Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: JnHpW9ojmWtsYJ2FW0TeB4YUiJTqNZfD7sg7i/ckc4Y=
Subject key identifier: 32:13:6D:D0:F6:3C:9E:B5:74:F2:FD:73:DC:5B:7B:46:DF:8D:E5:6E
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 019D277205D056BB269AD0F1C73EB1B8F90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 0648
Signing time: Thu 26 Mar 2026 00:01:17 +0000
Manifest this update: Thu 26 Mar 2026 00:01:17 +0000
Manifest next update: Fri 27 Mar 2026 00:01:17 +0000
Files and hashes: 1: AN7d4TXrtt5_te4VnJ6dVmu47oE.roa (hash: j0ueVlAIinrIC36bzKoLDFrIbGMkcFuqoDWXY+F2+w8=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: ycDbMOGcGJ/PyEl0eKrKSYv4qOT6w4a6p6xZJpDcncg=)
3: LaBbMvd3OwQhNnrUizZKTdnekiQ.roa (hash: gyzOiFVxonnT2AmLy7+95jCrZWSk+rERZGHB5wVY/w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:05:d0:56:bb:26:9a:d0:f1:c7:3e:b1:b8:f9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Mar 26 00:01:17 2026 GMT
Not After : Mar 27 00:01:17 2026 GMT
Subject: CN=32136dd0f63c9eb574f2fd73dc5b7b46df8de56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:cd:04:46:f4:d4:5d:44:60:e3:6a:aa:22:
b6:d4:5b:20:e9:29:4d:63:39:fa:48:f6:38:b3:c1:
70:50:e5:e7:01:e1:a3:26:be:4b:55:0f:3a:65:c7:
b9:46:e5:b0:63:c9:0f:48:01:4f:ad:72:6a:29:72:
49:39:50:53:24:d3:d7:89:89:a6:bd:d4:fc:eb:26:
e9:d7:83:75:e1:36:ae:c6:d0:c0:75:4b:f9:23:7f:
c9:0f:2f:54:89:63:55:52:78:7c:ba:8e:aa:89:71:
ad:5e:76:61:81:51:99:f8:56:43:fd:43:d3:b6:f5:
ae:a0:c5:d8:4d:4a:c3:7d:d9:22:81:52:80:04:b5:
89:14:96:fe:3c:5f:76:0c:dc:76:7c:a7:15:dd:a9:
b1:d4:a2:37:ff:9e:03:b3:fd:29:15:f5:53:3e:09:
fd:db:ce:d2:1a:4f:d5:0f:90:6b:02:c0:99:c5:5d:
5f:59:20:f6:08:90:76:c7:75:d7:cc:5b:6d:f2:b1:
53:51:a1:6f:71:69:c9:58:bc:5c:39:80:62:46:5d:
aa:90:00:8d:fe:1c:5e:1f:27:37:1b:b2:6f:a2:9e:
af:5e:72:55:30:be:4e:f5:6a:e7:0b:64:1e:2c:78:
7a:99:b2:4f:b6:df:94:50:01:88:93:cc:b8:fd:d1:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:13:6D:D0:F6:3C:9E:B5:74:F2:FD:73:DC:5B:7B:46:DF:8D:E5:6E
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dc:0f:af:52:61:a8:e3:85:3d:d1:0b:a6:44:ba:29:f4:19:
4c:d1:7c:cc:1a:66:79:c6:49:18:8f:95:b3:e0:97:a5:e6:eb:
af:dd:83:26:d1:80:b0:9a:f1:47:73:33:da:bb:3f:ae:6e:ba:
a0:3e:45:e7:7f:e4:c0:37:11:78:a5:16:a4:94:90:28:37:0a:
3b:ee:e0:7d:62:5a:f5:25:d4:c3:fb:13:49:ab:e3:be:c9:3e:
b3:3c:51:03:7e:d4:54:10:e9:ac:ae:2c:82:29:a1:27:5e:26:
67:e3:83:aa:4e:35:9a:db:47:3f:26:6a:68:aa:89:1c:7e:6a:
53:aa:94:3b:c3:65:86:0d:e5:d1:3f:f8:07:7f:ba:61:3a:4b:
07:f8:e2:8a:c1:ff:2b:16:7c:b6:c2:1b:af:71:dc:c6:59:c2:
94:f2:66:b4:be:a3:dc:10:5e:0a:f3:cb:20:4c:85:33:a7:6c:
6a:a5:57:49:7c:bd:b2:d4:b7:b8:ce:08:04:84:de:20:c6:40:
25:3f:10:26:76:0e:d8:88:1e:ff:2d:0a:aa:77:da:3f:56:77:
ea:2d:c6:03:d1:20:0f:25:1c:a2:2d:39:e1:9f:ee:d8:39:4b:
13:bf:fa:57:34:bd:e7:05:e8:81:ed:16:fc:a3:cb:26:29:ee:
14:72:8b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:20 2026 by rpki-client