Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
File: RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft (raw, json)
Hash identifier: XSR1dHyjnVvyrOau+gyOUQFPX5xj+WNifvY8eNv4OdA=
Subject key identifier: 27:11:F2:04:D8:6C:D6:91:B8:AD:C5:89:B5:00:36:07:86:05:98:BA
Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
Certificate issuer: /CN=462767a7375f1ac546691aaf2a511fbb6277031d
Certificate serial: 019FA7BDF4E18AD39836DAED7A38D68387EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
Manifest number: 0253
Signing time: Tue 28 Jul 2026 08:01:11 +0000
Manifest this update: Tue 28 Jul 2026 08:01:11 +0000
Manifest next update: Wed 29 Jul 2026 08:01:11 +0000
Files and hashes: 1: 0ppkgAkMVUZmtvxiis_JaRg_jKc.roa (hash: hmBjjzY/GLh0BaP+YN19dWeqC0F3ldt8pYexHB8bxW0=)
2: RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl (hash: LdlyDDZgiyCHNQYF9+MB/AGHBfNN9sf++aTDHwVmGHI=)
3: gFOGmZRlX2Va7a4eZJorJSldfM0.asa (hash: iWV8IrqVD+U7+lJQU0PeeR9WILJwhPNuOe7C9EI2EN0=)
4: hvFmobLJgv_FtphUoy5jADPJJnc.roa (hash: jnuVvbpAgeJ1NUOXj3up5SgN82P8AgWr5+BqvtU3HaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:f4:e1:8a:d3:98:36:da:ed:7a:38:d6:83:87:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d
Validity
Not Before: Jul 28 08:01:11 2026 GMT
Not After : Jul 29 08:01:11 2026 GMT
Subject: CN=2711f204d86cd691b8adc589b5003607860598ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:76:f4:75:5e:fe:20:71:47:18:42:85:34:
c8:6b:69:f4:6c:02:8a:31:5e:14:02:84:38:42:3c:
bb:9c:7e:67:b3:83:5b:f2:0b:80:37:dd:79:ca:b1:
74:00:d3:30:fa:f8:33:af:4e:44:0a:8a:04:07:cd:
69:b0:b3:1b:b7:e5:9a:69:43:75:5b:24:0b:fd:b4:
ed:87:ea:17:da:b1:95:ba:58:53:9b:05:3d:3f:32:
8b:5a:de:ed:a3:c1:6b:df:99:eb:61:b4:c5:59:d7:
4d:b2:9a:0e:e9:c2:be:16:6a:01:a0:0e:5c:66:70:
d7:00:aa:8a:6e:25:3c:fd:a5:0a:61:89:e0:af:22:
66:a3:a3:51:00:c2:63:7b:7a:0f:ca:87:a8:e8:a7:
a5:42:10:35:d8:f2:f4:21:05:fc:55:6f:a6:d9:c7:
d2:c1:9b:cb:c9:f0:aa:9b:37:2b:c8:42:9c:44:7c:
cd:f3:38:9e:fd:06:5d:bc:74:a2:8c:cf:64:cd:78:
ba:34:4f:6f:9a:3a:3d:8d:e9:1a:79:42:15:d7:1a:
09:ab:f2:39:72:2d:12:b7:e0:26:e1:ce:ee:b8:f7:
9f:d0:c4:f7:6f:f2:3b:e3:83:e4:36:3a:4c:64:31:
61:f7:db:f6:1d:6e:b0:13:52:14:e5:a3:a6:3f:6a:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:F2:04:D8:6C:D6:91:B8:AD:C5:89:B5:00:36:07:86:05:98:BA
X509v3 Authority Key Identifier:
keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:58:df:29:c4:41:f4:ec:d6:5d:b2:a7:7e:6d:97:2f:7b:1f:
5d:a1:ea:f5:12:38:f9:09:cf:1c:b4:bc:3c:23:2e:54:80:fe:
11:91:9b:a1:ee:19:b5:9d:e1:d8:ea:2a:06:e0:1d:d0:f9:74:
ba:ab:3f:19:48:c2:45:08:7f:79:5a:c1:a5:37:25:f0:71:25:
79:27:f0:66:3d:85:be:c4:69:73:f3:1c:69:4e:09:1f:ea:de:
43:4f:a8:b3:c6:be:87:d5:1d:12:5f:51:b1:80:bb:01:ef:dd:
42:4e:d1:4b:0d:ef:ae:cf:26:33:52:ea:99:34:91:4d:7d:e0:
08:d1:b5:75:51:2d:00:d3:8b:cc:21:f9:17:ee:14:ca:51:b1:
2a:f0:c0:0d:f7:5a:99:68:0c:be:9b:e9:fe:00:cc:2b:59:48:
5f:9f:6f:c5:2a:0f:c2:52:05:7d:cd:a5:0e:3d:87:c1:8c:65:
b0:9f:69:5e:b4:d1:df:9f:21:76:65:0b:b7:87:c4:c9:ac:94:
16:12:1d:5c:11:c8:04:85:d2:11:58:04:b8:90:b9:f2:fa:49:
8c:ac:80:8f:95:b2:c5:2e:7c:ab:62:5d:3b:23:31:52:69:b6:
f4:cf:48:8f:71:df:d2:5e:32:66:17:e4:dd:b2:10:34:59:f6:
0f:bd:96:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:39 2026 by rpki-client