Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: q6Kf9DPTiN1+DBXhko2fISYcKXawbDYDuZvL+uYChu8=
Subject key identifier: 6F:16:67:D5:44:FF:E0:B9:48:EC:7E:9B:88:11:37:57:EB:84:2E:BA
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 019E1BD8C98855649C3CE57669CAD628E914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 11:00:52 +0000
Manifest this update: Tue 12 May 2026 11:00:52 +0000
Manifest next update: Wed 13 May 2026 11:00:52 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: ifcbrnVbhlDRKqCkApdYWTmTztCgdOonaffleajD7w0=)
2: X45FUcZNo-YtDvtPWevU4wJ2FEY.roa (hash: rSd13zzClfxZXjpfUKzjtwc06S4fldzcQ0W8TuRXJxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c9:88:55:64:9c:3c:e5:76:69:ca:d6:28:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: May 12 11:00:52 2026 GMT
Not After : May 13 11:00:52 2026 GMT
Subject: CN=6f1667d544ffe0b948ec7e9b88113757eb842eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:89:50:4b:43:72:3d:fa:ee:de:54:af:98:
07:e2:01:4a:41:54:3b:88:0a:0c:cc:d6:fa:9b:33:
5e:e6:3b:59:8b:61:24:d8:e5:5f:0e:a2:4d:85:80:
f8:43:f9:5d:c2:55:60:68:ed:c8:a2:98:db:18:8b:
32:cd:a1:40:7a:6a:ed:a1:46:70:49:88:90:fb:76:
ce:39:52:4d:20:3d:1b:2c:7a:3b:15:f5:0b:98:86:
1e:57:47:77:72:78:83:64:c5:f9:3b:b1:73:02:35:
8e:3b:ce:aa:f6:30:2d:22:bf:f9:a1:aa:13:73:48:
7e:ef:81:3a:c6:fe:93:1f:02:2c:72:6d:94:c9:1b:
7d:5c:a2:26:7d:cc:ab:73:1f:fb:4b:f7:15:19:5f:
8f:75:a0:f8:9b:b5:27:8e:40:45:85:ea:c5:70:cb:
d6:71:9b:49:0b:c2:d9:3e:fa:ec:9d:91:d0:d8:4a:
4a:a8:e6:d6:79:63:5a:42:01:4e:82:1c:8b:59:dc:
78:a3:36:5c:c7:d7:eb:8c:4d:f5:b9:ff:6f:f2:c5:
a3:2f:c7:67:b1:48:29:29:49:51:57:84:64:6f:5a:
1c:04:b8:e3:b2:ad:00:7b:b0:be:33:fb:32:97:57:
49:ca:d0:41:dc:2d:de:3c:a4:bc:76:40:24:ec:c0:
3c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:67:D5:44:FF:E0:B9:48:EC:7E:9B:88:11:37:57:EB:84:2E:BA
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:98:da:98:05:38:1b:65:92:45:25:b7:ec:56:0c:b6:0d:fa:
9b:b7:1b:ec:82:1b:c6:5f:c1:39:4b:e1:6c:cc:d3:cc:fd:46:
91:56:4e:2f:91:5e:73:7e:f4:89:2a:05:2a:95:66:1c:64:a3:
42:1f:e2:84:83:e4:39:12:8d:af:6f:e7:59:aa:db:54:70:a8:
21:3d:f3:ec:78:3a:13:4a:ac:5c:02:0d:c8:a8:15:11:47:95:
4a:3f:ee:b6:5f:ce:76:be:e5:b5:c0:5f:c9:d7:ae:ac:44:0e:
27:78:ca:3b:a4:57:bb:2b:0c:66:ac:fe:f8:1e:4e:18:e4:7a:
9d:31:df:da:09:93:b9:77:ac:49:1d:81:30:65:75:98:49:3e:
8c:28:3a:7c:ee:66:4d:34:5d:76:8b:7c:05:b8:2d:eb:f8:89:
ec:d8:af:ad:2a:e7:96:73:f1:9c:7d:6c:68:df:94:3f:8f:4f:
bd:3e:b0:e1:63:8c:4b:77:45:2f:9c:cf:d7:47:06:3d:ca:a8:
2e:2f:47:5a:3a:98:65:a1:c5:a9:20:87:77:3d:17:7c:e0:4f:
64:6d:73:db:cc:78:85:80:b2:73:55:48:4d:79:75:23:56:1d:
d8:1c:34:51:3c:b9:96:b8:6f:aa:4b:41:ac:92:51:a9:ba:16:
4e:75:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:49 2026 by rpki-client