Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: l8oms7mtLK00uD/6xj/y56TzwQhonGYTls66qh2L95Q=
Subject key identifier: 0C:B6:A3:B6:68:2B:E0:99:C0:E0:C4:DC:46:BE:6E:CC:36:5C:AE:4C
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 01A0F78E45BCA218C7E1060605F54801E097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 168F
Signing time: Thu 01 Oct 2026 13:01:31 +0000
Manifest this update: Thu 01 Oct 2026 13:01:31 +0000
Manifest next update: Fri 02 Oct 2026 13:01:31 +0000
Files and hashes: 1: 3UgaGbZGGFfjB7sq8z7R6V-NiDY.roa (hash: e/q2ZKMuya72WNv5B5kUE91L0olkeZByYdU0k2qDJHo=)
2: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: eBl1JJMVe0hAS6y/4iqE6N/RbZSVJzADIFzdOZuZqgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8e:45:bc:a2:18:c7:e1:06:06:05:f5:48:01:e0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Oct 1 13:01:31 2026 GMT
Not After : Oct 2 13:01:31 2026 GMT
Subject: CN=0cb6a3b6682be099c0e0c4dc46be6ecc365cae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:e7:9c:7e:ef:f9:51:7e:68:8c:5d:49:64:
da:b8:64:a3:0e:05:20:ec:1b:fa:fd:54:15:d1:df:
82:5b:e8:52:55:4c:6b:dc:b8:79:d5:5d:7d:f0:e6:
12:83:e3:8e:1e:b2:e6:9c:40:1c:33:f8:17:bd:8c:
92:10:99:7b:c3:82:c4:11:ed:14:03:17:d6:9d:ce:
a4:bd:24:d8:88:66:4a:54:2f:12:24:50:cb:f3:69:
79:19:fe:5f:1e:5b:98:26:2a:e4:97:d8:a1:fb:e8:
fe:bc:f1:fd:fc:a8:69:fa:cd:b8:95:dc:a3:3e:af:
57:01:99:d1:68:9d:2e:83:69:96:c3:20:7a:eb:90:
ce:b8:79:ff:51:de:59:c6:88:d9:68:4e:00:6a:9f:
fe:ec:52:fa:e4:e7:1d:d0:f4:e5:37:da:c2:50:72:
f0:0d:3a:ec:fc:38:a4:ec:33:5b:83:fb:05:72:77:
6c:a0:9e:12:50:80:60:97:5c:eb:8e:16:8f:f5:1d:
87:26:3f:7f:e1:f7:24:2a:b5:bf:3e:f2:ea:dc:20:
72:eb:0f:4f:f5:e0:53:7a:65:14:e6:b6:a5:17:b9:
cb:1d:ea:9a:60:1b:22:3f:64:20:34:41:62:35:37:
60:05:b1:a0:b0:e9:73:e9:e3:12:07:52:0d:17:2b:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:A3:B6:68:2B:E0:99:C0:E0:C4:DC:46:BE:6E:CC:36:5C:AE:4C
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3a:cb:a3:5d:96:ac:fe:39:1d:85:76:d9:c0:ae:22:bc:00:
7a:ae:65:6e:7c:db:91:85:53:a2:78:e3:ef:b3:80:1b:cf:57:
3d:49:04:b4:50:3d:c5:61:7c:e7:17:50:6f:0a:12:69:e4:70:
46:10:7e:67:69:26:ea:c6:38:3c:1e:57:af:0f:3d:33:cd:ac:
1e:f0:4f:c8:f0:a4:b4:d4:b5:6c:64:8a:fe:44:56:c0:1a:b2:
5e:bd:24:69:02:04:3a:89:85:dd:ea:a5:d8:94:df:63:7d:f9:
9f:60:b2:e3:82:75:d5:0d:39:67:ba:8a:eb:de:2d:63:64:f0:
db:ce:8f:9d:87:c2:5b:3b:9a:12:b1:a2:9b:e1:00:0e:96:1f:
e5:e6:5d:94:96:dd:91:5c:a2:71:bc:3d:d3:35:83:12:b9:79:
5b:af:76:da:5e:01:02:d3:47:95:44:5f:ca:77:e5:fe:4f:1f:
7f:91:eb:2c:27:a3:52:15:e9:07:f7:26:59:6e:f6:cb:8f:d5:
a2:ec:bf:89:58:a5:ab:1a:8f:f6:e9:8b:2f:5b:48:84:5b:12:
2b:4e:55:92:04:47:9a:f8:5e:bc:3a:81:75:02:ff:78:60:62:
d2:ff:b2:ef:72:ca:e9:1b:e5:3e:a9:f6:1b:28:fa:8c:f5:0c:
89:75:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 20:40:55 2026 by rpki-client