:EB:8E:97:2E:85:EC:45:77:C1
Authority key identifier: 44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
Certificate issuer: /CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Certificate serial: 019FA89A1F23E0194251A89955799665AA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:40 +0000
Manifest this update: Tue 28 Jul 2026 12:01:40 +0000
Manifest next update: Wed 29 Jul 2026 12:01:40 +0000
Files and hashes: 1: RKw-QPgEbPOHzJFwxdFifUIh190.crl (hash: 85bOrc6Z6mVeEF8GjfZQos7yKaNzBgcW3mVn2EK8F6g=)
2: SVKbgAlazhSBrSFI_Vfp0bKjVhY.roa (hash: 7TPEHCfibMPRsy9xSphGCCfugTiCDmZv7qGFp4wnVmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:1f:23:e0:19:42:51:a8:99:55:79:96:65:aa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Validity
Not Before: Jul 28 12:01:40 2026 GMT
Not After : Jul 29 12:01:40 2026 GMT
Subject: CN=2bd80dcb72051387415d1beb8e972e85ec4577c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:26:2c:6e:50:16:28:aa:c1:db:29:c8:15:
1c:a5:0a:a2:a9:ce:8c:18:03:09:28:14:08:96:7a:
00:ea:e9:b3:a2:02:1f:db:e4:25:19:eb:41:9b:f9:
c2:c9:95:01:21:06:61:00:bb:ac:8f:b7:0b:ad:65:
92:2f:9a:06:15:d0:73:c1:30:dc:b6:a0:b7:d2:de:
44:7b:f0:29:4b:9d:8f:92:f5:7e:b4:6b:d5:7e:ea:
33:09:c8:b6:68:a7:35:4f:10:70:48:d2:c3:5d:91:
03:9f:d1:c8:64:a2:70:29:f5:15:b4:54:2d:d9:5b:
1a:0e:0a:59:16:bc:17:ca:1a:84:44:42:ed:db:74:
66:55:26:d5:c4:c2:8d:89:fb:b2:8e:3d:67:a1:60:
5a:d5:e2:e1:8e:f8:06:3c:06:d0:9e:a2:04:fb:04:
31:af:6e:a4:b0:df:de:b2:2c:d2:fa:56:61:86:03:
ee:28:cf:47:9d:08:43:15:7e:83:94:e2:dd:8f:1f:
30:25:ba:7b:82:a4:7f:11:d7:c5:d8:c1:06:98:15:
21:44:97:42:a6:84:e9:02:4e:9c:3a:f5:a1:e6:64:
66:7d:b8:d6:18:41:c2:d3:2d:f1:3f:79:b5:f6:ed:
9b:dd:6e:d5:76:ce:fe:1d:a2:4e:86:79:21:9c:04:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D8:0D:CB:72:05:13:87:41:5D:1B:EB:8E:97:2E:85:EC:45:77:C1
X509v3 Authority Key Identifier:
keyid:44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6f:13:70:84:1f:ee:42:9c:87:ee:70:80:82:68:96:6f:2c:
07:01:f7:ed:4a:8a:5f:7e:ff:ae:83:07:e5:db:08:ad:96:56:
de:a5:5a:3f:73:3b:d1:0f:67:0f:70:de:95:99:9b:66:5a:9b:
0a:e6:fd:bd:54:d4:47:4d:94:c6:51:9c:a0:1c:64:b9:ba:57:
0f:b0:96:29:4c:c0:9d:60:0b:d3:d2:ed:e1:39:e0:4a:72:8c:
5b:ca:39:bd:79:30:02:a6:83:80:03:40:48:8e:14:41:fe:1b:
92:9f:cf:8e:7a:53:54:d2:d2:60:65:17:c4:7f:ae:ae:fe:6a:
1d:72:c7:ba:e5:11:ed:be:dd:88:f9:ea:f9:ff:3a:5a:b1:1e:
aa:ab:cb:a6:1e:22:2f:e7:aa:6b:55:4c:71:60:5c:78:ba:e0:
e8:a7:0a:03:9e:a7:f1:f8:8a:d7:52:50:16:6a:3d:99:e5:ae:
98:09:fa:6d:c9:df:d8:0b:08:98:94:89:16:de:c8:f4:99:4c:
65:5a:86:76:91:56:9c:90:b3:9e:01:e8:f9:c9:31:d0:7d:95:
7c:26:a6:13:5b:ce:c3:59:3b:05:2f:0d:a4:53:92:a3:3b:a0:
52:34:6b:1c:52:2c:93:99:09:34:d8:df:a6:3d:6b:91:16:1a:
bf:14:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:04 2026 by rpki-client