Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: p6ZFHLRbG2SzrYQt58OVNjY6btYV8cL8Fnz62n68CsA=
Subject key identifier: 0B:B3:9E:E8:68:1E:C5:71:C6:D5:A9:6C:F6:AB:A8:13:EC:4A:1A:D7
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 019D39413146612AE3F033F4AD065B4EC07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 05A1
Signing time: Sun 29 Mar 2026 11:01:06 +0000
Manifest this update: Sun 29 Mar 2026 11:01:06 +0000
Manifest next update: Mon 30 Mar 2026 11:01:06 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: lyl6kyNJtMmLcOSlyeeEnh1v5ibQdBHwgtIFyUFdnJY=)
2: iWvUwAU_qvWcuMvoIuoO-qPVv9c.roa (hash: FGFkjOVAlseZE4i4Gp+aJPkMH2fpBKQOFk0SOsvRbNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:31:46:61:2a:e3:f0:33:f4:ad:06:5b:4e:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Mar 29 11:01:06 2026 GMT
Not After : Mar 30 11:01:06 2026 GMT
Subject: CN=0bb39ee8681ec571c6d5a96cf6aba813ec4a1ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:84:39:fc:7f:f3:98:c5:16:ba:e1:47:34:
6f:3a:a1:8f:61:be:cd:92:bb:4f:fc:ce:28:76:9d:
55:24:6b:60:00:2d:ce:0a:8f:a1:40:2b:30:5d:ae:
c1:7f:f2:68:e0:68:ee:a0:c8:eb:57:de:8d:ae:2f:
80:08:23:f5:0a:12:c9:72:73:e7:70:ae:e8:55:a0:
95:ab:b9:ed:27:3e:f9:9a:e8:82:41:cb:df:f1:70:
60:fe:bc:2e:72:f6:15:5f:d3:c2:1f:35:3f:d6:63:
84:64:1e:12:88:fe:15:fc:b2:23:ca:ce:9d:b1:b4:
bf:67:5b:6c:53:d2:32:f6:55:af:41:54:b4:42:64:
87:89:7d:9c:77:fd:3c:15:0a:e4:4e:de:6a:81:53:
6a:88:9e:dd:6b:51:83:e9:61:e2:1a:99:8a:41:20:
63:d6:71:07:43:52:4a:59:3d:01:b1:af:07:d5:22:
56:17:cf:5e:7f:05:ec:86:75:21:f9:f7:6d:be:31:
11:0f:3a:f6:9d:bb:2c:d6:d3:e1:2b:58:fc:db:08:
f4:c9:8f:66:a4:0c:63:ff:00:89:94:1b:f0:6e:4e:
5d:aa:51:d0:49:23:d1:41:88:f1:4d:45:79:75:e1:
f9:5d:9e:c6:92:11:96:79:7b:5c:73:d9:93:95:33:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:9E:E8:68:1E:C5:71:C6:D5:A9:6C:F6:AB:A8:13:EC:4A:1A:D7
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c3:da:5c:2c:22:32:e1:66:be:6c:e9:74:b1:f7:53:e3:9f:
cf:14:51:e2:0e:f4:4d:5b:50:11:e4:3c:71:c3:ba:95:32:a1:
71:f0:ba:24:85:b0:cb:19:74:f5:d3:15:57:1a:68:c6:b7:3f:
ed:b2:ca:23:19:94:49:16:27:65:dc:e3:6d:3a:a8:26:af:10:
9b:d5:36:37:30:45:d5:26:10:dc:7e:7f:c6:ae:26:e4:40:15:
fb:e8:96:83:31:ea:5d:62:19:73:a9:bf:a2:bb:c0:90:ea:51:
95:d2:9f:18:86:23:4b:a0:f0:6b:50:3f:1e:0a:e1:9d:f7:66:
fe:dd:e8:b7:9a:77:53:2e:d4:00:2b:17:81:ca:a6:f2:d8:1a:
0c:4e:85:b8:58:7a:58:69:39:23:52:e7:c8:05:79:95:f5:99:
e5:67:6b:0a:7e:5e:03:4d:c3:2f:41:6c:27:c3:29:2b:01:00:
03:3f:ba:d9:e3:ad:93:df:b6:27:7a:62:33:c5:51:f5:7f:13:
a9:77:11:04:a1:f1:9a:0b:3a:bb:15:bc:5a:3c:33:ee:05:87:
1d:5b:c8:0a:5a:59:96:53:cb:2d:7e:6f:7b:4f:cf:ca:23:31:
34:f3:82:a1:fc:ee:b1:11:df:d5:4b:bf:03:ae:62:ca:82:85:
cf:12:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:54 2026 by rpki-client