Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: 2vVBkIaLHTchyr6czVN0Vq/hVV7+ukFUbTOLnBky7Fc=
Subject key identifier: 94:92:0D:CC:02:A1:91:40:BA:F1:D1:05:51:96:AD:C0:68:50:31:86
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 01A0CDECE7D7007E3088BA662783A9FC60FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0CB3
Signing time: Wed 23 Sep 2026 11:00:49 +0000
Manifest this update: Wed 23 Sep 2026 11:00:49 +0000
Manifest next update: Thu 24 Sep 2026 11:00:49 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: SzIpO6H2CqFQTp1y8j7u7fOVwgD76jBAAbwOyRquTh4=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:e7:d7:00:7e:30:88:ba:66:27:83:a9:fc:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Sep 23 11:00:49 2026 GMT
Not After : Sep 24 11:00:49 2026 GMT
Subject: CN=94920dcc02a19140baf1d1055196adc068503186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:3f:4a:84:34:9d:10:cb:8c:66:a3:13:d5:
50:99:48:a6:a6:54:d4:8f:69:f1:ce:d1:a2:45:9d:
4a:ac:66:45:fc:56:67:da:52:56:b8:2e:3e:6a:a3:
0c:08:74:03:6f:21:4f:2c:c0:b4:12:43:71:9d:7d:
94:a0:26:69:4b:1a:ca:4a:a1:aa:ab:7a:a2:f4:f3:
c6:9b:fd:3f:bc:c0:37:59:be:85:1e:08:ba:16:ba:
0a:84:fb:b4:2b:69:ae:9f:88:0c:90:24:fb:e1:86:
6a:ec:6d:46:e2:76:c6:1e:66:32:55:13:94:6b:8c:
0c:93:33:c3:19:71:20:80:23:1f:fd:c9:27:b7:4e:
a5:d6:62:08:4f:ec:7c:18:f6:06:d7:13:22:73:13:
44:cd:49:c9:f5:0b:77:af:50:81:09:d3:0b:0a:94:
f6:05:59:7c:76:43:8d:ca:58:b3:91:44:40:4a:30:
10:01:9b:00:8e:0d:55:ab:5d:68:d4:fe:46:d5:f9:
7e:02:ab:b6:f4:3e:c6:fa:96:fa:76:f5:38:fb:6b:
75:7a:07:95:7f:f8:73:18:75:39:fa:ec:c6:69:8f:
04:ea:2d:15:7b:55:a0:62:30:92:3d:4c:1d:e3:b3:
c8:c5:8a:40:c7:b8:cb:cd:c1:d1:be:7c:e7:f7:a0:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:92:0D:CC:02:A1:91:40:BA:F1:D1:05:51:96:AD:C0:68:50:31:86
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:45:64:c7:6c:c7:a8:4e:5f:cb:d6:63:78:9d:75:cb:db:2f:
82:2a:a8:a1:5d:37:2f:00:dd:73:3e:23:b9:d0:9c:04:9c:74:
a7:67:be:e4:7c:8f:73:0c:78:58:25:bc:26:48:36:ed:ee:92:
0b:e9:f6:b9:7c:10:13:b3:5a:76:ef:74:49:0f:0e:46:30:31:
b9:b8:0f:ad:50:90:ff:61:4d:79:12:31:7e:f6:0c:22:54:72:
c6:be:c5:c0:5d:27:90:1f:31:09:7c:a4:d4:58:bd:e0:2b:9b:
c1:ba:f4:8b:12:55:2b:82:aa:c9:a9:88:1a:14:e3:26:ff:69:
2c:5e:61:07:bd:8b:ef:b3:07:9f:d5:b6:42:9d:9c:f2:03:03:
44:19:44:f6:ce:5a:df:42:f2:ed:70:d1:88:0e:4a:ed:54:06:
1a:5a:cb:57:63:ff:46:c3:32:85:d8:6f:17:a5:b3:52:73:dd:
6e:56:a1:f9:89:f5:2f:79:90:df:61:ad:f6:1b:6e:5f:76:51:
ea:39:5a:43:78:12:92:c0:04:64:96:cf:ac:f1:d7:a2:54:6f:
81:8b:33:57:f5:46:71:23:12:03:f3:10:d5:9c:5c:8f:e3:31:
09:51:9e:fb:8c:4b:74:0b:e6:b3:85:9d:e3:38:2c:98:61:8c:
bb:3e:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:36:19 2026 by rpki-client