Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier: DZDY00QYJAIfZQdJ8EWWJXcQgij0PcA4JG4LkfCBmT0=
Subject key identifier: 11:FE:12:1A:F8:97:BC:D7:F5:97:4C:6B:19:20:18:44:40:A8:4D:2C
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 01A0CFA4358B89F3B2AE06AC6B81CDED6ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number: 1670
Signing time: Wed 23 Sep 2026 19:00:40 +0000
Manifest this update: Wed 23 Sep 2026 19:00:40 +0000
Manifest next update: Thu 24 Sep 2026 19:00:40 +0000
Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: MG7ruY5xkwPBcmyZRPSDk4D0TssKoDa9eX7nMLXuy80=)
2: _CbAIha09b2vkLLLEt-SwHJvLtA.roa (hash: rgmnLA63aETJnEB0DGJbTZ0etZiRckyQobaM7PylTRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:35:8b:89:f3:b2:ae:06:ac:6b:81:cd:ed:6e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: Sep 23 19:00:40 2026 GMT
Not After : Sep 24 19:00:40 2026 GMT
Subject: CN=11fe121af897bcd7f5974c6b1920184440a84d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:5b:d2:8d:03:22:71:3f:ca:a8:f1:90:76:
5c:ea:0e:39:da:38:5d:4d:e6:ae:9a:3a:99:a8:33:
e2:1a:a1:68:76:65:42:a5:60:29:41:de:51:b1:67:
de:3b:27:6f:3f:9d:fa:59:74:90:16:f6:e9:ec:92:
d1:e4:10:77:aa:0b:67:b0:d6:93:e6:a4:9d:ef:0b:
58:91:c8:00:c0:65:f8:07:3f:23:86:21:2e:68:93:
c1:b3:5c:d7:f7:d0:54:da:c8:30:f0:80:5c:9e:20:
9e:43:1c:98:fb:f0:f5:f4:d0:59:ea:03:5b:65:0b:
93:92:e2:f7:68:61:fd:60:79:9f:50:e3:1c:22:d4:
71:9a:e1:69:bf:84:dc:1b:36:10:69:b5:4b:a6:61:
a5:66:da:5e:71:38:25:b8:f6:53:27:00:3f:b7:ce:
90:9c:64:98:e4:eb:d4:cb:b4:1a:00:66:0a:86:dd:
e3:48:ed:da:08:c9:e8:0a:1f:94:9c:94:1d:73:d2:
a9:c9:86:c6:d3:29:5d:2c:3d:56:52:52:89:8e:19:
79:c6:45:0c:22:28:3b:67:52:f3:19:6e:29:7f:0b:
af:97:9d:c4:51:7d:67:62:ac:2a:bb:3c:11:70:43:
82:db:31:5a:77:5d:3c:3f:8d:93:f9:89:4c:a1:e5:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:12:1A:F8:97:BC:D7:F5:97:4C:6B:19:20:18:44:40:A8:4D:2C
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:89:17:a8:15:46:54:cb:fb:89:db:80:c0:78:a1:0c:11:d2:
81:ab:09:8a:69:a4:67:cc:b2:47:30:20:f4:f3:e3:78:13:7f:
01:73:b5:7c:7a:29:07:98:ec:7d:f1:c7:96:8e:94:63:2c:05:
e4:1e:9c:be:4d:dc:a6:eb:1f:2d:1f:63:6c:6b:50:ca:d8:f9:
24:af:f4:d8:f6:a3:52:81:0a:6e:97:0b:07:1c:24:50:fc:a1:
b2:ed:0b:6e:d5:d7:f0:2b:5c:15:fa:a0:c2:f2:47:d9:32:af:
c3:03:c9:b9:77:03:39:54:9c:98:ff:03:9f:2d:5f:ca:85:cc:
41:0d:1c:2f:82:5f:39:d8:c6:d9:99:77:f4:ec:92:df:c0:b2:
a7:51:1d:45:f2:d2:e6:d5:53:63:d1:e5:b3:83:b2:31:79:50:
bd:21:c9:8a:d4:7b:db:1b:78:75:5b:64:28:72:a3:ea:6e:99:
2a:6f:29:b3:2f:71:5e:91:34:cb:84:fc:7e:71:53:dd:80:04:
07:ce:03:d9:ad:dc:cf:fc:f2:0b:96:3a:5c:7d:d0:0d:a5:6f:
fa:95:6b:49:e0:22:ae:2b:c7:fb:dd:a8:58:53:46:85:6a:4f:
b7:da:fb:c3:3d:6d:3e:3d:34:52:09:d8:f4:e3:ef:7e:a3:fc:
57:09:d9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:46:56 2026 by rpki-client