Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: V2st759kwxiHHzVw+DqSqoFtK+Hxoqp4CXsQeTFMXtE=
Subject key identifier: 56:88:DA:8F:59:AD:1D:86:BE:9C:55:8D:3E:3B:BD:98:BA:06:1E:DF
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 01A0257B740804A73362C60702301F85C2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: 04A2
Signing time: Fri 21 Aug 2026 18:00:42 +0000
Manifest this update: Fri 21 Aug 2026 18:00:42 +0000
Manifest next update: Sat 22 Aug 2026 18:00:42 +0000
Files and hashes: 1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: BGs+IqLLMB9QbYTYZwlptvns3lDlc+LtVCSNYhkmNmQ=)
2: Lpz2qCyi_pclLucNORkTQKN3m6Y.roa (hash: Q2l7VmCgH626w3ti2dW3eJLOPal4uK77R7IRCnO8dUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:7b:74:08:04:a7:33:62:c6:07:02:30:1f:85:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Aug 21 18:00:42 2026 GMT
Not After : Aug 22 18:00:42 2026 GMT
Subject: CN=5688da8f59ad1d86be9c558d3e3bbd98ba061edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:d6:e9:f6:35:c0:5d:ab:a0:69:58:0e:e3:
97:30:47:bd:89:17:85:f1:b1:f0:7c:b7:05:71:a5:
44:60:55:a2:41:69:5c:4b:6c:10:5a:a6:24:b9:02:
83:e7:93:9a:49:75:ac:11:3a:c6:fb:eb:3e:48:31:
38:d9:40:8d:ce:98:a2:9e:c0:d8:6c:dc:8a:a5:78:
74:f8:b4:0a:db:d0:d4:bd:2e:4c:70:6f:5e:d5:f9:
bd:2f:72:2a:c9:b6:ad:5c:21:b7:4a:ff:8b:a2:e3:
93:24:e7:26:4a:80:74:ec:e2:21:8c:4e:a1:f8:2d:
10:4f:2f:ec:b6:f2:fe:ae:37:11:08:54:0e:76:6d:
b1:8c:8d:f5:6e:40:de:ae:b6:8d:4a:23:1d:54:a8:
f0:aa:c5:0c:ed:98:fa:d4:77:59:c5:74:67:d3:bd:
f4:ab:c0:e0:82:2e:00:28:e4:98:62:d2:93:d8:65:
af:be:52:af:58:fa:8d:b6:d8:a9:0a:58:89:1b:ee:
6e:0e:73:7f:37:17:95:e5:b6:75:ac:cd:4e:3a:5e:
ec:8a:91:f4:2c:ae:c0:a2:ea:13:cb:08:c5:7c:54:
1f:44:a1:dc:cf:85:5b:4a:2e:0b:09:58:4b:75:ca:
79:9b:4f:b0:dd:f9:d1:07:be:b1:90:9b:17:3c:ff:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:88:DA:8F:59:AD:1D:86:BE:9C:55:8D:3E:3B:BD:98:BA:06:1E:DF
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:c4:95:13:74:03:9a:04:87:1a:eb:df:6f:db:a0:ae:43:20:
b0:0a:83:77:61:53:16:4e:66:12:7d:a9:5d:ce:1f:aa:67:41:
29:20:d6:8e:bf:2f:80:9a:8b:1d:43:f0:87:2e:b8:49:25:ba:
a7:e6:e0:a4:1d:8c:43:73:5d:8c:a5:69:71:3a:fa:34:da:51:
36:3b:92:95:62:ef:1e:7d:67:12:f6:a8:23:5e:ca:9d:e1:16:
42:c7:5b:2c:01:8c:40:28:1e:6a:18:3e:82:7e:b7:d2:fd:b6:
cf:5c:f4:e2:b3:e0:19:af:37:d9:04:fb:19:5b:61:6e:a4:bf:
37:0d:d8:e9:38:1f:d8:e8:1f:d4:41:a7:af:e8:50:27:94:d0:
40:c6:9f:4f:74:14:f9:a9:91:33:4f:8f:6e:38:53:fe:d4:f6:
4b:76:7d:78:5b:61:98:d8:0b:73:ac:ca:11:44:ac:59:8f:c1:
ad:4c:6e:17:60:44:af:38:1a:29:aa:fc:3d:4c:85:7b:97:ff:
a7:6a:c5:3e:6f:32:c1:de:88:6d:55:00:83:ea:95:bc:a7:7d:
b7:da:a5:d3:f8:0f:07:a3:a0:7b:3a:c1:bb:65:c0:dc:2f:2c:
47:4a:5c:f2:86:17:48:c6:71:8d:6d:04:61:f0:23:18:96:9d:
00:5b:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:08:57 2026 by rpki-client