Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
File: D06qexV9TCV1EB0q4i7uhcIuWEI.mft (raw, json)
Hash identifier: f2GyXdIno9cQhioziH9J23LVzsa/2WaFPd5rwwxLIl8=
Subject key identifier: 9A:7C:99:98:A5:2C:37:9C:91:8C:26:48:5D:BE:7B:06:3A:CD:B9:6B
Authority key identifier: 0F:4E:AA:7B:15:7D:4C:25:75:10:1D:2A:E2:2E:EE:85:C2:2E:58:42
Certificate issuer: /CN=0f4eaa7b157d4c2575101d2ae22eee85c22e5842
Certificate serial: 019E1C7DB8D561123C3296ACD2978DA531D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D06qexV9TCV1EB0q4i7uhcIuWEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
Manifest number: 3C
Signing time: Tue 12 May 2026 14:01:01 +0000
Manifest this update: Tue 12 May 2026 14:01:01 +0000
Manifest next update: Wed 13 May 2026 14:01:01 +0000
Files and hashes: 1: 8jdCqTVjHLso8RGRhYig24As6Hw.roa (hash: 3D37NyFExPQXRihgpk761P7gkxTDxts0n/acpzT0qdo=)
2: D06qexV9TCV1EB0q4i7uhcIuWEI.crl (hash: 7oIO/bgN7Exs4rDt0fKFFm5Sy4+NyK8/8FCjkChXq+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D06qexV9TCV1EB0q4i7uhcIuWEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:b8:d5:61:12:3c:32:96:ac:d2:97:8d:a5:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4eaa7b157d4c2575101d2ae22eee85c22e5842
Validity
Not Before: May 12 14:01:01 2026 GMT
Not After : May 13 14:01:01 2026 GMT
Subject: CN=9a7c9998a52c379c918c26485dbe7b063acdb96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:32:8c:39:94:ea:08:16:c9:73:8c:4c:dd:47:
7c:25:6c:03:b9:c2:3c:1f:3f:08:b6:0e:a9:e5:68:
4d:71:63:2b:0d:dc:8e:a7:52:0d:70:23:f6:af:45:
33:e1:0e:ba:da:d1:12:fa:f3:27:49:44:10:8e:83:
d3:b3:55:c1:83:ff:a8:84:a0:79:5d:fa:3c:9a:d3:
5c:d3:39:11:06:4c:d1:70:dc:d0:7f:d9:94:d6:64:
0f:17:1b:b2:85:de:28:89:24:1a:34:4c:d1:39:37:
33:7b:3d:96:eb:6a:2a:aa:28:e4:0c:75:18:c7:0a:
1a:c5:e9:1c:38:a7:04:a8:9c:a2:ca:e1:c3:1d:35:
39:c8:42:00:b4:2a:8b:28:8c:59:a4:24:7c:f7:20:
4f:1f:19:ea:e2:a8:20:18:17:dd:a3:b7:62:8b:ac:
93:da:f6:c8:14:81:ec:c5:5f:17:89:40:15:7a:84:
d6:a8:0b:37:fa:48:b3:0d:63:4b:73:ca:cf:8c:33:
aa:08:7a:4b:25:93:be:8f:6d:7a:cf:03:ca:2d:66:
ba:7d:56:75:e2:a8:96:0f:cf:fa:3e:fa:95:21:2f:
73:04:2f:0a:09:98:63:ec:e5:43:c3:58:d7:b9:92:
d7:48:6a:e1:35:2a:8c:fd:f5:4c:60:12:5d:9b:19:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:99:98:A5:2C:37:9C:91:8C:26:48:5D:BE:7B:06:3A:CD:B9:6B
X509v3 Authority Key Identifier:
keyid:0F:4E:AA:7B:15:7D:4C:25:75:10:1D:2A:E2:2E:EE:85:C2:2E:58:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D06qexV9TCV1EB0q4i7uhcIuWEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/85fd6c-d1ca-484a-82d9-ea62ce310e74/1/D06qexV9TCV1EB0q4i7uhcIuWEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cd:21:05:49:9a:8d:9f:d8:a0:b7:55:da:41:b1:65:ae:46:
76:72:86:e0:9d:4a:0e:44:af:a0:fb:5a:66:df:66:71:98:87:
64:db:d5:dc:e7:ce:23:36:d3:27:d2:13:48:15:4b:dc:fc:32:
54:cf:fc:39:18:6d:21:a2:0c:08:4d:0f:68:1b:14:65:28:8b:
bd:70:53:4f:b8:37:b2:f0:d5:79:20:7a:b9:41:d7:78:a3:0a:
46:93:57:11:49:08:88:d5:85:cb:af:ad:02:5b:38:89:82:9c:
1e:5a:ce:df:6b:c4:40:e2:83:e6:e5:25:91:68:18:25:32:66:
38:c4:fc:43:f0:36:4b:97:79:84:8f:37:90:59:40:f3:3c:d8:
92:87:12:b3:c8:dd:fe:45:f6:b4:97:63:81:b1:c6:a8:ef:8a:
77:d9:24:aa:04:c4:c3:6e:b9:ca:f5:77:72:20:fd:44:0d:e3:
c9:6e:53:56:4e:b7:d2:5b:7c:19:f1:c9:cb:66:88:f1:2e:a3:
33:20:a5:9f:7c:64:5c:64:0b:b1:79:7b:b6:10:7d:2f:b4:e0:
30:a2:75:d6:cd:db:dc:45:51:b5:34:76:38:79:cf:ed:a9:ab:
70:2c:2b:64:d3:5e:84:1d:bb:92:c7:1f:5d:a8:07:bb:ba:a6:
75:d4:d7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:17 2026 by rpki-client