Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json)
Hash identifier: yqPSuwG2MWagVChiJ9wVF8KQAZ7aFmoKkVREN9vxUxU=
Subject key identifier: 32:0D:34:5C:1B:AB:9F:72:C6:A4:60:67:84:B2:81:0D:3E:7F:BB:BB
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial: 019E1E352541AFEBB5916FD009ED71AA6E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
Manifest number: 0F80
Signing time: Tue 12 May 2026 22:00:59 +0000
Manifest this update: Tue 12 May 2026 22:00:59 +0000
Manifest next update: Wed 13 May 2026 22:00:59 +0000
Files and hashes: 1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: 95FJOqjRJM1g2TNaUrXqjBpfy8yheOQOe3YJEQ5bULg=)
2: 1-i4S5deTfU5Sh15fYqf5Jhusm2U.roa (hash: I950vcuKR1BNQlR6pb4t14q2i1wr101AxNTWsanHl/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:25:41:af:eb:b5:91:6f:d0:09:ed:71:aa:6e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Validity
Not Before: May 12 22:00:59 2026 GMT
Not After : May 13 22:00:59 2026 GMT
Subject: CN=320d345c1bab9f72c6a4606784b2810d3e7fbbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:ca:81:1c:8b:4c:8d:cb:30:26:65:4a:5f:
fc:b9:ef:a7:ca:56:e3:fc:e3:3d:50:6e:0b:0f:ae:
3c:4f:11:14:76:02:2b:80:37:d1:38:d7:95:81:ba:
41:39:6d:eb:ea:f5:20:97:8a:86:10:75:c7:09:a8:
3c:8c:1f:ae:48:8b:b1:4d:f0:9c:2c:a4:a7:01:24:
88:ed:d9:d7:e2:98:70:86:4c:57:dd:fe:71:01:f2:
5f:62:c7:3c:b4:d0:14:c6:3a:d2:3e:31:82:39:d9:
dd:0c:8c:1f:2f:4c:24:2e:ae:b0:b0:c8:db:22:1a:
31:9b:39:5b:55:af:da:4d:72:2e:ec:56:7f:81:99:
ee:45:ff:7a:b1:ed:f8:4d:34:12:23:a2:92:b3:8e:
2c:fc:d3:fa:d5:22:92:8a:7c:43:bd:54:56:66:6c:
18:c8:6b:1c:bd:e7:1d:00:04:ba:87:58:a6:63:5e:
c5:07:5a:00:cc:4c:d7:28:0a:3d:f8:95:61:f7:6f:
a8:45:2f:68:f9:1e:32:52:d8:01:be:6b:f5:84:f2:
22:74:59:44:ca:21:1b:aa:69:2a:4f:4e:91:45:8a:
0a:80:c0:0e:51:28:bf:d6:89:ca:f6:b8:15:9a:17:
d2:52:13:29:2c:76:90:53:8d:73:ec:3d:93:37:d2:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:34:5C:1B:AB:9F:72:C6:A4:60:67:84:B2:81:0D:3E:7F:BB:BB
X509v3 Authority Key Identifier:
keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fd:80:c4:68:8e:06:63:fa:2b:35:ba:bb:27:8d:f2:e1:7e:
fa:e1:de:03:a5:7d:51:75:0b:e3:69:ba:99:96:76:0f:32:af:
9d:7b:c7:6d:0a:d6:6b:f8:6d:fd:0d:96:92:dd:bd:be:34:16:
31:54:39:1b:50:22:ea:b7:c7:75:c5:23:80:18:b0:f2:b3:b7:
3f:d9:6f:22:fd:61:90:fa:87:99:92:eb:17:cd:c0:b4:8e:49:
0f:28:e3:ba:d7:bf:b4:a7:83:fa:ba:79:65:33:3c:42:45:4e:
7c:e6:22:4d:9b:82:73:66:81:2f:b6:9a:2d:62:b2:b3:ba:e4:
9c:9a:15:30:68:c7:f9:8c:8d:d4:a7:2e:f0:b6:29:1a:7e:12:
b4:d7:ce:ec:a0:80:33:c2:45:e3:3a:dd:99:36:30:57:b4:ee:
d3:b7:66:41:ae:8e:19:a3:37:9f:84:ca:11:21:6a:d7:9f:32:
16:cf:65:e7:87:7e:14:62:b6:4b:2d:0a:a8:a7:26:05:97:cc:
0d:38:b6:24:5d:f5:36:2e:55:80:91:26:ce:80:06:56:2a:25:
24:3f:e7:da:9f:2b:3e:d0:83:22:70:39:41:28:ee:1a:20:d1:
70:79:24:a4:72:f9:eb:f3:7e:8b:12:45:72:27:01:31:8e:7e:
61:34:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:06 2026 by rpki-client