Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.mft
File: 0vq2SwFo4HK_qjskuXBA-_wbeqo.mft (raw, json)
Hash identifier: MmZE820QHE89sp/NepStYzWP2jR4dvJ3yNNgwaOjUSo=
Subject key identifier: AA:26:F8:E9:AB:DF:9C:4B:44:28:EF:A4:2E:33:D2:86:CD:D0:5A:99
Authority key identifier: D2:FA:B6:4B:01:68:E0:72:BF:AA:3B:24:B9:70:40:FB:FC:1B:7A:AA
Certificate issuer: /CN=d2fab64b0168e072bfaa3b24b97040fbfc1b7aaa
Certificate serial: 01A0D56FCD18701052F45C58894CB290712E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vq2SwFo4HK_qjskuXBA-_wbeqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.mft
Manifest number: 98
Signing time: Thu 24 Sep 2026 22:01:08 +0000
Manifest this update: Thu 24 Sep 2026 22:01:08 +0000
Manifest next update: Fri 25 Sep 2026 22:01:08 +0000
Files and hashes: 1: 0vq2SwFo4HK_qjskuXBA-_wbeqo.crl (hash: 23LROnj5DtjK4zRC1qUDknzm2E8WAUA5fbiXs2SxvV8=)
2: G1OX7ILlgKdKRaEQC3yLAdh68gk.asa (hash: GpQzi3mBSE/QxPJWiPHv4AHtih7tmvna56AV22SxjnE=)
3: eViUm1Gf3TdOuP55AzoO_xDskII.roa (hash: xHKcKUYZsn/x6E58RZ2DzEoVQ9VF+es2q7cEjBDdRy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vq2SwFo4HK_qjskuXBA-_wbeqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:cd:18:70:10:52:f4:5c:58:89:4c:b2:90:71:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fab64b0168e072bfaa3b24b97040fbfc1b7aaa
Validity
Not Before: Sep 24 22:01:08 2026 GMT
Not After : Sep 25 22:01:08 2026 GMT
Subject: CN=aa26f8e9abdf9c4b4428efa42e33d286cdd05a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:e6:78:a1:03:2c:d8:2c:ae:23:2d:53:02:
b7:07:49:61:49:67:00:de:4e:94:a6:76:68:13:dd:
b8:de:46:09:7d:27:78:ca:ee:c3:9a:d3:2e:84:a0:
ab:b0:b2:a4:65:e2:bd:1f:2b:f9:98:c4:92:5b:03:
b1:df:89:af:cc:94:65:56:da:a0:c1:12:32:b6:e4:
3d:d7:42:b4:c8:da:21:7f:d1:c3:0d:cd:2b:9e:79:
4c:02:e8:13:84:55:cf:c0:e2:9c:8e:94:25:62:a3:
7a:81:9e:e5:8f:0e:45:d1:37:d7:62:cf:d5:b2:cd:
e9:04:25:d8:0d:75:71:fe:ad:0d:31:2f:66:4c:a7:
4c:bf:09:1d:66:24:fe:f4:a9:eb:11:7b:7a:67:21:
51:c1:d7:ce:b0:14:89:83:1a:d3:43:62:5f:e5:33:
f2:81:2b:3e:15:77:c8:67:62:82:60:ac:05:31:30:
67:a2:0a:1c:9d:49:e5:19:ea:af:f3:5e:92:69:4e:
fb:2f:3d:0b:1a:57:27:ab:23:aa:b3:ef:13:fc:88:
b5:af:99:5c:0e:d6:45:60:be:34:f7:58:d5:b3:fc:
5e:7e:6f:7e:78:96:6c:50:1e:39:28:a6:25:cd:57:
e5:be:f5:82:5a:d7:35:60:23:df:17:4c:4a:fb:e9:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:F8:E9:AB:DF:9C:4B:44:28:EF:A4:2E:33:D2:86:CD:D0:5A:99
X509v3 Authority Key Identifier:
keyid:D2:FA:B6:4B:01:68:E0:72:BF:AA:3B:24:B9:70:40:FB:FC:1B:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vq2SwFo4HK_qjskuXBA-_wbeqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/10c56e-9549-43c1-a0b0-2ddf496d9162/1/0vq2SwFo4HK_qjskuXBA-_wbeqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:69:3c:92:43:d1:72:20:db:b4:ab:86:a9:df:a9:1f:da:86:
58:4e:54:d8:b1:97:9b:ff:83:fe:b3:cb:27:fb:68:6d:d1:07:
f1:74:55:6b:ae:87:9c:92:65:90:bc:07:ef:7c:c1:70:12:d7:
86:17:15:52:83:cf:07:4c:83:7e:c6:30:1d:47:5d:f6:ef:87:
27:64:74:09:53:71:68:30:80:2b:9e:47:cb:54:56:67:de:e7:
e6:1b:0b:8d:c0:05:67:87:4a:c2:fd:78:4d:38:fb:a2:b7:da:
a9:a6:18:25:6c:dc:20:a8:96:aa:bc:08:6b:e4:3e:26:8c:f6:
4d:1a:38:b5:73:a3:b3:39:b0:56:04:cd:00:fc:57:a4:bd:4f:
29:45:76:03:c5:b6:5a:60:54:d8:e3:30:6f:b2:c2:f6:cc:ae:
b7:98:5e:df:e3:19:90:4f:a4:74:ac:ca:18:ef:5b:f3:c7:3d:
a5:0e:93:26:22:02:50:24:30:1f:94:35:12:e2:77:c6:5b:e6:
82:c0:c7:86:57:dc:97:5a:ce:90:a8:db:78:2e:ee:36:d3:d5:
37:2c:e3:2b:a5:0e:43:b1:58:2a:3a:6f:48:50:e8:bd:5a:d2:
d5:66:cf:39:d6:74:3b:4e:55:3b:cc:9a:4b:46:ef:4c:18:0b:
a6:d0:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:41:29 2026 by rpki-client