Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: pBBs4I+1PJVxJpgTYHWN7Vw4DYUaviajv3mTnWBHQLk=
Subject key identifier: D8:8A:45:9B:B6:3E:D0:97:96:71:E7:1E:38:15:AD:35:BD:DA:E3:2C
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 01A0E6D2D42292DFD5B6B487E51CB5AA2F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 1A7E
Signing time: Mon 28 Sep 2026 07:02:51 +0000
Manifest this update: Mon 28 Sep 2026 07:02:51 +0000
Manifest next update: Tue 29 Sep 2026 07:02:51 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: KtZcd3YihwYe2W33uWo1kBiHW4ckRATyJFtQiTcKXss=)
2: QcwY7QRBfg0U1vYTD3tEyK1tCIk.roa (hash: C8EnG7j+HGwDjJjN4fPZ3xTluNmlPd7Cuxa75PRIy0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d2:d4:22:92:df:d5:b6:b4:87:e5:1c:b5:aa:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Sep 28 07:02:51 2026 GMT
Not After : Sep 29 07:02:51 2026 GMT
Subject: CN=d88a459bb63ed0979671e71e3815ad35bddae32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:d8:57:54:7b:bb:3e:92:77:08:96:32:09:
a9:e4:16:2c:54:8f:81:b8:8f:fa:65:b5:42:3a:0d:
5b:6b:46:29:fa:a4:2c:3f:84:9e:30:6b:9b:d3:01:
33:aa:4c:aa:11:0e:ef:58:e1:22:a3:ee:ee:66:be:
89:60:aa:05:9b:53:fb:08:06:36:76:48:76:79:71:
d6:f5:45:b9:20:a2:74:08:f6:ec:66:36:2d:80:08:
5d:37:48:32:cb:d6:80:46:f5:a0:d2:34:02:87:c2:
c5:5c:18:e4:71:a7:ac:2c:ad:3a:f1:85:44:7d:a8:
1a:2d:a2:33:a5:d2:e9:d4:4c:0f:cc:b0:8e:cb:63:
7b:ef:9f:01:b0:60:c4:97:53:52:6c:8e:52:1f:66:
f9:89:8d:1b:1e:ae:16:4f:31:50:88:f7:3f:b0:dd:
7e:f8:4b:20:aa:4c:8b:58:aa:0a:35:07:6c:e5:0b:
48:ec:36:da:6b:99:18:8e:3a:7a:0c:8e:5a:05:b6:
ce:b3:50:92:c7:fd:cb:a6:cf:0e:ad:79:e5:2d:55:
0e:e4:00:4d:9d:2a:74:68:31:bf:83:e6:6f:34:54:
85:96:5b:a2:75:35:55:9e:5c:55:6f:d5:d5:ea:a9:
9f:c7:b1:8b:14:e5:b0:e5:2d:a1:bc:95:9f:1a:a6:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8A:45:9B:B6:3E:D0:97:96:71:E7:1E:38:15:AD:35:BD:DA:E3:2C
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d1:65:63:d3:a8:f7:c6:21:32:8e:67:8d:3a:38:16:01:4b:
9a:86:80:ed:b6:fb:c1:3f:85:3d:15:dc:d0:95:7b:7e:62:2d:
99:6b:bc:de:d7:0e:53:67:34:04:5e:18:62:c1:ab:a8:f2:d8:
eb:d6:25:b7:f7:03:62:ee:9c:6f:64:0b:a0:70:33:01:87:0a:
68:fc:9f:76:da:0e:72:88:dd:b0:0d:c2:2d:70:81:53:67:7a:
95:22:0f:97:27:b6:19:bb:5d:00:eb:df:69:be:fe:c7:04:33:
76:d1:e6:eb:5e:42:2d:fd:f8:1e:eb:2e:d0:86:08:a2:a3:a1:
05:39:71:6f:63:8c:44:39:1a:d4:03:68:ba:06:fc:ba:16:42:
0b:8a:18:33:a9:b8:1e:30:94:cb:84:8b:b2:38:05:b3:49:af:
66:7b:d9:d4:42:62:bd:d7:69:25:71:4b:2b:b5:42:e5:b3:cd:
f8:9f:03:d6:61:5f:05:52:6e:9f:b1:6e:d1:85:9c:e5:5b:06:
15:2c:32:01:45:d6:b1:96:80:94:ae:29:6e:26:e9:c1:16:0b:
ba:8c:bd:88:f5:65:10:bc:a6:7a:9b:ec:f6:bd:fa:20:96:09:
ed:d6:a3:36:07:8b:f5:4b:0f:84:3f:85:66:0a:a3:19:6b:ea:
43:7c:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:40:29 2026 by rpki-client