Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: PaFKpxW8JrbrJmU/WioeJ/vnf1Vs10fJDl/fFNzngbo=
Subject key identifier: 76:5F:19:EB:0D:20:CC:B4:FA:B4:11:96:A7:2D:7A:EE:3E:A0:CE:90
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 019D25F1E27A05DBEBEDC875302E67CA457D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 1676
Signing time: Wed 25 Mar 2026 17:01:42 +0000
Manifest this update: Wed 25 Mar 2026 17:01:42 +0000
Manifest next update: Thu 26 Mar 2026 17:01:42 +0000
Files and hashes: 1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: TerSXfzuEoa1MjvT/09RnErCB68OsFmOsvNI24VY818=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e2:7a:05:db:eb:ed:c8:75:30:2e:67:ca:45:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Mar 25 17:01:42 2026 GMT
Not After : Mar 26 17:01:42 2026 GMT
Subject: CN=765f19eb0d20ccb4fab41196a72d7aee3ea0ce90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:cf:14:c8:7d:ce:bf:0c:36:67:66:9f:e7:
7a:50:3d:95:2a:9c:76:f9:e6:95:49:72:9b:5e:da:
32:11:35:50:4d:92:6a:a3:3d:4a:d0:58:49:a4:04:
3b:2a:b3:c4:a7:4f:aa:ce:a9:a9:97:95:6e:18:af:
64:2b:a8:71:40:ec:67:e4:c9:15:5f:1b:d5:6f:4d:
78:29:96:e1:e3:4b:73:85:e8:a9:cb:11:46:5e:c7:
b9:d6:aa:56:fb:a7:ef:07:d8:89:c1:1a:89:57:88:
8a:83:1b:f1:7a:6b:7d:d9:08:00:b0:a4:22:49:86:
c7:b4:1d:5e:3b:77:5e:29:a7:ac:ca:56:e7:64:e6:
d6:08:ae:1b:8d:c2:ce:0d:5f:7e:20:3c:1d:e5:30:
99:de:3a:81:30:59:3d:8c:4a:97:69:4a:32:bf:1d:
36:c9:5b:73:fb:c3:94:53:38:ca:62:d0:3a:58:2b:
01:42:3b:83:59:6f:92:81:73:9d:3e:30:d0:fe:4c:
13:d4:4c:6b:e9:20:e6:1e:8b:ec:d9:a8:c2:34:7b:
ae:f1:32:3d:d0:65:44:a0:bb:0f:79:1f:6b:7d:47:
3a:f9:3e:9a:de:ac:21:74:15:bf:e1:2c:80:02:77:
fd:14:ff:85:54:7d:0f:55:77:fe:91:56:28:26:85:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5F:19:EB:0D:20:CC:B4:FA:B4:11:96:A7:2D:7A:EE:3E:A0:CE:90
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:14:5e:b9:71:37:eb:a5:07:cc:dd:f5:7c:42:5e:9d:c0:be:
9a:69:e6:9b:44:5c:73:3e:5c:3d:02:73:bd:77:2d:3f:8b:f9:
90:cf:29:86:e6:75:5e:78:9b:43:2f:8a:b2:ce:99:b8:6a:be:
a4:77:70:85:51:eb:f4:72:13:73:6f:d0:e7:1e:d0:24:ac:50:
58:bc:ae:93:81:63:18:cc:a0:36:58:37:f7:fb:fd:b2:a0:6c:
35:a1:9c:19:a3:d8:8c:2c:a7:3a:b2:6f:07:6c:cf:a8:1f:e9:
ca:61:2d:3c:be:f8:46:75:64:fd:ad:88:78:62:cf:8f:64:aa:
88:98:67:3a:4e:04:d8:ee:ce:7b:8e:ec:65:c6:40:dc:1c:28:
55:95:1b:27:07:1b:47:b6:52:38:55:aa:a0:5a:46:59:9b:14:
27:7f:e3:36:41:f2:59:ba:7f:b7:6a:b1:72:fb:6d:4b:cc:82:
88:d0:6b:b1:47:49:32:7b:71:0d:88:ad:f8:10:90:8c:b5:c7:
ed:16:e3:51:e8:2d:2d:58:62:e4:f7:0e:15:8f:21:2e:6f:87:
23:d3:59:4f:4b:57:fa:16:ad:ab:ea:22:72:fc:af:3c:0a:c1:
c0:54:55:10:42:ee:ad:42:28:99:0c:1d:49:56:cc:44:c8:2d:
b2:91:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:51 2026 by rpki-client