Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: rxjhBm9Mn+YDZjDbb7qxUaZN/7EkzjehpkDa08mBnb4=
Subject key identifier: 0D:A8:5E:9C:B0:6D:ED:F7:04:B2:3F:BD:B4:EF:66:0A:58:D7:59:4D
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 01A0CD48310AA415053AE61E51675EF7AEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0F10
Signing time: Wed 23 Sep 2026 08:00:55 +0000
Manifest this update: Wed 23 Sep 2026 08:00:55 +0000
Manifest next update: Thu 24 Sep 2026 08:00:55 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: UpY4bA4IANTaTS2IUH27KgWJmgN/5pgHwWD+fA+pdkk=)
2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:31:0a:a4:15:05:3a:e6:1e:51:67:5e:f7:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Sep 23 08:00:55 2026 GMT
Not After : Sep 24 08:00:55 2026 GMT
Subject: CN=0da85e9cb06dedf704b23fbdb4ef660a58d7594d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:f1:5e:c4:32:e3:ec:c2:27:6e:66:4f:85:
e1:20:02:80:10:52:ac:28:fd:37:0e:1d:a4:17:94:
e1:0f:0d:ad:0b:ab:1a:38:78:de:1b:8e:2b:50:5c:
48:ed:a9:cf:a5:69:85:15:08:36:07:ab:8a:62:ed:
76:74:1c:49:46:28:76:5a:20:3a:4e:25:41:33:08:
be:7a:74:4f:0a:b8:ad:d4:7c:b9:25:96:46:56:51:
ab:bc:25:ee:57:30:c9:38:1a:2c:80:8d:dc:fc:07:
24:e4:ac:92:90:5e:b8:fa:af:80:d0:3a:47:76:a2:
fd:2c:f9:37:c8:11:ee:ba:b6:ea:fd:bc:a4:6e:6d:
88:fa:79:48:d9:02:8d:ef:a6:fb:21:7d:57:fa:ce:
c3:6d:8a:56:e9:06:1c:42:e9:9e:c8:ce:4b:34:4f:
ae:dc:29:71:36:4a:20:9c:8c:29:43:95:b2:b1:cc:
8f:7f:75:0d:1b:6f:05:1f:74:02:38:4d:84:4e:b6:
bd:1c:b9:e0:42:30:0c:5e:45:bb:bc:f5:9d:e5:1d:
e1:96:65:86:d9:02:c8:92:63:f7:e2:86:20:0c:f6:
a3:8e:a1:9e:a2:35:28:8c:6a:e7:9f:57:c1:31:4f:
15:6d:df:f2:70:73:65:78:6a:e7:55:c5:fe:7d:20:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A8:5E:9C:B0:6D:ED:F7:04:B2:3F:BD:B4:EF:66:0A:58:D7:59:4D
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:de:5a:a4:1d:a9:ab:aa:79:2d:a0:f9:47:ef:88:1c:02:35:
25:64:da:0a:5c:ba:03:7d:ac:7a:fa:a2:cd:a7:0d:11:15:56:
4a:9e:49:52:c9:07:b5:3d:81:61:80:ca:5d:98:d2:d5:0e:b8:
58:6b:d0:a4:e2:cc:e8:c4:03:cb:fd:9d:91:7d:a4:35:34:25:
ca:75:4e:6d:35:a2:a5:02:df:9c:da:c9:d3:93:08:f3:7e:fe:
16:86:a1:c0:a9:b3:25:5a:31:90:9b:52:16:20:06:6e:15:e1:
ff:65:be:4d:2a:0a:5a:e6:d5:7d:a2:6e:22:46:73:f4:77:09:
fe:b1:dd:a8:dd:5e:d3:74:a2:23:c9:2d:c9:7f:2d:be:f6:d3:
9a:38:87:ae:de:45:3c:3e:ba:67:0e:8b:cd:69:fd:ce:32:4e:
a7:1f:b0:b7:31:e7:65:18:6a:55:20:c9:f2:19:5d:22:5a:76:
ca:e9:55:46:35:79:07:b3:f7:05:b1:7f:56:da:06:21:5c:60:
33:9b:dd:b1:4e:e4:64:32:01:2a:26:24:73:61:83:28:a6:bd:
6c:c5:4e:ad:88:a8:9a:42:02:76:51:af:73:d9:16:be:25:b0:
69:8c:b1:22:9b:e1:89:f8:16:c3:7d:58:51:6f:46:1f:ec:b5:
3c:de:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:57:54 2026 by rpki-client