Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: G5A/iNhMryPNyWN1NKGeggGA/hlYsCAuF+h3kjvozZI=
Subject key identifier: AE:19:2C:CD:38:9B:A7:B5:0A:82:BB:58:90:DF:37:00:65:64:8F:93
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 019D2A7270BA8221A333FF571460E399DAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 14:00:36 +0000
Manifest this update: Thu 26 Mar 2026 14:00:36 +0000
Manifest next update: Fri 27 Mar 2026 14:00:36 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: ryiONxnkeW2fViTBB+drs8KF2SRidBL3AgZSSfoanE0=)
2: X45FUcZNo-YtDvtPWevU4wJ2FEY.roa (hash: rSd13zzClfxZXjpfUKzjtwc06S4fldzcQ0W8TuRXJxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:70:ba:82:21:a3:33:ff:57:14:60:e3:99:da:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Mar 26 14:00:36 2026 GMT
Not After : Mar 27 14:00:36 2026 GMT
Subject: CN=ae192ccd389ba7b50a82bb5890df370065648f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:12:1b:8a:1b:2c:d4:6f:97:dd:b3:fb:6b:
7d:73:61:a5:b5:aa:24:68:33:84:89:66:6d:45:e4:
a3:b8:cf:75:4d:23:a9:a0:47:92:22:8d:7c:01:f3:
da:fe:e8:6e:fd:2f:51:80:68:0a:9e:be:77:bd:13:
07:02:05:22:51:38:8f:b3:a4:c0:0e:b4:87:91:41:
ee:7b:24:37:47:56:6e:bb:9c:f1:39:0e:2a:67:41:
1d:59:f2:58:92:23:a5:f4:37:c2:37:20:b2:c7:4d:
1d:a9:ab:92:23:8c:77:4a:c6:e8:54:9a:54:61:de:
69:52:7a:9b:b0:7f:01:bd:ef:2a:7b:f0:09:81:9c:
81:86:15:a4:d8:c5:b5:b1:3c:0d:82:b0:31:17:06:
b2:6e:a0:97:fb:24:f8:9a:cb:9d:51:1a:cf:73:a9:
ed:c6:20:6c:d6:16:b9:0a:35:97:f2:43:7c:e0:b1:
f6:0e:1b:59:c6:03:14:27:df:14:bb:97:10:46:cd:
e3:da:ef:cc:63:4f:e9:8e:db:86:5b:fb:ac:8a:f5:
1e:fa:11:88:3a:d5:e6:03:de:af:19:2b:2d:5a:a8:
fe:3a:ba:8a:46:8b:78:e5:fd:77:5e:31:c5:04:b5:
ff:ba:48:94:8a:85:a5:6b:60:3a:30:85:05:f8:8e:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:2C:CD:38:9B:A7:B5:0A:82:BB:58:90:DF:37:00:65:64:8F:93
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:db:86:9c:e1:1d:6f:1f:36:72:49:e3:db:be:65:58:32:0f:
36:f3:f0:eb:dc:99:96:9b:80:14:72:02:90:e0:8a:54:84:d1:
7b:f7:55:5e:d0:1b:4a:84:59:43:71:51:89:fa:e3:4a:89:d7:
f0:b5:2d:dc:0a:3a:d0:7d:73:77:35:20:86:0d:bf:85:10:5f:
87:4d:8f:7f:d9:da:90:53:a4:38:08:8a:40:4b:6e:e2:c2:b9:
35:33:64:28:12:e4:75:5d:9a:97:b9:21:6b:c1:3d:d1:f5:5d:
7e:6d:9a:9f:15:66:b5:ac:69:3f:c7:e3:30:5e:5d:66:f9:0d:
23:b3:f3:75:06:e1:ef:0a:f0:3d:79:d5:eb:f1:cb:c5:41:02:
f6:80:c1:b6:f9:d0:79:6e:8b:b1:43:ce:6e:73:93:87:e9:d4:
39:6c:d6:6e:58:ad:35:ef:66:90:70:c2:5b:3a:a4:f8:56:ea:
46:d9:d7:2c:55:d0:ac:ae:36:9a:6b:be:67:de:c8:b6:dd:e1:
9e:e3:5d:9e:9f:6e:e2:9f:31:c6:b0:fa:37:6a:ec:bc:bc:31:
5c:b0:97:aa:cd:db:36:c9:c2:3d:8f:6e:f2:42:55:98:59:28:
9b:0d:d0:be:e7:15:4b:cf:a4:f0:e1:87:44:95:9e:b6:68:9e:
1d:88:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:47 2026 by rpki-client