Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier: E7Twgr3T8Mby3cHlimZf7B3YE8yazmgg0A/SZM2YCco=
Subject key identifier: 37:2A:F3:D3:06:4E:71:C0:3A:70:7C:FC:D4:70:7E:E9:3D:86:3E:7F
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial: 019D3977B6157705D01AC1F2C06F779F182C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number: 0B57
Signing time: Sun 29 Mar 2026 12:00:39 +0000
Manifest this update: Sun 29 Mar 2026 12:00:39 +0000
Manifest next update: Mon 30 Mar 2026 12:00:39 +0000
Files and hashes: 1: Ajd0L8XQdcyvJF9_JDszHwb-ypM.roa (hash: JhIrWGN9lZ7WVHOAnXcV9RrmyiG8gnQ8alzgC7IHdko=)
2: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: qcnDBqYedK50xmjJEmAC6LQkNikrSUHX41BEEIzZst8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:b6:15:77:05:d0:1a:c1:f2:c0:6f:77:9f:18:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Validity
Not Before: Mar 29 12:00:39 2026 GMT
Not After : Mar 30 12:00:39 2026 GMT
Subject: CN=372af3d3064e71c03a707cfcd4707ee93d863e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f3:84:71:33:ef:ae:f3:71:f7:a4:e6:ad:e8:
39:75:70:97:9d:67:ec:ac:61:d9:e4:26:8f:e0:cd:
c8:65:dc:60:66:5c:6a:59:13:12:b1:01:69:35:d0:
73:ec:02:4a:fb:c8:0f:0c:bf:d1:92:e4:e5:11:26:
c5:03:5e:91:59:0e:3a:1a:1e:ca:0e:c9:da:d3:6e:
07:5a:7c:0b:29:2d:c2:17:e6:63:f7:87:5a:6c:cc:
6d:a1:c9:63:72:b5:52:8b:86:27:bb:95:d6:73:09:
32:2f:b1:bb:08:08:91:d0:a9:a1:14:5a:ea:f1:3e:
7a:15:10:81:1d:09:fa:76:fa:51:1c:82:e9:65:6b:
50:d8:44:6f:db:2f:2b:17:18:53:95:99:cf:6c:68:
56:e5:7b:7d:75:1e:00:60:45:a4:9d:15:da:1d:84:
5d:6c:6b:21:24:aa:6a:0c:6e:e5:8e:ed:a9:69:2f:
fa:4d:ea:72:a7:1c:a8:68:40:64:2f:59:61:32:e4:
dd:06:da:ec:fb:77:19:0d:47:50:06:bb:37:b1:ae:
1e:e5:25:7a:57:29:c2:5c:84:08:c4:1b:fc:6b:f1:
7d:2b:5a:de:ee:21:d5:a3:e8:d4:3e:16:95:e9:dc:
7c:71:31:77:b5:70:b8:b2:79:9c:f4:fe:90:2d:e4:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:F3:D3:06:4E:71:C0:3A:70:7C:FC:D4:70:7E:E9:3D:86:3E:7F
X509v3 Authority Key Identifier:
keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:55:fb:8b:ef:cd:13:bd:bd:db:ac:2b:96:f4:0d:a4:52:e0:
e3:56:e4:1d:9e:28:59:36:03:7e:7a:1d:62:2a:07:15:1d:19:
bb:39:64:8a:f6:de:82:7d:eb:a2:bb:98:e3:53:eb:36:4d:ed:
be:c1:e2:01:58:6b:97:1d:44:a5:a9:f4:21:5b:a4:3f:ee:df:
d3:8c:de:95:dc:fe:8f:cd:4c:96:4d:ef:9c:d7:92:7c:81:b8:
91:94:a4:f6:73:2e:60:bc:85:28:ef:c4:d8:4b:61:e4:08:e8:
14:f7:3e:57:bd:68:14:fa:13:23:80:5b:93:f6:ed:aa:98:9d:
14:c1:2e:d0:de:d3:d6:91:28:3d:a1:b5:1f:2b:ce:88:bc:f3:
31:0c:ca:fe:35:34:71:50:bd:a2:48:e8:e1:99:d6:4d:a5:1e:
de:1d:cc:a4:5b:c2:41:f1:a7:7b:cc:5d:60:4a:2b:dc:da:75:
d5:6d:41:9e:57:40:0c:bc:fc:2c:15:89:39:ea:95:51:27:aa:
6d:83:42:3e:8d:3f:3c:30:56:b4:fe:4d:61:aa:9a:4b:cb:2f:
83:f6:a1:4d:d6:5e:80:1b:f3:81:ee:91:7b:98:87:29:62:eb:
c5:fd:0a:a2:06:7b:31:97:1b:4a:d6:96:6d:a8:1c:9f:a7:50:
f5:0b:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:02 2026 by rpki-client