Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: 3ej7WwHdXKbnJZM5IPBwBB5m+1daar6WTpqbQJMJJRI=
Subject key identifier: 85:E0:77:18:12:C9:EF:6C:48:46:9F:25:B6:40:26:F1:C6:4A:F9:6D
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 019D29CE72DC8660CFA8A784223641FC83AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0FE4
Signing time: Thu 26 Mar 2026 11:01:28 +0000
Manifest this update: Thu 26 Mar 2026 11:01:28 +0000
Manifest next update: Fri 27 Mar 2026 11:01:28 +0000
Files and hashes: 1: 1-9nncl2Rz3YTcRI0RsbvVm3atY8.roa (hash: fiUr+kWvE5jBfhGIbu/5gFTDAF5L/xbwDDasP7mBO+8=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: ZKoq5oDnEUEIuOlg34UiCiz1eqIkVBUowzrd+MY9pig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:72:dc:86:60:cf:a8:a7:84:22:36:41:fc:83:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Mar 26 11:01:28 2026 GMT
Not After : Mar 27 11:01:28 2026 GMT
Subject: CN=85e0771812c9ef6c48469f25b64026f1c64af96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:cf:5f:66:97:38:c4:4b:17:a2:b8:ce:d1:
e5:79:b4:6e:da:1a:8d:f6:29:f4:31:02:00:27:3a:
fe:7b:16:a6:5a:88:98:5f:4b:de:99:4f:7a:df:92:
bc:aa:15:0e:09:ff:99:4f:77:4d:bb:58:a2:48:2d:
c7:44:fe:49:2b:d1:c6:06:fc:4a:cd:09:99:94:1e:
a4:66:2a:b9:58:1b:e9:77:03:0a:62:78:db:7d:39:
2e:eb:92:5a:65:ae:87:ab:a7:b0:71:fe:d4:79:cc:
87:ef:4b:d3:7d:2e:16:98:5a:8e:c7:28:77:e9:f3:
40:a2:45:91:1d:dc:eb:11:1e:7f:cf:bb:ec:d5:c0:
71:20:e4:2c:c5:de:5a:a8:d5:36:96:d5:f3:70:d1:
dd:c7:ed:f9:5d:a0:f2:d8:7d:f7:b7:8c:e9:e5:66:
6f:3c:f6:a8:5d:40:76:1e:f9:c3:f4:f5:26:1d:95:
ee:1f:4a:87:5e:93:ee:14:d3:0f:05:5a:9b:be:73:
5c:65:97:a9:43:92:52:2f:94:65:ff:e6:7e:6f:dd:
bb:82:47:5f:47:9c:98:fc:19:5d:c5:53:da:89:07:
de:2a:e0:49:24:88:e5:79:d6:a2:30:fb:f1:d4:f6:
a0:f7:d2:ce:89:52:42:b8:40:3d:63:71:9e:0f:df:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E0:77:18:12:C9:EF:6C:48:46:9F:25:B6:40:26:F1:C6:4A:F9:6D
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ec:59:e5:2c:d8:42:3b:28:dc:ee:42:4c:30:e8:77:af:de:
c9:bb:d0:63:62:01:10:7b:78:57:6c:2a:bc:95:02:6a:24:a1:
99:ad:3a:e9:41:10:9b:23:9a:15:cc:54:83:8d:98:b9:b2:b2:
89:0b:08:c5:36:07:05:a7:70:18:a1:21:fb:0e:8b:76:67:89:
33:e0:76:7c:34:64:0b:39:b6:38:03:a5:00:7e:a2:4d:bc:e2:
e5:f2:0b:e6:e1:b7:c8:22:ed:56:20:01:21:a5:c2:a1:14:86:
01:08:d7:2f:ad:c1:e5:c1:c6:13:83:4d:de:6f:82:9f:c4:20:
2d:eb:3b:f3:15:a8:9d:9d:af:8d:01:a2:b0:8c:d4:13:3e:dc:
18:22:1f:51:12:22:30:5f:3a:21:1c:0b:33:24:45:a4:a2:bc:
03:33:62:da:b1:9d:44:45:78:a9:36:4c:96:b4:d3:77:59:bf:
9a:f7:df:53:0e:05:81:c7:86:ac:5d:7d:5d:57:6a:3b:02:f2:
d8:cb:c3:7c:54:99:31:e6:0d:cd:a4:49:3b:ea:36:7a:4b:a0:
43:62:7c:8f:4e:15:0a:c5:df:bf:bd:1c:3c:44:27:cb:d0:10:
fe:81:ce:3d:3a:33:fb:58:39:14:a1:14:38:5b:97:55:d1:10:
6b:5d:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:48 2026 by rpki-client