Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: 5R/Kcedmsm+y8iPErX3bYFdvmh/mPlr2rc9Jy1MROTg=
Subject key identifier: 6D:01:DF:A5:14:D0:6A:6D:C3:BB:FE:0C:4E:56:1B:B2:31:1E:5D:1D
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 01A114F39FD833779F06EA2CD2E499949C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1A8F
Signing time: Wed 07 Oct 2026 06:01:12 +0000
Manifest this update: Wed 07 Oct 2026 06:01:12 +0000
Manifest next update: Thu 08 Oct 2026 06:01:12 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: NFPeoKsEahLt8OtGxbDnV2rB12CCyA06k6xSRp402Lc=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:f3:9f:d8:33:77:9f:06:ea:2c:d2:e4:99:94:9c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Oct 7 06:01:12 2026 GMT
Not After : Oct 8 06:01:12 2026 GMT
Subject: CN=6d01dfa514d06a6dc3bbfe0c4e561bb2311e5d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:c1:86:61:c7:c6:01:69:7e:21:f4:e0:56:
a2:a2:fa:e5:bb:e8:a8:d1:47:76:57:d3:d8:76:59:
1b:8d:a1:c4:3e:49:bc:ab:48:d1:af:18:91:bc:df:
2e:46:d5:c0:49:52:ba:de:3b:57:2d:17:3b:17:80:
74:bd:85:8e:a6:dd:b3:eb:7f:af:cb:b0:d4:00:3c:
d9:b3:31:25:fa:21:a8:dd:40:35:30:a0:a3:72:f2:
7a:f4:74:97:ea:45:73:8c:f5:e2:fa:61:7a:b9:d4:
e5:ab:28:f3:18:52:0f:9c:aa:f6:04:0c:12:74:21:
cc:d3:75:35:10:15:f5:f6:90:5f:20:d2:f3:93:68:
a3:49:9a:90:e3:2b:eb:6c:ff:92:8d:7f:77:98:0d:
ef:b6:42:f1:0c:13:75:77:b5:96:6c:dc:ac:74:5e:
4f:31:9e:62:6f:99:e3:b0:ab:84:27:e9:4e:72:0c:
56:f9:82:f3:bd:6f:58:46:34:a9:11:ae:79:55:69:
a0:e9:a8:e5:9b:05:36:23:c9:d9:6a:c1:b7:f3:f0:
f6:87:40:91:f2:29:b5:66:6b:d4:3f:62:e4:5d:b5:
14:90:eb:7e:29:3c:3f:e3:e2:16:19:2f:da:d3:54:
5a:e0:02:13:da:c3:a3:1f:ad:4d:b9:00:02:cf:20:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:DF:A5:14:D0:6A:6D:C3:BB:FE:0C:4E:56:1B:B2:31:1E:5D:1D
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f0:09:34:ce:63:00:13:b8:5c:be:66:ee:bd:4f:bb:a9:7e:
43:f9:c8:f3:2a:ed:3f:91:5a:07:78:23:9e:67:7c:5b:5b:ab:
ac:44:ca:81:6b:d6:49:ee:b3:00:60:0a:4c:19:86:19:e2:65:
11:41:78:4a:27:02:c1:38:b6:82:07:17:dc:71:bb:18:07:e6:
50:bb:b2:f0:a7:94:e9:91:e5:3e:68:e4:f1:d5:fe:f9:bb:0d:
a8:71:c4:10:51:34:5c:e7:22:17:15:1e:21:69:2d:6c:5b:91:
7a:9b:a0:ea:86:b1:d5:ad:f6:73:c9:74:9d:35:dd:fa:ad:e1:
50:64:36:d1:be:60:53:86:26:0a:b8:e7:9a:82:7a:85:44:79:
a3:87:91:89:f6:25:aa:5c:2d:d6:71:d7:46:21:a2:6d:05:91:
e9:ed:82:e9:29:1b:e5:0b:af:b6:1b:8c:14:a3:5a:0d:d9:77:
ec:67:80:f2:e6:6c:b3:9c:1d:90:09:ec:89:64:3b:0d:81:34:
b6:08:50:c3:9e:85:5c:e3:69:80:36:3a:f8:80:23:21:38:9d:
9e:e5:14:ce:54:61:6e:e7:2a:a7:44:59:53:84:2a:b4:fe:1d:
67:38:df:52:51:8e:1c:c6:0c:2e:44:26:aa:e6:bc:40:50:a0:
e3:1c:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:16:24 2026 by rpki-client