Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier: 6EJ7s9qUe1d9Ndqo9rzdpH6p4LrWjnt8Tjaz/CNqbHE=
Subject key identifier: 0A:C0:F3:AD:41:22:C3:08:F6:9F:08:BE:CE:6A:57:CF:F1:3C:7A:3B
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 01A0DA9600C6089FE0545EB0DDD506DAFAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 22:00:58 +0000
Manifest this update: Fri 25 Sep 2026 22:00:58 +0000
Manifest next update: Sat 26 Sep 2026 22:00:58 +0000
Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: 4XXmQVcxPeCjAh05dXL4voZWm7+PqI8lBHCldlDRjbU=)
2: 25O7M2UWZLtjZfht3TvmhhoKUbU.roa (hash: aHZMolfVFoYqPERvCPULtiENfnmx30XYIbMKIT0hRPE=)
3: DdN7vkJnOB--YPWssHLoFQourZw.roa (hash: 4Xwtg1/EpdhFY06tPduHwk9/msCJ+le6Q0TbeFIOaTA=)
4: ik9bQHA3wdhcXWdy4pApX4ViEtA.roa (hash: YUhchzwns71ZrkZmZzkm82sDpa46jMSA30HHNbNFaao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:00:c6:08:9f:e0:54:5e:b0:dd:d5:06:da:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: Sep 25 22:00:58 2026 GMT
Not After : Sep 26 22:00:58 2026 GMT
Subject: CN=0ac0f3ad4122c308f69f08bece6a57cff13c7a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:fe:66:4f:aa:24:38:a0:8f:cc:40:1a:e9:
97:53:2f:5f:78:4b:c4:bd:7a:55:8a:77:fb:d5:6d:
eb:e0:2a:a2:59:88:56:49:09:ba:fa:1a:e5:21:33:
a3:6d:72:e7:5d:6d:94:3a:99:6e:a1:81:ea:df:62:
ad:48:f3:bf:37:03:42:d3:80:55:7c:a9:0c:c5:8e:
55:60:f6:ca:14:a2:6c:7a:9e:42:45:70:6b:b1:91:
73:36:d5:e2:ee:1f:26:65:49:5a:0a:24:ce:8c:92:
41:d3:20:72:28:76:91:4c:b3:e5:0b:43:9b:7c:63:
eb:19:0e:1e:8b:9e:08:79:64:21:ac:58:2b:5c:f3:
cc:f2:c6:cf:00:4d:95:db:bd:6a:56:a3:e9:61:ff:
35:24:bb:9f:4f:e1:29:e1:73:f4:00:f2:07:cf:9e:
d1:5c:ca:42:94:ea:97:bf:09:da:11:1c:38:cb:21:
41:aa:24:33:0c:98:52:27:47:15:4b:e6:76:30:f7:
79:49:e3:18:3d:a6:77:c2:54:f8:0d:60:e3:83:9c:
22:df:be:4e:6a:31:de:ce:b2:35:9f:19:c0:ad:5c:
18:66:44:51:2c:3d:61:31:ee:d8:88:aa:d5:27:e0:
25:40:c8:3a:98:68:49:30:11:b0:cb:52:a0:2b:d8:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C0:F3:AD:41:22:C3:08:F6:9F:08:BE:CE:6A:57:CF:F1:3C:7A:3B
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:28:b3:aa:c2:4d:39:6f:f2:17:8d:c0:a0:4a:df:1b:79:5b:
bd:ab:f5:50:1a:b3:15:8f:d1:c2:a1:de:40:89:53:11:1b:51:
1b:f3:35:7f:65:14:06:49:10:f8:dc:9a:d1:0b:60:74:6b:d1:
fe:eb:ca:a5:0d:7b:e6:4b:ee:95:84:f6:56:6e:a2:11:a5:5d:
a5:4b:05:b8:9a:f1:2d:12:7b:f7:0b:b2:ba:d1:ab:02:b1:eb:
76:ec:b6:37:bd:24:4c:cc:e5:c3:3f:61:c1:4d:99:c2:a5:58:
c1:9b:2d:94:f0:ec:e2:4c:79:b8:cc:bc:6e:5f:fc:a1:ca:ad:
78:a8:f3:a3:03:f8:fb:5b:8c:ad:44:45:9e:0a:09:c5:44:59:
12:2e:d2:a4:14:64:6e:8e:0f:e3:79:3e:16:10:64:7d:d8:1f:
e8:6c:2d:58:ac:14:58:ab:ce:c2:1d:bc:75:79:20:6e:81:42:
24:bc:5f:47:58:50:fd:31:af:8e:c1:f1:bb:3e:13:56:9a:9e:
ec:29:a0:03:1b:9f:74:19:d5:98:5a:a5:e3:d0:4a:8f:0c:02:
9b:2f:51:27:f4:1c:55:a9:b3:0c:e7:bb:48:3e:ac:db:5e:07:
ea:b2:ce:53:d6:6d:47:6d:85:16:cb:b6:b9:a9:78:2f:30:e7:
67:c1:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:53:48 2026 by rpki-client