Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier: wk86TtaJ1259+rzokqcQh1WUfA6el0pRQq1Xo+9D1m8=
Subject key identifier: ED:FD:C9:02:16:82:D4:DD:CB:E9:89:87:F4:0E:E3:9F:43:4F:3F:E9
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 019E1E34E8C270A8011E4AD6DF4D13621C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number: 150B
Signing time: Tue 12 May 2026 22:00:44 +0000
Manifest this update: Tue 12 May 2026 22:00:44 +0000
Manifest next update: Wed 13 May 2026 22:00:44 +0000
Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: WTZ1/iJDQakuZqgEugGd7m6/7kfn5iMg8HVVaFejx+c=)
2: _CbAIha09b2vkLLLEt-SwHJvLtA.roa (hash: rgmnLA63aETJnEB0DGJbTZ0etZiRckyQobaM7PylTRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:e8:c2:70:a8:01:1e:4a:d6:df:4d:13:62:1c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: May 12 22:00:44 2026 GMT
Not After : May 13 22:00:44 2026 GMT
Subject: CN=edfdc9021682d4ddcbe98987f40ee39f434f3fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:7d:2b:6d:78:1b:84:89:bd:92:92:64:39:
25:90:9e:f7:7f:22:59:6b:c1:60:a2:ee:bf:aa:05:
d4:94:02:93:9f:e9:ef:2e:31:30:3d:70:41:0d:5e:
c7:9b:ab:82:ad:62:43:3d:67:87:fe:69:65:ae:1e:
6e:1d:ac:5a:42:21:da:8c:28:ed:ca:14:b3:7a:10:
a0:2b:ed:78:24:43:ef:72:3a:d4:de:57:58:4c:75:
6b:5f:39:85:e8:1c:0d:48:fe:cc:9f:8f:43:cb:ed:
e9:40:91:ec:87:65:90:df:93:7a:67:c8:18:d6:66:
64:d5:d6:28:d4:b2:08:65:57:66:6d:3e:5d:dc:a6:
62:35:cc:18:7a:cf:33:24:22:e3:11:21:e7:3e:53:
93:4b:d9:41:5f:e8:24:4a:c6:87:9d:a3:75:ae:fd:
bd:b1:d9:b4:2a:ed:5f:44:2f:8a:aa:6e:35:9f:6f:
a3:ae:9a:4f:8a:35:8c:78:41:bd:34:07:30:55:6c:
5c:7e:46:8b:c9:c3:74:0f:9f:ce:06:84:8d:20:6a:
ae:49:71:c6:2f:1a:14:fb:b1:81:e1:be:ed:a6:fc:
7f:50:b0:2c:8b:29:a1:90:6e:75:f5:62:ec:e9:39:
c0:4c:fb:e3:c7:9e:aa:42:66:33:ce:0a:b5:a7:bb:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FD:C9:02:16:82:D4:DD:CB:E9:89:87:F4:0E:E3:9F:43:4F:3F:E9
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ca:9c:4d:1d:91:cb:fd:da:0a:5e:b7:2a:e8:e8:04:69:16:
47:c8:ea:9d:36:57:d1:85:c7:39:bd:1e:30:16:13:14:84:6f:
6a:d7:44:63:30:63:cf:ac:5d:1f:3f:d7:5e:fe:c1:39:ca:d4:
7a:a1:06:d0:a5:43:3c:6c:07:3f:bc:76:2f:a4:e5:37:b9:28:
22:9b:5e:af:03:ec:93:c4:de:47:b9:13:d8:a8:79:c9:c1:04:
7d:83:2a:53:ac:52:78:8b:80:4f:23:48:9c:43:eb:bb:e1:71:
8f:83:bf:f7:23:ce:0e:e0:ca:32:5b:aa:3e:e9:45:89:c0:93:
f9:67:b4:39:92:ac:cf:13:49:91:53:58:b2:e4:ad:5f:e2:7e:
53:aa:a1:6c:d2:08:3c:cf:78:28:e6:e5:a1:41:8e:ff:05:df:
04:ee:c9:02:25:f7:4c:6c:17:89:7d:63:f2:0b:95:54:df:e8:
34:8f:dc:09:0f:bc:ca:1c:54:11:eb:af:f8:b1:99:cb:3b:1a:
aa:7e:d2:10:6e:4b:2e:41:54:d5:cb:d8:0c:f5:9a:b2:a9:bc:
37:8b:a0:e7:3c:b0:e0:1d:87:5c:e9:7d:b4:c4:6c:8a:09:75:
49:55:b0:39:ef:e0:04:ac:9b:c5:a8:d8:c2:e9:7d:23:09:b4:
28:23:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:56 2026 by rpki-client