Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File: 0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier: p+2nTJI+AjwLARUiOihpybwy4jv/futUOWE7Cuk8oS4=
Subject key identifier: 5C:47:5A:14:AA:EC:AD:E1:AA:30:D1:87:C2:10:54:8D:34:02:6B:75
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer: /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial: 01A0D2DE7B976E8BFC37B0EC78703C7B8072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number: 02E8
Signing time: Thu 24 Sep 2026 10:03:11 +0000
Manifest this update: Thu 24 Sep 2026 10:03:11 +0000
Manifest next update: Fri 25 Sep 2026 10:03:11 +0000
Files and hashes: 1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: oF3BUg3QKQ83pEwHDgpWjZntZtRy2Y0lTZnbLHdkJ9M=)
2: s1Jjt-tBcyKiknkMR9c7tqEPn8Q.asa (hash: /XbNiEDTN73gQoBflBgmdW5BP0chC8iUmBm5htzhbzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:7b:97:6e:8b:fc:37:b0:ec:78:70:3c:7b:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
Validity
Not Before: Sep 24 10:03:11 2026 GMT
Not After : Sep 25 10:03:11 2026 GMT
Subject: CN=5c475a14aaecade1aa30d187c210548d34026b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:c2:d6:b7:36:0c:84:cb:71:e3:2d:4d:9b:
bc:fb:80:cf:1c:9e:39:bc:44:4e:8e:a1:5f:02:81:
f9:26:7e:17:7e:b1:ff:59:be:71:c2:68:5f:28:8e:
f3:ba:15:83:4b:46:27:88:8e:7e:90:91:53:b5:1c:
2a:d8:81:df:17:94:29:31:39:8a:e7:79:b3:0a:c5:
64:8f:04:41:f5:a8:5f:2a:2f:e6:50:ba:ab:1c:10:
92:80:e5:95:61:59:97:90:a8:28:26:36:44:b5:2f:
9f:6c:b2:28:e9:58:12:4c:a9:cf:9d:51:7b:12:37:
dc:8b:18:07:46:b9:5d:51:92:3c:96:d6:04:20:1e:
73:bd:d4:0b:ca:8e:82:f2:26:08:92:1d:03:34:b7:
6f:5c:c9:fe:c0:c4:d8:18:6d:23:d9:2a:87:9b:c2:
7d:46:70:16:0a:0b:56:10:d3:2e:c3:6c:2e:df:23:
5b:c9:c2:0d:82:5a:7f:e7:ef:0f:96:6b:cd:2b:ce:
25:fa:f2:a7:8c:9c:14:b7:0b:12:8f:96:88:fa:e2:
f2:29:1e:15:30:44:ba:1d:75:56:b8:d7:bc:a0:ac:
c4:89:4e:9a:bd:74:23:ce:08:4a:9b:de:46:2d:d2:
ca:67:4a:ea:df:bf:86:19:d0:07:4d:7d:8e:51:89:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:5A:14:AA:EC:AD:E1:AA:30:D1:87:C2:10:54:8D:34:02:6B:75
X509v3 Authority Key Identifier:
keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0c:2c:f2:d2:45:b7:9b:b0:ea:6e:42:ce:bd:b1:5d:2d:81:
98:49:d8:cf:08:17:96:9f:d4:0a:4f:84:6a:75:ff:03:34:12:
1c:76:64:b1:0f:4a:f5:70:49:2b:3c:f0:f7:2f:4a:e0:ce:d3:
47:af:5f:06:da:4b:d8:6b:ed:7b:c3:b4:9c:9e:53:69:da:ad:
fb:40:2c:49:54:e9:b7:93:4a:4e:f1:e7:a6:fd:0f:31:ca:2b:
cc:b1:33:f9:78:c1:24:d8:c0:41:96:7b:c1:2f:f5:1f:9f:40:
88:3b:b3:00:3c:f8:f0:d8:83:fe:c8:f1:0a:68:3b:a6:ed:07:
e8:c0:d8:03:b5:e9:cd:22:d4:84:be:d4:49:8a:ad:c5:4f:c5:
43:24:af:ce:70:89:8e:5f:0e:41:8e:22:da:e2:96:e5:d1:47:
2b:13:11:42:3d:19:7b:ff:19:1e:b6:39:8b:73:52:46:01:74:
72:58:a8:04:d1:7b:bd:25:c8:07:c3:6d:db:46:d7:c6:c3:2e:
ce:33:50:c7:2e:1b:1f:70:8e:46:67:c2:0a:8f:cf:dd:09:f4:
c5:06:65:90:5e:7a:b3:63:7e:19:66:e1:7f:79:3d:38:1b:60:
21:34:7e:20:63:07:53:1c:f8:3a:dc:1a:8f:ec:74:76:1d:37:
1b:28:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:27:27 2026 by rpki-client