Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier: hkQHpiAunhxOb/yddCTm4saz14oyymGBvxsFhdW3liE=
Subject key identifier: 65:68:B5:39:92:22:72:6E:D4:B4:83:A6:20:90:89:7C:21:99:97:68
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial: 019D26282DF17B28297EE6F86E7E2A5BE557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number: 0B4D
Signing time: Wed 25 Mar 2026 18:01:00 +0000
Manifest this update: Wed 25 Mar 2026 18:01:00 +0000
Manifest next update: Thu 26 Mar 2026 18:01:00 +0000
Files and hashes: 1: Ajd0L8XQdcyvJF9_JDszHwb-ypM.roa (hash: JhIrWGN9lZ7WVHOAnXcV9RrmyiG8gnQ8alzgC7IHdko=)
2: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: uM0YQgE7UykNN8w+yCUYOXH7Mzaqf+MqHbfLQUjY444=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2d:f1:7b:28:29:7e:e6:f8:6e:7e:2a:5b:e5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Validity
Not Before: Mar 25 18:01:00 2026 GMT
Not After : Mar 26 18:01:00 2026 GMT
Subject: CN=6568b5399222726ed4b483a62090897c21999768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:14:69:3e:0f:47:7d:25:14:07:97:24:3f:
ae:b6:b0:ec:41:c5:d8:32:e6:00:ab:f0:3d:de:5b:
77:17:f6:43:df:8a:d2:10:a5:6d:73:2b:72:bd:82:
68:83:ff:24:a2:ef:0b:cb:7b:eb:77:04:f9:43:cf:
51:f7:71:2c:b3:2d:a2:b0:19:ae:52:1b:4b:e5:e6:
2a:8d:24:3c:78:34:e5:82:a5:67:7f:42:51:4c:00:
86:e4:9e:34:c6:a5:f5:59:69:f8:f8:1c:b9:15:12:
cb:48:2c:0b:f6:10:cb:7c:02:d3:ca:51:b5:f7:4d:
57:5e:0c:b9:77:2e:2a:6f:cf:7e:ab:09:58:01:a7:
ae:ff:a4:d6:9a:be:73:65:8e:c3:04:ab:98:e5:e8:
b3:e9:02:48:54:5e:07:4d:fe:37:07:ab:c9:58:3d:
30:cd:41:d5:7d:1e:b4:34:34:dc:38:1e:f0:89:88:
47:a1:e5:5e:b0:be:63:a7:2e:45:32:70:ba:12:77:
ef:48:41:82:0a:bb:14:ff:b5:03:73:ec:58:66:9d:
5a:3d:81:e0:a5:55:54:99:a2:ed:f6:13:8b:54:e9:
3d:e1:b8:a2:50:28:8d:61:c9:24:d9:43:c2:4a:c2:
2a:e0:5f:51:e3:3b:10:bd:6f:8b:24:19:8e:5c:78:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:B5:39:92:22:72:6E:D4:B4:83:A6:20:90:89:7C:21:99:97:68
X509v3 Authority Key Identifier:
keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:0b:d3:7a:84:35:5a:aa:31:55:5a:cb:a5:0c:5e:e0:b8:f0:
26:88:32:bb:ed:b0:ea:aa:d1:75:9f:f1:d1:c9:59:55:6e:fa:
2b:24:cd:ba:b8:d8:e6:8c:52:6d:94:9d:77:fd:6a:af:3b:6f:
c0:cd:00:87:e6:52:0e:fe:bf:bb:76:84:22:c0:a2:be:28:9c:
d9:11:e6:2b:a1:bc:d2:56:f4:05:a1:dc:20:c0:3d:4c:93:d4:
7c:1f:ed:aa:86:fa:07:1d:df:d9:34:1e:8e:42:ae:6c:f1:79:
dc:0a:25:0c:9e:a6:f9:1b:4c:3c:33:c6:ce:98:66:1a:f0:90:
0b:7d:04:4e:52:dd:63:a2:24:51:8a:22:c1:ab:e9:f3:e5:3d:
41:86:3c:67:bb:f5:bf:72:ff:c6:9e:a2:d4:b3:c6:a1:af:78:
67:d2:2d:45:07:15:77:b4:32:b7:fe:dd:0e:b8:0c:49:69:ae:
59:07:5e:28:61:f3:c6:32:b3:87:52:80:06:6a:ed:ad:02:09:
01:3c:8f:9b:79:a8:b7:95:6c:b9:f9:f9:0e:70:d4:03:00:68:
57:1c:a5:89:13:c7:eb:2c:6b:01:bb:19:94:64:b9:2e:de:2d:
c8:2e:58:db:6d:3b:61:12:5b:49:3b:db:7e:2d:43:2e:1d:f5:
7c:28:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:32 2026 by rpki-client