Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: gNQws44BsQOW/qPKOCdcjH/sM/2uggSG5i5rC5b2hOM=
Subject key identifier: A2:FD:E1:EC:5F:00:15:25:38:74:E7:17:C5:BD:2D:08:29:BE:6E:06
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 019E7BC3211C89FF91DBD20954DF449A54C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 0AE3
Signing time: Sun 31 May 2026 02:00:45 +0000
Manifest this update: Sun 31 May 2026 02:00:45 +0000
Manifest next update: Mon 01 Jun 2026 02:00:45 +0000
Files and hashes: 1: HBiP4paC0MlxmT9TqUdXSCFpVek.roa (hash: 5/zIGY+6xQLGjEfA2psYBflaTdU36mi9/74Ob0mM/kg=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: Skh3gumAfLCFXTZDEVmB/oBgUIaSpsxp8V+KsAR3A8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:c3:21:1c:89:ff:91:db:d2:09:54:df:44:9a:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: May 31 02:00:45 2026 GMT
Not After : Jun 1 02:00:45 2026 GMT
Subject: CN=a2fde1ec5f0015253874e717c5bd2d0829be6e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:f9:54:b3:7a:84:ac:67:77:e0:8e:1b:7e:
8d:5d:10:c5:99:ab:95:67:7c:01:c7:82:38:b4:42:
8f:3f:3d:7b:d2:a1:07:d6:ac:e9:ff:6b:ad:92:92:
c1:1e:1e:ba:58:e5:3f:59:c1:4c:ea:02:cf:c6:86:
dc:a6:4d:e1:b0:29:36:e9:a4:54:97:72:72:e9:34:
51:ee:13:c4:1e:50:74:5b:3b:c3:38:7f:1b:df:2c:
6b:18:c2:74:21:02:f4:03:b5:b3:ea:ca:59:20:83:
2e:29:49:61:29:84:34:f7:96:a6:20:6c:41:ea:02:
f9:57:48:30:a7:40:ab:e6:8e:e8:59:c3:e9:63:58:
9a:db:fe:c9:d8:2a:fd:21:99:bd:a2:ba:d6:c8:d1:
30:99:65:a5:e4:31:17:0a:41:a8:44:1f:6c:73:09:
63:b5:88:3b:c8:a9:eb:f3:76:1e:64:39:3a:69:44:
14:9c:9d:c9:f0:e1:38:0f:8f:d7:eb:09:72:84:a8:
fe:0c:cb:0c:7d:51:7e:e7:47:f5:9e:64:0b:62:bd:
99:1e:0e:a2:84:a1:20:48:e5:15:41:62:8d:4e:0f:
cb:fc:39:59:59:6f:05:4e:13:ae:94:eb:8b:47:28:
38:52:01:1b:a9:30:9e:a7:9a:2b:5a:69:73:c5:3a:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:E1:EC:5F:00:15:25:38:74:E7:17:C5:BD:2D:08:29:BE:6E:06
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1b:4b:0e:22:90:84:2f:c8:52:29:2f:a9:1e:9b:13:a0:06:
b6:50:ff:21:e7:21:d3:35:da:a7:2e:89:d8:27:85:f1:5c:cc:
e4:d0:62:15:96:a8:a7:68:d0:ca:75:2b:bf:57:97:61:eb:01:
15:3a:8e:1d:ad:4a:4d:6f:32:ab:0e:c8:de:ee:2c:b4:37:d5:
9a:79:b7:bd:83:d8:70:a0:e2:f8:77:86:e9:a4:5d:a6:56:e8:
90:3b:45:ff:b6:39:ff:27:f0:1b:3c:61:a8:cd:12:ed:c6:dc:
7c:1f:b0:79:cc:2f:f3:d5:67:a4:e7:c8:c0:2f:20:89:69:a1:
d3:60:f8:55:ad:54:73:99:7c:47:5a:d8:a5:7e:47:8b:db:43:
ba:fd:de:bd:2f:62:91:40:91:f1:6b:2e:01:fd:3a:e9:19:f3:
ad:c8:f9:4d:95:f9:13:1e:b3:dd:f9:61:e6:ab:48:9d:cf:82:
e8:fb:f6:84:ec:4f:cb:74:71:1f:03:75:03:12:83:fb:48:23:
c9:22:d2:5e:89:a3:01:83:88:1b:2b:41:24:5a:bd:42:7c:22:
9f:0b:78:74:bf:36:83:80:a3:4e:09:f0:69:7f:7b:c4:f2:c8:
70:9b:e1:b8:2b:4e:54:47:c0:c7:af:c7:24:b8:1c:02:0c:4a:
6f:a8:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:48:43 2026 by rpki-client