Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: s6J4y02Uh28xLA8i9XxolQyRhK351ZIVXiXgQBvFhUg=
Subject key identifier: D4:7C:28:0E:F1:35:13:14:BF:D6:C7:81:04:62:C5:9D:BA:D0:5F:F4
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 01A1065C62DF1466255BA9454EDFD57923A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 1215
Signing time: Sun 04 Oct 2026 10:01:20 +0000
Manifest this update: Sun 04 Oct 2026 10:01:20 +0000
Manifest next update: Mon 05 Oct 2026 10:01:20 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: HLHPokH/I4q3P+FurvGJiBDLgHHvfqu2LAF0slL+ueE=)
2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:62:df:14:66:25:5b:a9:45:4e:df:d5:79:23:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Oct 4 10:01:20 2026 GMT
Not After : Oct 5 10:01:20 2026 GMT
Subject: CN=d47c280ef1351314bfd6c7810462c59dbad05ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:49:d3:09:d1:76:8f:76:e9:2f:e4:c5:0d:
9d:89:49:46:29:35:51:3a:ca:b7:f4:bb:a8:36:19:
77:d7:0e:87:9d:ea:4f:1e:6a:34:7f:8a:b4:b2:61:
89:b6:9c:3f:a0:5b:d5:26:ee:12:73:3e:21:3e:ea:
4f:f3:80:5f:70:68:3d:6c:d5:88:52:68:5f:f8:df:
c1:63:c0:75:f2:75:90:cb:1a:8a:5c:f3:1e:d0:dc:
67:a8:03:69:36:24:3f:c0:4f:23:85:4f:5e:2d:fe:
37:e3:9c:0f:02:9f:a7:61:25:7f:41:6b:e7:02:6d:
e4:3c:27:b7:19:6d:8a:04:9d:a9:50:9d:14:8b:f2:
15:df:e1:b2:9a:77:d5:b2:a4:6d:c6:32:5a:5b:30:
16:a4:3d:4c:70:72:d8:0d:29:61:50:7d:3d:d0:7a:
38:19:20:ea:13:bb:52:ff:27:fd:c6:a1:73:e7:67:
63:ac:43:7f:b2:8f:1d:2f:a2:fb:a3:d0:ca:b8:25:
78:df:f3:c2:02:ae:d3:96:ef:2f:c2:84:eb:bb:d4:
77:b7:34:46:38:c9:45:37:54:d9:0c:4b:61:a0:e9:
cd:d2:d9:32:32:9a:32:c8:b9:18:ca:a0:f7:35:21:
3f:24:8f:1e:6a:e1:c7:c7:ca:8d:81:fd:b9:f6:31:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:28:0E:F1:35:13:14:BF:D6:C7:81:04:62:C5:9D:BA:D0:5F:F4
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8c:67:9c:41:65:f6:01:bf:7b:2b:72:af:74:49:3d:66:19:
92:bd:f2:d6:d3:43:88:8f:a2:21:da:2d:86:d1:8c:6a:f4:d0:
ce:a2:f1:ae:6f:0e:64:99:3a:03:06:92:71:b1:1a:2d:1c:52:
b0:c0:95:13:3f:32:10:56:28:fd:29:e4:f7:08:72:af:37:0c:
ab:3c:58:f4:a2:e3:62:67:3c:32:a3:34:cd:40:cb:8b:00:bc:
74:5e:76:b3:99:95:e0:18:99:32:13:a0:ea:9b:72:73:67:02:
f3:0a:07:80:c3:35:c0:c8:9c:70:c1:02:d5:8d:c6:87:91:d8:
2a:56:4e:6e:40:29:95:b1:0a:2a:a1:89:c7:95:76:e6:e3:12:
96:e3:1f:72:b4:4e:58:7b:c9:9a:79:a3:44:fb:59:ca:50:3c:
f8:22:a0:18:9b:e9:b4:d3:a2:0f:c3:f2:75:60:b6:61:37:c6:
43:c9:84:9a:bd:2c:35:61:d9:f1:db:f5:0d:5b:81:0e:f5:f6:
ba:2a:ca:7b:eb:4d:de:f5:a7:3a:01:2c:77:a2:03:b5:32:a3:
58:26:e8:0e:a2:71:41:d8:53:54:c2:6c:6b:30:0e:2f:9b:86:
89:48:64:fa:fc:54:24:cb:48:93:ac:50:43:90:05:0d:ed:2f:
c6:c7:7e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:48 2026 by rpki-client