Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File: 0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier: JL3Jn2qlmiFiMcJKvZtBTVp57I0nqowNZaJ6lt9lhp4=
Subject key identifier: 90:43:B9:DD:BD:27:C3:CB:0C:61:7D:5D:57:B9:CC:1E:A2:1E:D8:91
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer: /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial: 019D254C3D36D3E86307B3D9AFBBF12FD3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number: FF
Signing time: Wed 25 Mar 2026 14:00:46 +0000
Manifest this update: Wed 25 Mar 2026 14:00:46 +0000
Manifest next update: Thu 26 Mar 2026 14:00:46 +0000
Files and hashes: 1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: Ra/ChavFnh1sCs/ttYVeLewTGJdBrqbeTWw1//8L1b4=)
2: IepspGCwPLMLBPzsExkQzO4QbNY.asa (hash: 8W3LBKMDCnMT8UFQAj2NhlyNWtdNB7dBnh/RCWdde2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:3d:36:d3:e8:63:07:b3:d9:af:bb:f1:2f:d3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
Validity
Not Before: Mar 25 14:00:46 2026 GMT
Not After : Mar 26 14:00:46 2026 GMT
Subject: CN=9043b9ddbd27c3cb0c617d5d57b9cc1ea21ed891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:c3:73:c9:c6:89:24:79:c8:07:fc:3e:dd:
5b:9d:92:75:03:e8:23:64:8e:75:c6:e4:b6:19:39:
02:38:05:65:76:0b:d2:1d:11:e3:33:fa:07:99:f5:
12:0b:7c:94:88:11:78:af:14:40:1d:26:56:00:76:
72:4d:03:ee:56:ea:f5:61:20:b3:06:e9:27:19:18:
2f:21:9b:94:39:ec:76:00:d6:e5:66:1b:ec:4b:b5:
6f:58:6f:a7:80:cc:2b:98:96:d7:69:f3:48:71:1b:
4c:36:3b:fd:71:d8:87:94:d4:9c:27:31:b0:35:8f:
09:5f:ed:0c:6f:73:f7:69:36:1f:e1:48:56:8a:32:
85:45:34:52:60:24:6e:64:86:b7:f2:c3:b5:86:5b:
cc:6d:2e:cf:d8:32:ad:c1:b8:e7:13:fa:32:6b:30:
ed:f3:63:9b:5a:dc:85:e7:df:02:8a:fe:c6:d8:f5:
1b:fb:5f:f8:d9:01:88:69:8e:d3:00:be:97:81:6f:
01:02:ba:e4:7d:3e:9f:d0:66:9b:32:f2:22:1c:61:
6d:45:fc:5e:9c:92:69:47:8e:9b:26:1d:c2:37:3e:
f6:7e:c7:48:24:d0:a0:ac:41:89:f2:46:63:51:12:
32:b5:00:87:1e:57:97:02:b2:ab:41:3a:0c:7c:a5:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:B9:DD:BD:27:C3:CB:0C:61:7D:5D:57:B9:CC:1E:A2:1E:D8:91
X509v3 Authority Key Identifier:
keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:83:63:22:7a:a1:97:6c:64:0e:eb:9c:23:47:0a:3b:6a:
9f:18:85:e3:69:68:52:2f:ba:6a:0a:47:5c:51:fb:b7:9a:9d:
e7:58:30:41:27:92:92:3a:81:37:ef:11:bc:06:10:01:63:fe:
f3:18:ea:9b:b0:f0:af:f8:ce:0f:6d:38:4a:01:d0:f2:15:c7:
fd:e0:88:23:22:6e:c0:0d:e3:25:77:27:7b:de:a3:ed:3f:72:
18:1e:a8:ad:3d:6b:f6:84:8e:27:d4:c2:44:43:97:14:7c:14:
f9:f3:40:16:56:15:23:a3:63:5d:9c:11:84:03:44:3c:06:74:
50:e6:a9:c4:6d:75:63:93:a6:49:a2:8a:fa:34:4a:2b:3a:59:
29:30:35:ab:65:ba:a5:e9:55:07:d2:a3:b5:87:4e:d5:52:e7:
99:99:81:18:b6:c5:8f:2c:24:93:c8:ef:c0:10:87:6f:61:3c:
40:46:51:e7:03:a2:9c:87:e6:12:53:77:5f:62:97:34:dd:d1:
39:7f:f8:c4:d1:84:ea:0e:2f:88:1d:a2:95:b5:e3:43:66:94:
c0:c0:cc:e6:11:db:38:ca:3b:9f:d2:37:70:47:09:1e:1e:bb:
07:86:20:47:3c:0a:61:a4:d3:1d:e6:2d:80:35:0e:e6:5d:8f:
5a:e2:2f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:58 2026 by rpki-client