Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: bJPWLKyNohQi4GoKhC7i/L/lBlhcbolQsl9nDS9JUXI=
Subject key identifier: 62:5C:4B:A9:7D:CD:14:E1:7C:EF:39:6B:41:15:9C:59:42:18:85:02
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 01A17EBD3F1298DB7039D3682651BC36004C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 19:01:33 +0000
Manifest this update: Tue 27 Oct 2026 19:01:33 +0000
Manifest next update: Wed 28 Oct 2026 19:01:33 +0000
Files and hashes: 1: T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa (hash: SXBhd3/vnyIoPB/kDRi62FVnMbysfno7J5T9Eftc8tY=)
2: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: 9ahxDF6vSxMavcVgweVBbwLXiG8qXs4rzimyncNdYWc=)
3: tSpDrZGtdp0mH1aXKivR6nDrhuY.roa (hash: xkSEr+C7WhhCLocSo1zhSLhZi6gcFYi1jnV4sR3gnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:3f:12:98:db:70:39:d3:68:26:51:bc:36:00:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Oct 27 19:01:33 2026 GMT
Not After : Oct 28 19:01:33 2026 GMT
Subject: CN=625c4ba97dcd14e17cef396b41159c5942188502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:8c:b8:1c:1a:22:9f:aa:ad:a5:fc:9b:74:
79:f9:7f:af:ed:a9:e4:bc:f8:08:27:11:e2:ce:e4:
4b:8b:b9:11:66:e4:c3:b5:45:7b:20:64:db:89:37:
50:e6:bd:37:16:79:ed:9f:8a:ee:42:4b:53:dc:93:
d0:80:19:01:85:9d:1d:55:3b:d3:76:ab:c4:14:dd:
fe:f3:d7:70:43:63:5d:29:d7:ce:a1:21:4b:29:97:
e5:a5:2c:06:a6:03:a0:02:04:32:bd:41:ab:12:9a:
a9:ec:77:65:5d:48:67:8e:d5:47:38:ec:54:b3:4a:
c1:f4:cf:a5:3a:c4:b4:05:61:c4:ea:95:02:b4:2f:
97:13:41:55:9b:3a:e7:59:89:c6:bb:d6:f5:22:d3:
d3:77:6e:fd:8d:12:2e:d9:aa:7e:7b:80:f1:a5:ba:
ec:b3:e7:ee:bd:9d:b3:d8:09:0e:f4:54:1e:5c:03:
20:34:2d:8a:d8:50:44:f0:ac:23:ce:b5:88:0d:35:
03:7b:dc:0a:6b:34:1b:ed:a8:ba:25:7b:9c:a2:af:
f0:3c:2a:b1:64:3f:54:a1:67:77:fc:d0:02:e1:2b:
69:0f:73:20:16:16:21:11:12:06:df:2a:ef:0c:cd:
f2:25:1a:a0:ab:4a:60:fd:98:0c:f4:34:f6:47:34:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5C:4B:A9:7D:CD:14:E1:7C:EF:39:6B:41:15:9C:59:42:18:85:02
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:80:86:c0:98:fe:97:e4:c1:f4:5b:bf:f9:70:19:77:8b:90:
fa:88:77:cc:32:4c:65:ae:74:89:05:ff:ec:c4:c9:2a:a6:f0:
60:0c:4f:aa:db:24:de:9a:10:95:bb:23:56:34:56:b5:2e:57:
da:6b:40:f8:03:66:75:11:9a:8b:68:1b:1c:a5:bc:63:13:62:
1f:ba:a6:f6:6b:6a:72:02:be:53:f8:ae:44:38:3f:32:4f:1a:
c0:19:8a:1f:50:33:20:a0:cc:2f:b8:d1:24:20:c9:0f:bb:c8:
35:a4:f6:2d:6e:6d:09:95:be:46:02:4a:76:7a:de:73:a9:e7:
5d:59:72:c1:18:1e:03:be:8b:37:ce:37:8c:31:80:ea:86:49:
0f:07:a2:fe:da:67:12:bc:52:0f:f2:a7:14:0a:2c:2e:92:15:
bb:4d:27:00:bc:77:77:4f:66:8f:bf:18:43:ed:5c:07:a1:56:
0a:ed:ea:d6:7a:51:74:d9:14:41:40:f4:b8:f9:77:17:f7:3b:
58:97:07:fd:21:96:40:50:ed:0a:42:b9:3c:a8:0e:25:ef:2c:
df:16:16:33:df:4d:8d:ca:b8:a4:4c:be:e1:f1:23:ff:59:87:
a8:f6:1d:c2:a5:16:0e:b1:6a:cd:80:60:5f:8f:71:84:e3:56:
d0:7c:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:50 2026 by rpki-client