Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: G1x+6o88BGI1E92VngT3RPFMp0qB2bv2PtrGWKopvL8=
Subject key identifier: 01:4B:43:66:8E:BE:BB:88:A2:FB:A6:36:9B:E0:5C:A8:75:72:20:B1
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019F921140F1A803FFC7A44C4C752C46EFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 138F
Signing time: Fri 24 Jul 2026 03:00:31 +0000
Manifest this update: Fri 24 Jul 2026 03:00:31 +0000
Manifest next update: Sat 25 Jul 2026 03:00:31 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: m9I/V6TI7PW21GkbKzcbNQwywn8ri1yUvJncQCcbRTg=)
2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:40:f1:a8:03:ff:c7:a4:4c:4c:75:2c:46:ef:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Jul 24 03:00:31 2026 GMT
Not After : Jul 25 03:00:31 2026 GMT
Subject: CN=014b43668ebebb88a2fba6369be05ca8757220b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:99:28:ba:3a:75:2e:9c:5b:30:80:9a:9a:
a9:bc:64:42:65:6d:6d:5c:ba:be:36:35:25:6c:5e:
49:f1:6e:83:59:79:ad:14:b7:fc:a7:6a:59:2e:da:
3e:b9:4f:d4:f5:22:d8:fe:f1:86:bb:4a:01:13:d3:
fc:0a:55:49:e3:c5:b5:49:c3:e0:26:61:ef:9d:32:
ab:c8:13:8c:ab:dc:93:01:e0:58:19:0b:e6:b2:f6:
18:20:23:e6:65:9c:94:4b:bf:7a:dc:1d:dd:93:8c:
e5:34:9b:78:66:44:90:fc:62:70:5c:3f:7f:3c:e3:
33:b8:7d:77:53:3c:85:11:f9:6b:78:dc:74:16:76:
26:89:5f:f6:68:6e:85:5c:d6:c2:37:b1:5d:e5:f3:
e5:77:08:11:d6:d1:3e:c4:55:fe:46:57:84:76:69:
f0:34:d1:5b:41:67:0f:79:5a:1a:64:e0:6d:96:be:
e3:95:b0:f6:18:79:9a:47:3e:01:3e:2e:ac:76:56:
07:39:21:de:b2:db:48:d4:06:dc:83:44:0f:aa:a5:
0b:75:b1:7b:53:44:d8:24:00:06:53:ae:11:76:93:
77:41:26:b3:62:d3:75:e9:4a:63:40:61:12:ca:14:
4e:99:7d:1a:56:27:59:3a:58:f4:22:81:de:80:d2:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4B:43:66:8E:BE:BB:88:A2:FB:A6:36:9B:E0:5C:A8:75:72:20:B1
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:81:bc:8a:17:0c:6d:33:5d:1b:e6:c2:67:46:c9:e0:c5:77:
5f:61:e3:8e:10:4a:04:8f:3f:58:cc:a4:70:bf:32:89:97:a0:
4c:73:7e:ad:22:6e:dd:ab:07:f7:37:df:7a:c7:ab:03:a8:28:
72:20:66:44:37:b9:cd:75:29:81:d8:1f:6a:d0:30:cd:dd:75:
09:2c:0b:8e:0f:0b:eb:b9:8e:34:51:ea:60:06:53:5b:1b:5e:
ec:dc:6e:d9:89:96:30:5b:cd:b8:83:c3:d5:12:66:40:41:5b:
c8:4f:e9:15:71:a1:1e:f8:a6:86:59:9f:4d:2e:90:6a:06:54:
a3:88:40:ef:0c:96:15:19:45:72:20:e9:87:94:a1:8e:8a:83:
89:86:c0:45:28:44:d5:1c:90:dc:ae:9f:84:fe:46:fe:b7:c2:
43:d5:a1:3d:a1:74:36:26:76:ac:51:1a:b8:4b:77:fd:8e:0b:
23:46:f4:45:91:1f:9d:51:a2:c3:94:b3:84:e0:fd:d1:d7:18:
c7:50:8c:7a:36:95:30:9a:0c:06:06:da:9c:8f:69:ca:88:40:
cd:44:ff:a1:8c:ba:6b:47:a5:37:d9:dd:cd:81:46:b5:3b:fa:
7f:a5:e5:60:4d:c9:cf:47:cf:92:03:89:f4:b8:7b:5c:2f:83:
c9:6e:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:18 2026 by rpki-client