Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json)
Hash identifier: CTN3zDSt1F7y5V7G6AqiQXb/AE1ubmrEPWAspfsa2Ck=
Subject key identifier: A0:68:14:56:2C:E9:C1:EA:4E:C0:9A:7A:48:CF:83:28:55:39:A7:32
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial: 01A0CFA444525AD392063C783A399D6AD2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
Manifest number: 10E5
Signing time: Wed 23 Sep 2026 19:00:44 +0000
Manifest this update: Wed 23 Sep 2026 19:00:44 +0000
Manifest next update: Thu 24 Sep 2026 19:00:44 +0000
Files and hashes: 1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: td6AQrK/1AFmX3TIOFGZMl7AMD+tl/zGhhKAZ78DRw4=)
2: 1-i4S5deTfU5Sh15fYqf5Jhusm2U.roa (hash: I950vcuKR1BNQlR6pb4t14q2i1wr101AxNTWsanHl/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:44:52:5a:d3:92:06:3c:78:3a:39:9d:6a:d2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Validity
Not Before: Sep 23 19:00:44 2026 GMT
Not After : Sep 24 19:00:44 2026 GMT
Subject: CN=a06814562ce9c1ea4ec09a7a48cf83285539a732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:2a:49:d0:b3:96:a1:0c:91:df:11:5e:c0:
24:22:07:7b:0e:5c:77:2f:77:5a:59:2c:2e:c5:f5:
61:ff:79:03:1d:c2:c5:a1:bf:96:98:c7:a3:cc:2a:
14:56:a3:ea:26:dc:6e:d8:e6:e9:70:ee:41:20:6f:
f5:20:3f:c0:97:e3:b9:b1:0b:15:ad:37:1d:73:16:
b2:51:89:f6:8e:5f:a6:d4:03:6b:94:05:05:c5:d3:
1b:f7:e5:ce:52:2f:a7:08:0b:ad:80:91:51:cc:cf:
37:3a:da:1f:99:c8:f1:be:f8:01:48:ca:4f:7e:03:
e9:6d:9f:9a:a5:4d:f4:61:02:65:fd:ee:26:f3:c1:
87:16:ee:c1:7e:a9:e6:50:3f:d6:4c:29:2e:33:de:
94:88:3b:cf:36:ca:6d:4f:65:36:96:43:fc:61:3c:
24:fd:ff:3b:0e:43:37:bd:09:5a:5b:89:93:d0:8d:
25:5c:81:55:99:66:ae:01:37:0d:72:0a:f9:48:f0:
63:56:63:98:d4:46:e5:cb:0e:e4:7d:dc:bd:75:e5:
89:55:b6:75:0e:f9:66:5c:2e:b7:3c:05:b8:46:e8:
3e:c9:51:68:82:e5:2f:0d:28:93:58:74:ff:b0:24:
a4:b7:0e:04:e5:05:01:a7:98:bf:ce:8c:04:f8:fe:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:68:14:56:2C:E9:C1:EA:4E:C0:9A:7A:48:CF:83:28:55:39:A7:32
X509v3 Authority Key Identifier:
keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ef:28:3c:99:9e:00:ba:83:70:35:df:29:d1:30:7b:34:39:
c1:07:41:b8:c0:15:5c:37:3a:a7:08:a8:66:b3:c5:a6:04:9e:
77:e1:34:6b:d0:54:ea:f5:76:9f:8e:76:2f:60:80:d6:35:fe:
b0:b2:eb:fe:26:16:94:95:8b:a3:36:31:fe:54:99:31:c0:86:
46:c5:0c:bc:8b:68:ac:da:09:f1:91:e1:dc:9c:39:78:36:67:
a3:c1:49:8d:91:c7:59:7d:34:32:8f:9a:26:57:6d:d5:b3:9f:
02:73:e7:be:fd:b0:b0:07:87:6a:74:b9:ea:d3:85:e7:34:08:
5e:4a:31:91:4e:a6:45:d3:b4:28:74:e2:7a:0a:1b:ff:1b:99:
d3:43:3e:e6:51:51:e2:36:4a:df:80:db:2a:6b:5f:7a:ab:0f:
42:1d:62:e2:ca:53:de:67:d9:5f:b7:1a:fe:f8:f6:ff:6c:0c:
d7:2a:02:37:26:2e:31:3e:28:ec:35:ae:fb:2f:d5:29:09:d1:
0c:32:24:ba:de:2a:3b:cb:5f:df:79:06:a6:e5:c2:06:a7:fe:
af:dd:76:de:03:fa:5c:d5:4a:99:09:5b:8b:56:b3:f5:92:2f:
a6:55:3e:3e:1b:db:02:51:d5:a7:5c:37:78:37:03:39:47:22:
13:57:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:56:42 2026 by rpki-client