Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: qm9KQRffFNrPEUJbVofHGcoAFixNyCwd0d5A3vSEPfs=
Subject key identifier: 13:38:6B:FE:9C:33:88:DE:05:30:E3:F8:BF:07:22:B7:3B:97:40:BD
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 019F96CA47DC5DEE465F47C89DA6BFC0B3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 19D0
Signing time: Sat 25 Jul 2026 01:01:06 +0000
Manifest this update: Sat 25 Jul 2026 01:01:06 +0000
Manifest next update: Sun 26 Jul 2026 01:01:06 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: ZA+upEQ+FNAbSyrKeAko4rhrBTCO6U3k0jBh2M8HKy8=)
2: QcwY7QRBfg0U1vYTD3tEyK1tCIk.roa (hash: C8EnG7j+HGwDjJjN4fPZ3xTluNmlPd7Cuxa75PRIy0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:ca:47:dc:5d:ee:46:5f:47:c8:9d:a6:bf:c0:b3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jul 25 01:01:06 2026 GMT
Not After : Jul 26 01:01:06 2026 GMT
Subject: CN=13386bfe9c3388de0530e3f8bf0722b73b9740bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:80:e9:ed:de:c9:ab:9e:24:ef:56:ab:ee:
e6:5f:d1:1c:3f:52:6f:8d:dd:51:f0:57:00:0c:af:
94:7f:55:3b:93:22:1d:2e:ef:bb:ad:f3:b2:91:da:
6f:48:14:e7:7a:6e:ea:f1:e3:4c:13:a1:ee:35:37:
85:ed:f8:bc:b8:46:c1:05:86:a4:8c:f8:3e:a0:04:
0c:43:ec:84:1e:55:e6:79:5c:67:b1:17:2e:ce:f4:
f5:d9:37:08:fd:7e:4f:4e:c2:bb:7f:09:00:9f:9c:
f5:51:b8:ff:8b:c4:d1:b2:64:31:14:8c:f6:fc:9c:
5f:e6:31:2d:df:ef:0c:55:28:eb:f6:5c:13:91:c3:
88:4c:51:2b:e2:6f:cf:82:76:48:67:a3:82:2e:37:
db:aa:79:2a:d5:d0:03:a4:45:bd:96:30:32:3e:ad:
ca:1a:fe:97:5d:93:81:18:f6:64:5e:08:9a:af:ce:
5c:fe:53:88:8d:9d:6b:d5:54:26:09:ae:9b:00:68:
4e:d6:8c:75:31:ba:dc:32:d2:1b:2b:10:f8:d0:80:
5b:54:94:c4:54:22:f1:85:f7:e2:d2:7e:57:68:3b:
42:41:b3:a9:e2:25:fa:f2:18:36:0f:3a:24:7f:a4:
48:f5:c8:76:3d:b4:95:a4:8d:7e:a7:f6:bb:c0:31:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:38:6B:FE:9C:33:88:DE:05:30:E3:F8:BF:07:22:B7:3B:97:40:BD
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:26:22:6c:80:39:b4:82:e4:35:6e:98:40:04:46:f0:9d:50:
24:dd:fc:57:f2:20:fb:68:f4:b6:7e:fe:8f:1b:01:53:9a:c9:
dc:44:30:13:d0:f4:ca:ff:ef:8b:42:89:be:61:28:88:ce:3c:
c1:09:ac:8b:16:93:93:a0:a8:cd:7d:a1:8c:38:af:9f:50:7c:
b1:26:89:fb:2d:bb:d9:5d:94:c8:52:9d:b9:86:20:76:c4:1e:
e5:ef:25:98:4b:23:93:c0:f2:7b:f0:38:5d:a1:d7:99:39:9f:
c2:44:da:34:b2:c6:17:ea:bf:39:cd:73:46:ce:13:16:e4:3d:
d7:5b:81:d9:33:ce:0d:50:c7:60:f0:05:87:1b:39:21:ac:e3:
fb:1f:b9:6a:20:82:3a:b8:55:ef:5c:87:0e:85:a2:2c:c7:c0:
f9:b6:fb:ba:54:22:14:4b:7c:6b:ef:f5:9d:c4:87:14:fe:d4:
cd:06:6e:67:62:a1:27:e7:12:9a:3a:27:9b:6b:fe:7c:f8:6d:
19:d6:34:66:96:ad:50:4d:b0:3a:8d:b5:49:28:65:83:bb:0d:
c1:2f:f4:ff:37:b5:95:d7:9a:6f:b2:1d:72:3c:e6:4b:7e:6c:
75:9a:a9:cc:a8:e8:eb:b8:e0:69:55:de:69:45:ff:1f:d0:88:
5f:62:b1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:42:00 2026 by rpki-client