
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: DBlGyfjDDPr9Dq1seMxWcuKtitZu02SkMvzbYhrW890=
Subject key identifier: DD:7A:62:5C:13:A4:93:42:9E:5B:BF:5F:14:8B:80:04:C6:90:89:CA
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 01A0111967FCD296E2BC0260CA77E5316CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 1196
Signing time: Mon 17 Aug 2026 19:01:12 +0000
Manifest this update: Mon 17 Aug 2026 19:01:12 +0000
Manifest next update: Tue 18 Aug 2026 19:01:12 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: FDBBZP2WG06xMORbCv/qwTP6D2Bmhwrxibt9hTDv1sg=)
2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:19:67:fc:d2:96:e2:bc:02:60:ca:77:e5:31:6c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Aug 17 19:01:12 2026 GMT
Not After : Aug 18 19:01:12 2026 GMT
Subject: CN=dd7a625c13a493429e5bbf5f148b8004c69089ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:bf:9e:f4:31:17:96:2d:42:2f:ba:31:77:
51:3c:13:52:99:99:f9:fc:60:a7:a0:44:c2:69:5a:
8c:99:30:16:01:e5:73:bb:f1:fe:0d:0c:e0:f6:40:
9e:01:f1:76:08:c2:bc:85:c5:a4:5d:36:75:98:96:
f8:85:c5:28:00:be:c9:d3:3f:c7:82:34:79:6c:5b:
ad:b0:cf:92:fd:9e:27:b4:3f:8b:7e:77:20:25:22:
cb:e6:eb:67:ca:11:f2:45:37:65:fc:44:20:93:8e:
46:ad:db:7e:96:0a:59:4a:e4:92:86:0b:28:e0:bf:
31:b5:cc:da:8d:f4:41:dd:ff:56:c7:92:5b:fd:d6:
49:f2:38:97:89:d5:62:02:b9:79:20:f7:da:1a:92:
32:9d:31:20:1a:17:c0:3d:1d:0c:94:a6:a3:73:d6:
8d:ed:2c:52:7a:a5:cc:8f:4b:aa:e9:55:7d:4e:f7:
87:ca:49:03:bc:a0:c3:0a:6f:b0:20:b2:2d:78:31:
dd:61:ce:cc:07:d1:6b:53:6c:80:2f:71:ff:99:a5:
53:c7:c9:95:c4:4c:22:9a:9f:03:8e:1a:a4:be:1a:
33:80:cf:ac:05:27:99:f6:1a:81:43:2a:a7:55:ad:
04:78:a1:f7:c1:9a:a5:aa:30:ef:57:8c:02:37:e2:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7A:62:5C:13:A4:93:42:9E:5B:BF:5F:14:8B:80:04:C6:90:89:CA
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d9:88:e3:ea:1b:bc:fc:39:1c:54:69:ad:cd:fc:4b:d6:68:
ac:cf:5b:2e:87:b8:9a:92:e6:88:ea:98:22:01:5c:07:e9:b4:
79:a7:35:db:d7:d7:73:fe:1b:34:db:83:02:2f:be:14:3d:18:
02:ea:89:90:2d:d8:14:a3:f8:05:67:bb:58:59:47:6f:b2:4d:
01:08:10:be:62:61:2f:d3:c0:85:c1:6d:a3:d3:c6:e1:b0:63:
43:95:0a:7d:f5:5a:f6:b6:cd:59:52:1b:08:5d:a0:4d:ee:ae:
2b:ae:9e:ee:e9:69:77:f2:3d:e2:b9:97:8b:aa:83:bf:4c:4b:
5e:27:e7:72:37:a7:32:8a:cb:72:bf:33:06:df:6d:f6:f9:52:
79:62:03:e5:f3:91:6b:e5:7e:59:21:32:9b:7d:e8:88:cc:b8:
1a:fc:c7:a0:80:50:2e:71:eb:84:23:65:6b:52:1f:fe:ab:1f:
f1:5d:ac:44:75:5f:b8:2a:51:09:db:ca:dd:e8:b6:69:c6:c5:
81:61:e7:9c:12:ed:c7:b5:c8:91:ea:43:03:d4:de:e3:31:90:
fb:4b:b6:9a:35:1e:26:2a:48:d2:b0:4a:ad:72:f6:df:f6:1d:
9b:92:05:7e:77:42:f0:8c:ae:e2:f8:44:63:4c:df:22:19:b4:
34:15:1d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:16:23 2026 by rpki-client