Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: debm9pMCde1fo0A/0pO5OcoIfy+BsZIGlObFHv8HzH0=
Subject key identifier: CA:96:93:84:79:44:A2:60:0C:69:11:14:99:1F:71:31:39:38:62:CD
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 01A0DBA8F5615240B128C3EE2645172D13C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 06CD
Signing time: Sat 26 Sep 2026 03:01:18 +0000
Manifest this update: Sat 26 Sep 2026 03:01:18 +0000
Manifest next update: Sun 27 Sep 2026 03:01:18 +0000
Files and hashes: 1: Mw3ACAhcMDXBuRq_X19P75n7CqI.roa (hash: 0uTqpS4C1XoKrdQcU5VVh2z78vf6LmyT+JyUmMpcNqg=)
2: dw0pzmkTaZts4fybHtDLSMI8pwU.roa (hash: POq13Xf4ByDXuaJoDtQFN2IdIJQyKKVS8tZJvFhZ98Q=)
3: pgBIs-3GoZthMmbw9U-r3itRgXQ.roa (hash: +p2wOZUmpgnrYwvX+umOGcelDbIr/AvBcaa1sjakkaA=)
4: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: /XJHpRWU6HpSgt20GNDdS4tPlmsoikqOWe+agTxZ76Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:f5:61:52:40:b1:28:c3:ee:26:45:17:2d:13:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Sep 26 03:01:18 2026 GMT
Not After : Sep 27 03:01:18 2026 GMT
Subject: CN=ca9693847944a2600c691114991f7131393862cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:ed:71:00:48:c5:68:0d:6a:8c:2b:11:35:
ae:13:2c:49:4a:bf:7c:00:8c:aa:36:4b:26:e1:a1:
92:80:9b:42:55:46:ff:87:23:6a:d8:a9:06:77:07:
6b:f8:ff:c4:62:2a:24:bb:61:c4:a3:d1:0e:b0:35:
e0:b9:2e:0b:9e:b9:1c:16:7f:ab:ac:c0:d1:bb:31:
a1:4b:d0:a0:7f:91:3f:ff:ef:a6:c8:46:9f:79:bc:
2f:1a:1b:81:ff:6b:ce:1f:e4:7e:df:3e:89:c0:bf:
00:71:9c:40:36:0d:fa:98:ba:27:20:f7:ed:0c:27:
da:b4:c7:65:25:aa:09:5b:4c:c7:4e:33:40:ff:2b:
6d:a1:ad:20:26:3b:b6:51:cd:57:70:ec:28:13:2c:
02:33:97:e3:46:b4:a7:d6:b4:b5:f3:6a:9c:52:fe:
2b:a9:02:be:b4:e1:db:e9:cc:fa:26:37:77:35:60:
81:0e:14:9d:35:95:c4:61:bd:c8:18:8b:1b:01:13:
7e:52:ed:f0:9c:98:e0:a7:30:ee:f1:db:27:1f:bd:
04:e0:68:9d:0c:73:a1:05:ed:00:1f:1d:de:9c:04:
c7:fa:56:31:6e:45:c7:c1:db:73:fa:4a:8d:cd:41:
4b:e4:fd:a1:d6:34:22:f3:1e:9c:02:8c:83:56:2a:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:96:93:84:79:44:A2:60:0C:69:11:14:99:1F:71:31:39:38:62:CD
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:ca:e0:bc:e3:77:be:af:18:d3:5f:91:89:d7:af:7c:0e:
ab:d4:be:9d:ff:7c:ef:fa:ee:d5:ba:c6:cc:6e:2d:01:06:58:
57:82:1d:70:30:d9:95:b9:d0:ca:e9:b2:7b:83:72:5e:60:b1:
0d:db:cc:f6:cc:78:ec:72:49:58:af:96:cc:79:c2:66:e3:79:
d6:b2:6a:35:7d:73:70:30:a1:1d:94:6e:41:1b:0c:b3:6a:2d:
8e:0e:dc:23:71:8f:26:05:ee:54:ae:0f:51:d3:27:3e:2c:4e:
91:74:e4:92:9d:1c:39:33:24:2e:41:8f:02:95:3b:c5:f5:6e:
37:49:6b:26:b2:7b:01:73:90:51:41:3a:57:66:a6:bd:9e:78:
3d:84:33:c4:2b:95:c7:10:ae:93:94:07:ad:5c:98:3a:89:13:
1b:7b:ef:99:f3:77:e3:2c:37:1e:f5:aa:09:29:98:16:bc:8e:
6a:41:10:55:81:71:d8:f7:c7:b9:77:fd:99:f8:09:37:81:32:
37:8a:c4:10:dc:a9:0f:41:e6:42:10:20:6d:ef:47:a3:7b:5d:
e2:73:96:1d:d8:d0:ae:6d:ba:74:24:17:e9:65:12:e4:3a:38:
b9:f7:b5:b6:45:aa:6d:fa:30:41:14:64:b2:f2:64:61:88:a9:
b6:53:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:48:05 2026 by rpki-client