Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: hTpm/Tq0Bvp5GDF+xz4He9tgXUqCmuSya5zxzAC9uz8=
Subject key identifier: BD:6B:7D:65:97:D5:70:37:67:9F:17:AF:BD:DC:F5:68:C2:10:91:A4
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 019D25BA78306E7F702FDC9F54C41DFD29CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 1013
Signing time: Wed 25 Mar 2026 16:01:10 +0000
Manifest this update: Wed 25 Mar 2026 16:01:10 +0000
Manifest next update: Thu 26 Mar 2026 16:01:10 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: CThxpu8zOvHJ5Z9LuEOkFla7ssYHt4Ay8m2Z8e9pX5w=)
2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:78:30:6e:7f:70:2f:dc:9f:54:c4:1d:fd:29:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Mar 25 16:01:10 2026 GMT
Not After : Mar 26 16:01:10 2026 GMT
Subject: CN=bd6b7d6597d57037679f17afbddcf568c21091a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:84:87:44:a6:26:2c:1e:71:ce:fe:1b:c9:
99:ba:61:91:b3:bc:33:06:08:41:d1:6b:2c:f2:8c:
27:44:5e:c3:9f:52:69:bd:54:9f:77:51:34:87:0e:
a3:fc:7d:ab:53:86:d2:75:71:eb:16:b4:af:f6:bc:
00:c0:7f:39:63:cc:49:47:e5:d7:3c:b5:68:00:fa:
a5:90:a6:55:0f:8d:ba:32:5a:48:f4:da:8e:09:fe:
f0:34:1c:18:98:6e:10:ab:8a:70:e4:f9:2f:6d:91:
b1:60:43:f0:c1:b5:73:56:c2:1f:54:09:cf:01:14:
af:20:cb:78:13:36:ae:3d:c2:fe:90:95:6e:b6:c0:
89:50:fd:74:c2:e2:0d:25:cc:27:fe:62:92:bd:11:
d4:d4:0b:f9:9d:30:bb:ed:61:e4:98:a5:42:e2:6f:
41:c6:2a:b8:34:b2:50:26:f9:cf:53:f9:53:13:8f:
cc:25:48:ac:e5:c1:11:87:63:38:be:20:ed:f2:83:
ec:cd:71:95:2e:55:3d:a0:41:6d:c2:7f:96:9f:2b:
9f:88:d3:43:99:b4:fe:7f:14:4e:26:dc:be:4f:b2:
55:fb:76:aa:a5:70:7a:f8:e9:00:9d:40:8c:4e:fe:
fd:bd:16:f9:5a:16:5d:b6:9b:69:53:47:7c:ed:db:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:7D:65:97:D5:70:37:67:9F:17:AF:BD:DC:F5:68:C2:10:91:A4
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a4:2a:a5:3e:7c:d0:86:3b:09:21:82:45:c5:25:a2:b2:bb:
d9:dd:24:3a:94:91:25:6b:2a:70:57:ac:01:e0:a3:aa:ee:31:
76:37:e3:b9:ad:07:07:24:4c:00:87:26:74:6b:da:60:98:80:
7e:72:6e:22:00:7f:03:58:04:3c:8a:72:0e:02:0d:77:ff:5c:
03:96:9c:65:11:ea:74:9b:39:cd:2b:6a:e6:26:db:fd:d8:80:
fa:c4:1b:76:32:cf:6f:bd:8c:ca:f0:56:63:c1:66:c5:41:79:
39:52:8e:95:60:5c:6e:47:79:fd:25:3d:96:83:29:ba:b6:1e:
75:97:c3:44:97:23:12:89:b2:a8:44:01:76:85:06:2c:ef:7d:
37:64:47:42:5d:e5:e8:fd:f4:d5:5c:4c:7c:9f:0a:5a:d1:c7:
e1:ae:d0:7d:0d:55:84:81:0d:18:fb:c9:8f:da:c5:20:89:de:
b7:85:46:44:0f:c5:b9:47:dd:f8:02:e8:f0:48:d5:f3:b1:e3:
3f:91:46:34:54:a8:97:29:af:8a:23:29:d5:08:16:7d:8f:70:
c0:80:a7:ea:a3:67:e3:88:80:f7:3a:67:49:60:3a:2e:90:fe:
6f:5a:8c:e2:11:8d:ac:09:82:b0:a0:09:fc:ba:6e:37:e1:4d:
aa:c7:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:17 2026 by rpki-client