Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: nrZsbmjT0pftc1/X3W2aV4g7+jRlqrRP9dLWKRMpDh0=
Subject key identifier: 0B:89:BB:05:DE:BC:26:AF:A0:65:8F:47:56:DF:99:85:DC:06:8C:6C
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 01A0D0B6CD4A85CB94A5743B16426253E18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 1434
Signing time: Thu 24 Sep 2026 00:00:36 +0000
Manifest this update: Thu 24 Sep 2026 00:00:36 +0000
Manifest next update: Fri 25 Sep 2026 00:00:36 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: Aesa8n/huI8GT7nkDkVkL9T6QfDti8v/PGHPSsGhtos=)
2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:cd:4a:85:cb:94:a5:74:3b:16:42:62:53:e1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Sep 24 00:00:36 2026 GMT
Not After : Sep 25 00:00:36 2026 GMT
Subject: CN=0b89bb05debc26afa0658f4756df9985dc068c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:71:31:54:97:51:11:ff:0c:ae:86:29:a8:
3d:a9:42:e0:13:a5:ef:33:69:14:fc:46:cf:14:7b:
52:9a:07:17:86:de:1e:9c:0f:64:5d:ad:3c:44:4f:
50:5b:8b:a8:63:7c:ac:94:ec:64:dc:10:05:3d:6c:
09:7a:a8:4d:1e:d6:9f:d7:7c:09:0b:2d:54:53:ff:
c8:99:f6:7b:5d:ea:a3:35:96:2f:71:60:ed:70:78:
b6:f8:be:39:dd:40:5a:b9:ba:63:63:b0:7a:d6:b9:
bf:d4:a3:30:ad:e6:fc:4c:44:65:d6:97:db:1e:33:
18:b0:4c:79:37:3e:47:67:02:da:c7:d3:d2:37:18:
50:15:98:28:54:63:1b:92:95:8e:0f:13:c8:75:0d:
55:de:f6:e8:8b:32:34:5c:66:0a:ef:42:65:4d:f2:
f8:91:f1:1d:b7:28:f3:15:a6:b5:ae:aa:1b:be:50:
33:72:7b:e5:b6:75:34:2b:d7:c3:2d:a2:a8:63:9e:
86:da:08:ed:6f:71:24:6f:47:4c:9a:38:0d:12:99:
8b:1b:9b:f5:85:50:34:a6:9b:c9:bf:c2:3c:b8:26:
16:f3:33:62:88:89:a2:75:d5:ed:fc:ea:f0:a7:ae:
2f:35:b2:2e:a4:aa:1a:84:71:70:b3:f6:b6:4d:b7:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:BB:05:DE:BC:26:AF:A0:65:8F:47:56:DF:99:85:DC:06:8C:6C
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c4:2d:c0:ab:fb:06:cf:9d:3c:1b:b0:66:33:4c:82:08:86:
8e:70:06:d7:ec:71:1e:f6:d5:cd:65:d0:99:b7:4f:37:5f:27:
8f:84:81:3c:94:de:2a:a2:f9:b0:85:48:e1:c7:5e:f9:e8:d5:
cf:27:4e:15:80:52:fa:c7:42:2c:c8:43:21:75:11:f9:a4:64:
5f:13:12:48:b8:69:d2:c3:dc:4a:7a:e6:f4:f1:ee:9d:f9:8e:
a3:33:e1:9b:32:6d:0d:d5:df:b3:93:b6:2c:d1:b9:6f:48:5a:
d1:c5:cd:ff:d9:4c:c1:10:7b:fa:07:27:99:12:db:53:e1:d6:
e4:d6:33:ae:cd:da:d5:d2:32:5d:76:6c:03:f0:24:32:74:3e:
47:29:e2:f0:11:19:7b:a9:bb:cb:2b:f8:67:1f:80:ff:7c:06:
82:64:55:7b:df:f0:56:05:e4:f7:eb:c8:b3:25:ca:7f:f5:29:
87:0c:b1:47:58:18:f4:e8:2b:97:18:5f:6c:26:05:82:e4:0f:
9d:b4:79:cd:29:34:f5:b4:9f:98:3e:13:79:f8:0c:a3:52:fd:
c1:21:9c:a5:e8:4c:54:c9:e1:4f:ee:b6:7a:ab:05:40:d1:e0:
8b:c4:af:8d:d3:78:dc:18:6e:67:03:12:73:f6:4d:8e:2e:26:
76:5f:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:10:04 2026 by rpki-client