Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: swLt8DOMnp8UvxWO/AVPzgr5vCAE3878Ov6vSgXJOgU=
Subject key identifier: EB:FA:D2:25:54:66:94:58:B0:63:8C:04:AE:8B:7C:27:EF:75:A7:11
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 01A0D538BDC501DB418CA0B1860EF7D6D2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 21:01:00 +0000
Manifest this update: Thu 24 Sep 2026 21:01:00 +0000
Manifest next update: Fri 25 Sep 2026 21:01:00 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: 3M8FqczdmHsgejhEbjAddliCmZ0H3i4mT1nrUFyUy5g=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:bd:c5:01:db:41:8c:a0:b1:86:0e:f7:d6:d2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Sep 24 21:01:00 2026 GMT
Not After : Sep 25 21:01:00 2026 GMT
Subject: CN=ebfad22554669458b0638c04ae8b7c27ef75a711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:5a:50:44:4c:54:75:3a:00:94:45:08:56:
d7:04:2d:82:8e:aa:3d:ac:0c:65:4a:44:6f:9e:0c:
0c:8f:22:a6:f6:15:59:1e:42:05:4c:99:e0:f4:47:
f6:12:ee:aa:80:04:1b:8e:5d:f3:04:b9:2e:32:7b:
f4:ce:c6:a8:ed:e1:f0:b2:83:b3:85:c1:b2:4d:48:
6c:fd:af:12:7f:4a:e3:cd:08:9a:9d:3c:5b:c6:c2:
f6:95:c6:44:63:c0:bb:07:ae:f5:21:1d:1f:d6:0e:
d1:8e:20:e7:f5:7b:66:15:d6:e8:31:cc:77:a6:0e:
6e:b0:88:a0:8e:86:38:c6:4e:fd:6a:7c:44:cf:dd:
d0:d3:0f:d0:45:d0:f7:54:67:6e:3e:80:0b:fd:d4:
d3:d2:40:5c:e2:78:65:45:4b:b6:9b:07:c1:58:23:
0d:0b:b3:96:e3:31:43:9e:5a:85:a2:25:9a:67:7e:
7e:c3:b4:4d:7b:3d:92:bc:35:d1:95:f9:2c:cb:64:
c4:51:c7:c8:0d:9d:90:6e:44:aa:b2:4a:80:72:a3:
20:42:ae:44:03:a0:84:67:72:94:2c:d7:ba:c8:83:
de:e7:fb:03:62:df:c0:3c:57:97:af:0e:db:c7:43:
e4:f6:33:db:03:87:95:78:98:55:1a:1d:85:1c:b5:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FA:D2:25:54:66:94:58:B0:63:8C:04:AE:8B:7C:27:EF:75:A7:11
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f7:43:f6:f5:36:90:08:26:ae:2b:f7:cd:e8:a0:fb:64:df:
cd:38:56:33:f6:d4:9e:55:1f:fa:0a:e1:f3:50:3e:cf:d1:c0:
57:af:46:fe:a3:24:87:72:ab:34:f0:cc:4b:74:81:b2:4b:8c:
99:12:6f:cc:26:e0:8b:7f:5c:53:80:dc:c3:74:a5:60:50:0b:
e1:59:ec:48:24:94:90:81:67:fa:81:99:7c:9e:12:d3:4b:29:
1d:30:cd:12:bc:a2:4f:15:ac:b0:c2:0e:d1:4d:19:0b:03:64:
d8:f7:8b:09:33:ae:46:b3:0e:86:37:d8:7c:e0:2e:ac:89:03:
6c:a2:da:4c:fd:a5:62:2a:af:7f:d7:03:24:e1:d7:25:ef:7a:
d7:31:eb:77:4d:56:90:b6:06:27:6f:eb:52:dc:dd:78:99:2c:
68:39:ed:32:59:9a:dc:6f:e4:58:ff:22:45:6b:a3:3a:88:5f:
50:da:cd:4e:02:57:08:a4:89:cc:21:ce:1c:1e:ab:d0:45:e6:
d2:86:b8:4c:3d:17:0b:86:24:17:37:cf:92:70:43:bd:7b:d8:
25:64:b8:80:5b:70:df:9d:48:a4:56:bf:36:45:1f:09:fc:a8:
f9:6d:56:67:f6:22:1d:c9:71:f2:6c:ea:c5:8a:fa:70:e2:c1:
fc:b6:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:08 2026 by rpki-client