Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: I+Oj2nQNtlRrKFhxisStc7a5Hy3NRxZgoiUDiBqVmvc=
Subject key identifier: 0D:4E:FA:71:43:79:77:B7:CF:DD:7A:54:27:03:3F:86:F1:5E:BA:C2
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 019D37F764D0DC3313E5537DB2644FE7AA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: uhBWtbzxETPglk/nP8M9YCpCXy70HWZYPUSfmybfWj0=)
2: X45FUcZNo-YtDvtPWevU4wJ2FEY.roa (hash: rSd13zzClfxZXjpfUKzjtwc06S4fldzcQ0W8TuRXJxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:64:d0:dc:33:13:e5:53:7d:b2:64:4f:e7:aa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=0d4efa71437977b7cfdd7a5427033f86f15ebac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:a2:b4:ab:25:cb:dd:96:9b:12:37:cb:45:
0e:c5:20:8b:95:f6:a3:72:9b:3e:d4:40:75:f4:0a:
63:e2:c2:3d:06:15:94:d2:6a:4a:59:b8:36:32:fa:
1f:ab:19:2e:29:16:7b:ef:49:b6:19:f2:b8:47:b4:
27:eb:8a:85:af:bb:c5:e5:9d:2f:08:cd:80:3b:53:
43:b8:79:4c:9f:73:87:5e:9d:6f:99:ec:be:18:47:
17:fe:75:b8:14:71:58:e4:c4:56:9a:ef:b8:58:25:
45:bc:4f:49:b7:8c:0d:0c:74:5d:58:1f:eb:58:58:
7b:ab:d9:9f:bb:4b:61:d2:52:ac:96:65:19:75:43:
2f:ad:2d:e7:85:cd:5f:f4:50:02:90:96:3f:73:d9:
90:a0:73:22:a2:72:11:c2:1f:83:f1:bf:82:0c:3f:
31:1b:f9:94:4d:3e:ba:c2:db:0e:38:ef:bf:9a:86:
82:ec:6b:e2:bd:ca:fd:5c:c0:8a:58:b9:12:91:fb:
d5:73:e3:cc:ee:91:86:27:86:e0:f3:a0:6d:91:c8:
df:f4:b1:f9:80:37:fe:56:5b:05:5d:f9:7f:b1:60:
64:ea:ae:e8:3e:ea:98:48:4a:77:ad:7b:7b:43:9a:
a1:4b:bb:aa:08:87:7c:ad:c6:b2:78:f5:e8:7e:75:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4E:FA:71:43:79:77:B7:CF:DD:7A:54:27:03:3F:86:F1:5E:BA:C2
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:77:34:76:aa:c5:96:16:2c:3a:60:1c:aa:a5:f1:27:0a:6b:
71:de:9b:48:f0:4e:01:bf:24:91:47:a2:b2:76:59:84:9f:50:
cb:ef:9f:7f:ab:e6:42:b0:7b:30:4d:47:da:57:09:4b:30:95:
81:13:47:6c:57:2e:fa:32:e8:c1:60:b6:3c:78:b1:09:e6:43:
d1:76:95:92:a1:c7:84:e2:95:0c:d6:7a:9e:e8:43:de:a7:e0:
d7:31:91:bc:23:6b:f3:e1:f2:b1:85:be:fe:98:2e:92:57:d9:
c9:77:8e:4a:4b:1b:fa:e5:b8:a3:5a:d5:d0:d1:b2:09:0f:fd:
f8:0c:36:92:bb:88:70:4d:4a:89:8f:b5:36:60:cc:d0:f6:0c:
fc:38:77:b1:ea:42:d6:a8:10:8f:1f:1a:d2:af:7f:9a:a3:f2:
32:75:2b:7b:fb:a9:12:ce:ed:7f:74:b1:62:fb:32:e7:35:89:
8c:26:d4:17:3c:8e:5c:d4:f1:33:a9:2c:5e:80:92:0d:e2:07:
18:80:5e:d8:37:4c:51:66:b7:19:43:f9:b7:61:d6:9d:aa:c1:
0c:15:25:6c:9c:8c:98:62:96:30:53:08:24:07:7d:f8:11:fd:
4d:cb:7f:83:bf:c7:d8:a5:47:d4:ca:78:fd:5f:02:a4:32:94:
ce:0b:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:17 2026 by rpki-client