Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: ++zQxeolTCODUD06cEAjfsQpmnhPUpt6vTQW1DtatXs=
Subject key identifier: 50:7A:41:EA:50:71:9B:8B:1D:E7:E2:4A:AD:9E:22:27:5D:92:EC:F4
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 01A0897A029DE0BFFF18050847F658E373EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 1A45
Signing time: Thu 10 Sep 2026 04:01:09 +0000
Manifest this update: Thu 10 Sep 2026 04:01:09 +0000
Manifest next update: Fri 11 Sep 2026 04:01:09 +0000
Files and hashes: 1: T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa (hash: SXBhd3/vnyIoPB/kDRi62FVnMbysfno7J5T9Eftc8tY=)
2: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: 3OUarTVn1g3wKEWqkkLhWhF7yGiA0Sy0HrvCuFU7uP8=)
3: tSpDrZGtdp0mH1aXKivR6nDrhuY.roa (hash: xkSEr+C7WhhCLocSo1zhSLhZi6gcFYi1jnV4sR3gnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:02:9d:e0:bf:ff:18:05:08:47:f6:58:e3:73:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Sep 10 04:01:09 2026 GMT
Not After : Sep 11 04:01:09 2026 GMT
Subject: CN=507a41ea50719b8b1de7e24aad9e22275d92ecf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:18:3f:17:5b:db:70:1a:44:5d:26:2b:17:
7a:66:7d:93:71:64:00:e4:31:0f:42:dd:c2:1a:79:
83:15:c4:37:53:7c:97:9b:63:6c:78:4f:83:10:09:
60:cd:ac:d7:0b:86:b1:ad:c5:da:2b:30:fe:df:37:
a9:58:17:69:5b:55:8a:8f:74:67:02:d0:c3:e2:73:
ac:00:f3:18:29:e6:f6:b4:ff:80:7a:4c:4e:63:ad:
41:9d:7c:e1:08:c0:87:f4:9f:00:a4:69:ac:5a:16:
64:11:7b:c8:e2:7d:47:cc:c8:fc:f3:73:36:da:5d:
29:cf:67:b0:d5:f5:d3:b0:14:84:e7:6b:e8:ea:5a:
d4:97:1c:6e:c7:9b:5c:f2:e6:a0:83:14:ec:23:2d:
f3:a7:3d:d5:39:2e:d2:f1:84:2a:34:2b:37:13:d1:
1f:26:50:08:b2:2d:2f:11:99:8b:22:00:a8:f5:f3:
a3:a7:f4:1c:45:ce:ff:fc:d4:38:28:d8:22:75:75:
08:5a:80:82:6d:ca:6c:bc:c6:db:e7:72:eb:1a:d1:
16:62:5d:88:a1:c9:42:f1:86:c4:cd:86:bb:b0:4d:
8c:14:d2:21:ea:07:34:4d:32:69:70:e9:02:8d:a0:
e4:c3:3e:1e:f8:dc:36:3f:d6:00:0c:1e:8e:c8:64:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:41:EA:50:71:9B:8B:1D:E7:E2:4A:AD:9E:22:27:5D:92:EC:F4
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a2:8d:ae:5b:7f:1b:31:25:1c:aa:8c:5b:78:4f:b6:f2:78:
f7:39:b5:80:bf:b6:47:cd:a2:71:eb:62:20:fc:eb:1b:30:2c:
51:94:23:b8:a5:4f:1c:8f:69:e5:57:1d:72:a5:ca:58:16:89:
fc:33:46:46:78:fc:0a:ab:7e:13:02:b7:0d:1f:da:26:55:35:
aa:bc:5c:d0:a1:a1:6a:d3:3b:70:79:c9:ab:59:ec:2e:67:33:
95:a2:cd:e4:04:96:3a:dc:80:1e:a9:7e:57:96:e5:5f:2a:e5:
92:c7:e7:67:01:de:e3:0d:4b:5f:b5:b7:d9:83:62:bf:37:76:
f3:52:6c:dc:3f:72:63:f6:7d:ca:49:77:20:f3:08:40:9c:25:
0c:a5:3b:65:04:15:e9:f7:71:8c:12:05:45:60:56:2c:51:81:
37:09:04:01:83:2d:5c:a8:02:bf:b3:1c:2f:93:14:6a:8b:94:
a3:5c:84:05:f1:97:fe:d1:d1:ef:a6:a3:79:94:e3:37:11:b0:
b9:3d:6c:33:cb:e7:1b:bb:14:1f:da:5a:bc:a3:6c:23:69:8b:
ed:cb:63:40:d6:47:d5:d7:51:6f:bd:e1:17:aa:4a:7a:30:5c:
cf:b7:eb:d6:0e:33:34:75:04:59:3b:43:19:d2:ac:4e:b0:68:
ce:d4:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:13 2026 by rpki-client