Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: QI3ceguSsxgH0wYSXhi3UKs/PWkJ4Vf4Q9Y0KiEnPjA=
Subject key identifier: EC:66:70:03:95:51:DD:D4:B1:29:46:90:0D:F7:64:C7:4A:2E:E7:92
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 019D322BBAA826513BB7B18DAE757240E3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 165F
Signing time: Sat 28 Mar 2026 02:00:19 +0000
Manifest this update: Sat 28 Mar 2026 02:00:19 +0000
Manifest next update: Sun 29 Mar 2026 02:00:19 +0000
Files and hashes: 1: 0HigbbPnkZoyonq1yyfi617xeII.roa (hash: MUaxT3D+6K8H+XJRqIFEKgk/lwlHeolFKwuvBRyzNa8=)
2: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: T3rYvR9iue/W2M8aU1CjxTFBcxqWUCr8aIn9ZL0NcOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:ba:a8:26:51:3b:b7:b1:8d:ae:75:72:40:e3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Mar 28 02:00:19 2026 GMT
Not After : Mar 29 02:00:19 2026 GMT
Subject: CN=ec6670039551ddd4b12946900df764c74a2ee792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:71:26:76:d3:ab:c9:be:c5:3d:5a:47:91:
c0:5d:00:ae:a4:ea:49:75:83:6c:41:8b:86:20:12:
af:c8:3b:7c:ea:39:e0:e0:3d:3a:eb:e2:9a:ae:dc:
04:c5:06:39:75:8a:7c:b6:92:06:87:f0:30:77:07:
29:f8:e7:0b:61:58:73:67:28:83:d4:a6:a3:89:ab:
53:76:64:94:c6:3c:95:24:bf:0c:05:ef:cd:f5:31:
2f:2e:75:02:1d:54:81:bd:12:e2:36:5e:5d:4b:dc:
92:bc:fb:cd:65:51:cb:b6:90:e7:ee:6c:ed:fb:dd:
dc:28:f1:8d:f1:92:77:a2:14:8a:07:65:fd:f2:5d:
f4:3e:e2:e3:f4:98:de:74:24:09:e0:98:e0:02:5d:
c0:4f:2d:6b:e1:22:17:2e:e8:95:4c:77:25:6b:43:
53:1d:30:e5:9a:5f:4a:cb:2d:5f:4f:f4:29:9a:d3:
81:31:d1:58:5e:3b:a3:f7:e1:9c:bb:72:5f:84:68:
1e:6d:9c:20:07:70:cd:d6:c9:b5:2c:a5:5a:5d:db:
5e:7a:94:98:a3:fd:c1:d1:40:f6:37:30:14:c7:3b:
1e:81:e4:0e:32:52:7f:f4:84:0c:3c:be:10:1f:af:
3f:47:20:1e:d3:4d:b0:dd:5f:0e:3f:51:cd:2e:76:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:70:03:95:51:DD:D4:B1:29:46:90:0D:F7:64:C7:4A:2E:E7:92
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:05:f6:7b:3a:55:76:6a:93:af:0f:a7:57:6d:75:da:9f:eb:
f3:4d:cd:11:8f:2e:91:e6:50:71:31:5b:c1:b4:1d:32:d8:05:
90:eb:81:54:78:91:fa:8e:60:18:33:07:56:02:82:9d:83:ca:
34:8d:2e:87:cf:a3:64:cd:68:c3:8d:35:de:8f:ff:c0:bb:6c:
99:c2:63:08:dc:b3:de:16:35:88:db:af:6d:cb:11:2d:da:bb:
51:55:a9:23:bb:47:06:e6:b9:b2:85:39:4d:2b:5c:f2:cc:e5:
05:e3:2b:82:b6:a2:da:0e:3e:31:12:25:04:57:69:c4:02:05:
24:4a:31:84:13:b4:b5:a7:9d:9d:48:8c:6a:e3:e6:10:47:03:
5a:ee:3a:13:86:13:bc:7e:b4:d6:da:9c:37:40:e9:e4:e2:5c:
b5:ac:0f:a7:25:42:66:91:56:58:41:0d:18:bb:08:bb:db:b7:
bf:e0:78:48:03:f5:02:ab:f7:4b:13:5e:aa:01:60:44:eb:51:
d5:24:06:0f:d5:c1:7c:98:86:7a:fe:61:93:bf:64:c3:23:8b:
1e:6d:c1:f9:61:78:16:65:e5:84:26:ca:4d:10:24:8c:4b:68:
e8:e2:3f:92:f5:ab:b7:07:5f:f4:99:53:bd:d2:c9:8e:69:ab:
61:9f:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:16 2026 by rpki-client