Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
File: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft (raw, json)
Hash identifier: f0xm93FAYg9OPs8R7DPHtIM16X1oA1p1s+HFG3LTp+8=
Subject key identifier: 47:02:02:96:0D:E7:DF:0D:97:99:CA:34:04:09:55:9A:7E:1F:F1:5C
Authority key identifier: D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
Certificate issuer: /CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Certificate serial: 01A0DB04531A4588A74C6465A63F1C9F8B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
Manifest number: 03AA
Signing time: Sat 26 Sep 2026 00:01:28 +0000
Manifest this update: Sat 26 Sep 2026 00:01:28 +0000
Manifest next update: Sun 27 Sep 2026 00:01:28 +0000
Files and hashes: 1: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl (hash: gNdLq3rQiGH9Lh92VD2GJCMnxJ9IXWxkxbklt9aqbHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:53:1a:45:88:a7:4c:64:65:a6:3f:1c:9f:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Validity
Not Before: Sep 26 00:01:28 2026 GMT
Not After : Sep 27 00:01:28 2026 GMT
Subject: CN=470202960de7df0d9799ca340409559a7e1ff15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:a5:c8:be:6f:4d:d4:4d:47:1e:7a:ee:51:
73:71:70:ed:4b:9a:56:82:40:bf:90:97:33:af:e9:
a6:c0:34:fb:c4:d0:e2:77:c3:ee:bc:3c:dc:f1:19:
8d:52:34:69:bc:4a:ee:ca:ca:83:b7:ea:03:5d:08:
4f:ac:a4:b0:d4:63:2f:2a:26:28:f2:c3:7d:8c:4d:
74:8f:c9:42:91:d0:c3:4e:e2:e2:66:ad:0d:e3:ff:
da:98:5a:52:e1:47:75:27:d8:c0:c6:de:8e:3e:3d:
56:95:ac:45:9f:f5:3a:2d:f4:14:2e:67:d5:63:b7:
1b:3b:1d:72:a3:ce:94:13:52:ec:6b:d5:c7:75:22:
72:45:5a:1e:3c:7e:6b:da:83:6a:53:79:fb:79:b7:
6f:2b:0e:a1:aa:94:c6:56:78:25:b6:0f:70:6e:a1:
dd:d9:41:6c:70:52:0e:ef:71:46:19:dd:a5:41:18:
26:10:c6:58:b5:54:90:f0:d9:d1:4d:d8:fa:11:b3:
0f:e1:a3:4a:b3:89:0a:91:11:35:a2:93:6f:ef:ec:
87:17:12:93:ab:df:3a:84:e1:d7:36:e4:e2:06:be:
91:02:b3:6c:b9:18:d9:10:79:d7:05:e9:c1:4a:17:
c1:4c:9a:5c:9f:4f:4a:51:14:19:73:8f:98:3a:83:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:02:96:0D:E7:DF:0D:97:99:CA:34:04:09:55:9A:7E:1F:F1:5C
X509v3 Authority Key Identifier:
keyid:D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2e:fc:8a:19:24:ba:81:05:27:b3:5d:bc:e6:fe:40:a0:6c:
45:35:0b:6e:6d:61:00:d2:ff:3d:24:d1:a0:7a:de:06:1a:6a:
6a:83:05:c7:18:08:c3:47:97:ad:0d:81:3f:bb:aa:84:cf:3d:
d6:ec:5b:e0:01:bc:06:e7:3d:5e:14:1b:4e:76:5e:56:a4:fd:
22:a5:5a:4b:a4:0b:63:4f:f6:22:c2:76:af:c7:df:08:08:be:
28:cd:29:d7:04:d0:99:d5:0b:3a:57:91:ee:7a:02:bc:79:d2:
70:01:0e:a3:bf:b7:a4:71:88:e6:10:e3:79:59:84:73:7c:e5:
cf:39:94:47:85:6f:49:74:d2:37:17:91:db:33:4e:4a:57:04:
c9:b4:d5:e4:d2:64:6f:c3:83:3b:bf:74:9f:ae:1f:f4:c7:fc:
c7:bb:a6:0e:2d:5b:2c:8d:4c:1c:1f:9d:fb:fd:93:d2:47:b3:
39:b1:f3:a7:a3:c6:1f:e9:04:0c:25:dc:6c:51:26:fa:f0:5f:
3f:ea:37:1a:d6:15:58:30:cb:d7:f4:d0:e7:da:15:87:c2:8d:
68:1e:7e:8c:93:2d:18:72:69:51:da:85:b7:25:d6:e4:ad:22:
f0:4b:39:64:29:4e:a5:5b:67:2a:ac:87:be:f1:a3:f4:8f:ff:
3d:44:97:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:21:41 2026 by rpki-client