Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: 0s+IM0lwusAetzad3BhJzqoIKo7oh5GkseGzTsrBwBo=
Subject key identifier: A3:6C:AB:0F:96:87:C5:45:57:56:63:06:77:89:58:71:0C:DD:F0:2B
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 01A08C0C90E519E4EA6BC473F1787A26631C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 16:00:28 +0000
Manifest this update: Thu 10 Sep 2026 16:00:28 +0000
Manifest next update: Fri 11 Sep 2026 16:00:28 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: qKoX5tQRfTTDrxSCBXoJcGsuanZT94wNDK7BuQgWTdQ=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:90:e5:19:e4:ea:6b:c4:73:f1:78:7a:26:63:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Sep 10 16:00:28 2026 GMT
Not After : Sep 11 16:00:28 2026 GMT
Subject: CN=a36cab0f9687c54557566306778958710cddf02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:2b:4c:c7:65:6f:c2:7d:b3:6c:b9:e0:db:
9c:25:fc:25:d1:cd:6a:fc:c1:c6:b6:c5:4c:d2:e9:
a2:7b:de:e2:d7:2c:fd:87:00:d4:da:8b:95:77:14:
99:c3:01:9b:54:35:9c:b3:35:d7:97:17:f5:03:7e:
cb:7f:c1:47:62:0c:ca:4c:2c:9e:c4:64:fa:25:75:
3a:27:31:7d:41:54:36:8f:dc:af:8c:62:76:45:ee:
7f:1a:29:2c:6b:6e:7e:5e:37:fa:57:e2:13:2d:05:
00:20:4c:92:94:d5:39:b5:9d:8e:17:8f:13:94:02:
7b:0f:35:cf:c9:c7:71:78:7c:ec:a0:56:62:3b:d2:
d2:a5:b9:97:48:fb:b7:be:13:aa:8d:ff:93:0e:bc:
8e:7f:9e:8c:b5:56:df:e6:1a:ad:1a:f9:3e:6f:77:
4f:f9:55:1b:f4:35:d7:c9:04:e8:a6:70:33:08:09:
e8:72:a6:0b:53:7a:96:4b:72:b2:b6:78:27:8a:d2:
20:dc:d2:56:c2:b7:b8:78:07:63:55:e5:53:60:6e:
fb:8e:2c:0f:86:de:fa:d1:66:00:25:e4:05:ef:57:
51:49:44:b7:ae:ee:3c:61:8e:ba:27:94:e5:99:f0:
73:b2:94:7d:0b:7e:23:35:b7:db:66:b1:85:15:a9:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6C:AB:0F:96:87:C5:45:57:56:63:06:77:89:58:71:0C:DD:F0:2B
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:34:c9:b5:e3:71:9f:cd:ba:70:e9:2b:8c:64:30:54:b9:4e:
3b:57:b7:57:92:ce:22:a9:48:79:85:6d:31:10:0f:a6:46:17:
0c:55:2a:f4:61:26:af:7d:00:fb:76:c3:eb:f6:4e:44:4f:5d:
58:7b:11:a4:0e:3a:bb:97:96:10:96:1e:8a:9d:d9:7b:e3:10:
75:b9:fc:be:31:7e:21:f1:9f:7e:7f:85:4f:5d:5c:e9:f7:36:
78:a2:9e:f2:5b:f9:71:0d:80:f0:40:74:b8:15:19:c3:de:46:
4c:73:ab:33:02:5b:0a:58:f3:f3:f1:7e:86:90:0f:c7:90:11:
8e:53:7f:2d:8f:76:6b:d4:57:d9:53:2b:b8:39:9b:f6:8c:d0:
e8:fb:73:2c:d3:2e:e6:f1:e3:d7:68:9d:f3:7c:3d:e3:1f:f3:
f5:ac:dd:c4:98:e3:45:8e:e7:13:bf:e6:3f:62:88:4b:83:c2:
1c:99:e7:f1:96:a0:c6:28:02:b1:53:e9:be:66:ba:ee:90:db:
8e:8b:e8:05:bd:78:94:df:c5:ee:d8:b1:88:dc:ab:14:ab:b3:
b6:2a:0f:65:af:66:ad:5b:f2:28:02:6e:d4:9a:0b:99:d3:e9:
fb:1b:c6:51:05:ea:5b:9e:5f:df:02:7d:b9:b6:7a:b8:e0:35:
41:be:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:20 2026 by rpki-client