Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: 0x/D70Q81DDxO1TyDLiJ37j18C7autsQgQDSEtnqvdg=
Subject key identifier: 9D:2D:9C:70:53:D8:81:5C:F3:92:C5:CF:BA:40:03:21:5A:9B:00:2E
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 019E3FAF051081D9C7095E2818A689B1D054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 10A5
Signing time: Tue 19 May 2026 10:01:35 +0000
Manifest this update: Tue 19 May 2026 10:01:35 +0000
Manifest next update: Wed 20 May 2026 10:01:35 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: DPZdSdH/ISUdvSFAkpTTZG/jwMhJuUZgZM3iM+QT30c=)
2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:af:05:10:81:d9:c7:09:5e:28:18:a6:89:b1:d0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: May 19 10:01:35 2026 GMT
Not After : May 20 10:01:35 2026 GMT
Subject: CN=9d2d9c7053d8815cf392c5cfba4003215a9b002e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:59:cc:76:d1:7b:e7:70:57:d6:2c:a5:dc:
26:37:16:a0:33:49:e1:c8:70:11:84:e0:d7:07:0a:
3e:25:2b:74:99:c2:1d:07:f2:da:15:47:16:c3:3b:
1c:f1:b9:96:2a:9c:b5:46:d9:2c:ba:bd:e8:33:fe:
1e:bd:e0:bf:ea:07:7a:85:1f:cc:82:ff:b8:8e:21:
32:55:6c:91:bc:30:ef:a5:01:a9:e9:97:19:36:b5:
29:c2:40:6b:7f:aa:e2:1a:5d:8d:97:dd:84:08:80:
94:8c:ed:58:e6:43:e7:4c:42:0c:e6:77:76:10:ce:
3f:b9:36:c8:6b:75:5d:2a:6d:8f:61:03:92:87:cb:
dd:18:2d:0f:66:9e:68:f9:03:07:bb:81:ce:d5:71:
09:9e:c8:90:ad:19:3c:70:ed:e9:ef:e9:50:f6:d7:
8d:37:33:9c:d6:78:59:ab:a7:d3:f0:cd:32:d0:1b:
7a:48:9b:1c:97:4a:cc:27:57:2b:1c:83:ef:04:18:
19:bf:80:7b:66:3a:04:0c:89:ae:d2:1a:3c:77:32:
f6:1f:19:9c:db:06:ce:82:6d:59:0f:c7:11:54:1a:
a5:59:95:1a:ca:b1:46:26:04:20:72:1a:e9:0d:e6:
c1:c7:15:b0:fb:d9:02:91:25:55:ef:44:77:2b:9b:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2D:9C:70:53:D8:81:5C:F3:92:C5:CF:BA:40:03:21:5A:9B:00:2E
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:32:66:e4:93:8f:20:7d:1d:20:95:79:dc:72:5c:4c:29:f7:
00:0e:be:b9:8d:e4:da:7d:5e:fa:a0:ee:99:f5:84:15:e4:55:
36:16:5c:42:86:ac:ba:17:0c:19:fe:d1:73:33:4d:7a:a9:7e:
64:98:de:49:63:6b:72:d8:04:f9:22:c9:04:ac:da:fa:60:dd:
dc:51:c7:10:29:6d:c1:8c:63:7b:6e:86:6a:ac:16:9f:e9:33:
4b:73:ad:3d:79:b0:f1:67:60:1a:87:db:7a:dd:4d:40:d9:de:
47:c6:ed:db:d7:b3:7e:dd:b4:ce:6d:61:a3:d1:8b:d3:5b:51:
c7:98:bb:b6:32:31:7c:00:f5:e6:12:3d:b7:38:ea:a7:48:bf:
20:43:f6:1a:e0:2d:31:db:96:6d:c5:2e:9d:41:65:71:a0:7c:
34:4a:ce:38:24:84:e0:f2:06:61:14:a4:31:07:2d:6d:46:b5:
f8:2d:f5:d0:a5:37:33:fb:38:ec:34:e2:16:83:d6:97:29:e2:
95:00:13:d5:8e:80:39:c7:20:e6:bb:53:33:9e:66:9d:42:11:
1c:74:5b:d0:bb:bb:c2:00:17:51:08:04:9f:a2:42:6e:4d:b2:
7d:b5:a7:bb:f5:a9:81:6f:6c:7c:d4:86:47:bf:1a:24:ad:91:
0d:4c:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 15:51:47 2026 by rpki-client