Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
File: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft (raw, json)
Hash identifier: vvyc1wU/ga/itn7ubSUZLSKmunsh7JNeIo2Ww1lgxwc=
Subject key identifier: 34:ED:31:21:D8:75:37:ED:54:85:AC:C7:3C:5B:79:80:C6:B0:36:DF
Authority key identifier: D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
Certificate issuer: /CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Certificate serial: 01A0CAB4AF8826F46853B65E97A2B7FDF4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
Manifest number: BD
Signing time: Tue 22 Sep 2026 20:00:34 +0000
Manifest this update: Tue 22 Sep 2026 20:00:34 +0000
Manifest next update: Wed 23 Sep 2026 20:00:34 +0000
Files and hashes: 1: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl (hash: xMYe2qDzdpJiVqslarhhkXhoVoumHHqacqQ4tBgqlNQ=)
2: 4eTqXPsY2k0nfIKnegQTKL9VsZc.roa (hash: J2j96Igp+h3cc2jy3MZ29Vf0gTNVfHTR+h+cL3q6LnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:af:88:26:f4:68:53:b6:5e:97:a2:b7:fd:f4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Validity
Not Before: Sep 22 20:00:34 2026 GMT
Not After : Sep 23 20:00:34 2026 GMT
Subject: CN=34ed3121d87537ed5485acc73c5b7980c6b036df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:11:c8:a2:99:75:82:fc:62:e4:45:c6:d4:
3a:bc:4f:e1:54:52:d7:f6:45:42:50:ac:89:ba:62:
b0:2e:8c:4a:28:eb:8a:88:5b:84:6f:7c:89:bf:06:
4d:a3:c7:c2:18:b8:95:78:e2:aa:ed:de:01:91:1a:
3d:91:59:26:1c:99:21:e8:67:9b:e9:0a:cd:5a:45:
48:be:40:4a:6a:3d:1d:c4:6f:9f:90:6d:18:3f:2d:
81:9e:97:7d:e7:a7:9f:c9:f5:4f:91:b8:10:86:8a:
6e:af:5f:57:89:c9:43:89:18:f6:ad:a2:9b:18:48:
fe:b3:df:00:bf:f3:89:a4:e8:b7:6e:c6:b5:17:60:
90:18:d5:79:d8:02:82:e1:a8:21:74:a9:c4:f3:73:
c0:cd:d5:83:ae:ac:7a:2b:5e:78:e6:d6:97:1c:72:
b9:32:07:de:40:0f:58:53:cd:bc:14:34:71:39:ed:
c2:4a:3c:44:42:49:d3:8c:04:6e:27:35:01:d1:e4:
fc:8d:53:35:61:9b:7f:fc:ca:8b:89:b4:07:01:3a:
a6:02:22:9a:11:38:83:94:ce:98:06:fe:78:4d:b8:
4f:ef:6b:27:61:ca:08:ea:80:a7:2b:76:97:01:b4:
d5:e6:1e:b2:2c:be:78:a2:8b:99:6e:c0:86:56:7a:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:ED:31:21:D8:75:37:ED:54:85:AC:C7:3C:5B:79:80:C6:B0:36:DF
X509v3 Authority Key Identifier:
keyid:D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d0:dc:a3:c5:6e:ad:56:4d:58:3d:6e:dc:8e:9a:05:9f:29:
73:bf:35:8b:a5:9f:ef:42:18:ba:95:f2:ab:c7:c3:1f:35:e2:
0d:47:ef:26:95:96:da:bc:9b:19:f8:eb:6e:18:e1:55:07:b3:
d7:74:e8:b4:e5:cb:2c:63:98:e0:2a:52:13:ae:26:52:3f:a9:
86:49:21:85:b7:c3:c4:b8:58:0f:0d:f1:c3:c3:ef:82:a3:f0:
ec:e6:2d:4d:7d:a3:30:58:20:f6:e4:fe:68:50:30:94:d1:87:
3a:be:83:8f:a1:d6:d9:0d:f4:11:53:56:a0:65:62:61:59:dd:
d1:35:7e:b1:75:b4:df:0d:e4:f0:16:4a:82:f9:75:6e:16:03:
cb:51:8c:e4:30:95:c3:8a:5d:74:cb:3e:c0:46:7a:27:32:84:
17:4b:ea:56:07:68:1f:e0:b4:53:40:88:c5:60:b1:f9:f1:01:
50:d8:6d:28:3e:73:3d:fb:38:5d:18:4a:c3:06:c6:df:8d:56:
9d:8d:a4:32:08:38:ac:6f:4a:30:e9:bb:79:1d:ae:2c:c5:49:
57:23:cf:54:bd:0a:f2:9a:3e:f1:c0:46:4c:e9:70:f9:b8:a0:
2d:1a:49:37:23:dc:25:dc:2e:0a:92:e5:72:62:e1:62:d9:ac:
f3:60:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:48:22 2026 by rpki-client