Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: LsfHPAWcAmB2M2yANy1zgwYeUintFmM3bi/feeow1V4=
Subject key identifier: A7:3D:36:A0:19:38:27:B3:CD:BD:FE:B2:37:74:EC:CE:92:D6:E9:4B
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 01A0DA96F4F8AAE575127CEE2DE50B3C7277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 22:02:01 +0000
Manifest this update: Fri 25 Sep 2026 22:02:01 +0000
Manifest next update: Sat 26 Sep 2026 22:02:01 +0000
Files and hashes: 1: T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa (hash: SXBhd3/vnyIoPB/kDRi62FVnMbysfno7J5T9Eftc8tY=)
2: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: 5uvOOG9Vvow0JxCMM8zUiKVT0ZpdgDKWnGhI7aHY3p0=)
3: tSpDrZGtdp0mH1aXKivR6nDrhuY.roa (hash: xkSEr+C7WhhCLocSo1zhSLhZi6gcFYi1jnV4sR3gnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:f4:f8:aa:e5:75:12:7c:ee:2d:e5:0b:3c:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Sep 25 22:02:01 2026 GMT
Not After : Sep 26 22:02:01 2026 GMT
Subject: CN=a73d36a0193827b3cdbdfeb23774ecce92d6e94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:2a:fd:39:a0:05:d1:49:99:7d:44:10:45:
05:ac:c4:81:71:0c:36:eb:f4:f8:a1:41:72:fa:07:
fc:fd:79:a3:23:21:a6:18:b6:2b:f9:03:84:df:c1:
fa:05:aa:d1:b7:25:05:bd:1d:f5:26:52:98:67:c7:
43:dd:b6:f8:28:43:94:23:34:5a:1a:7c:cd:b8:2f:
ee:32:ae:e2:50:36:e5:8f:60:24:27:96:1c:ab:75:
9d:6b:4b:e0:76:51:02:f6:b3:3e:86:4b:ff:09:64:
49:66:2a:e8:11:90:cc:dd:85:30:80:e4:c0:ae:7d:
a1:c0:87:ef:e6:03:d4:b0:89:bf:68:f9:0c:b0:14:
7e:07:8e:71:3f:79:23:ff:9b:e5:93:72:e4:05:98:
05:07:f0:47:22:10:6b:6b:b2:5d:a6:75:dc:b4:f0:
af:20:ff:d6:66:a4:b0:1e:48:94:f0:a2:cb:64:2a:
7c:11:05:e7:1d:11:ad:e0:52:9c:13:80:ce:c6:e5:
c3:c0:54:20:73:9a:f4:95:9b:20:4e:89:26:e1:71:
13:6c:21:1f:65:dd:02:65:c4:4d:d0:ac:ad:dd:09:
86:56:2d:93:c2:41:51:2e:84:dc:5e:ca:52:f4:e1:
1f:e6:c3:a5:d2:5a:ca:40:31:70:dc:ca:93:60:b6:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:36:A0:19:38:27:B3:CD:BD:FE:B2:37:74:EC:CE:92:D6:E9:4B
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c2:69:78:f1:36:02:ab:8e:fd:fd:6d:30:ef:5a:f0:fe:d3:
03:a4:4a:96:c3:c3:48:1b:55:a2:1d:fd:89:60:a0:98:7a:8a:
14:bd:c2:d9:8f:9d:9c:51:35:ad:c1:14:e6:13:b2:8c:ae:66:
bc:d9:50:5b:01:38:c1:c3:39:98:3e:30:dd:4b:7d:92:6e:e6:
0e:a5:dd:58:66:f2:f7:df:d6:a4:92:39:cf:e0:7e:f5:67:07:
d5:27:e5:8d:5e:cd:32:f8:d2:01:5c:74:67:00:9f:4e:af:47:
80:6f:be:c8:50:63:38:f2:56:38:8b:89:c1:bf:66:47:ee:de:
1b:d0:cc:0c:2e:29:5e:07:a3:0a:6f:93:e4:b5:03:e4:30:e3:
76:05:8d:a6:81:ef:4e:ee:43:67:39:79:f8:2e:02:8e:87:f2:
55:a6:c5:ef:4c:59:bb:09:56:f3:5d:8b:04:53:e8:fc:6a:35:
f7:31:e9:05:b0:0d:34:c5:19:e4:79:f6:d9:6b:32:b1:5a:8f:
6c:54:37:d2:09:bf:bb:88:aa:44:c4:92:ad:14:72:38:e0:c0:
d9:28:e7:41:ac:63:b2:ec:6a:e0:5e:d8:7e:e1:11:c8:f5:91:
d4:1b:7c:30:d0:02:a2:3d:11:eb:14:21:da:2b:03:20:c0:f2:
af:ec:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:01:06 2026 by rpki-client