Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File: 0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier: Oppa3Gd+qYKW4MudJu3pXbfNAhmnTWFTGlJ0HYalRpg=
Subject key identifier: 70:3D:8C:AB:66:24:91:A6:E5:21:E6:43:DD:4D:80:18:79:D0:41:6D
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer: /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial: 019CE1B47FCB398D7192B64DC2AE2873846D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number: DC
Signing time: Thu 12 Mar 2026 11:00:28 +0000
Manifest this update: Thu 12 Mar 2026 11:00:28 +0000
Manifest next update: Fri 13 Mar 2026 11:00:28 +0000
Files and hashes: 1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: djzFao/v1r6kI+YA91vAeAhKUBCn8q/YE8rNf5Xy1s0=)
2: IepspGCwPLMLBPzsExkQzO4QbNY.asa (hash: 8W3LBKMDCnMT8UFQAj2NhlyNWtdNB7dBnh/RCWdde2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:b4:7f:cb:39:8d:71:92:b6:4d:c2:ae:28:73:84:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
Validity
Not Before: Mar 12 11:00:28 2026 GMT
Not After : Mar 13 11:00:28 2026 GMT
Subject: CN=703d8cab662491a6e521e643dd4d801879d0416d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:1e:37:f1:25:67:5c:e1:12:c1:86:2e:5e:
38:0a:99:12:f8:4a:40:cc:5a:4a:49:0e:01:0c:3c:
f7:8a:68:8d:63:70:2d:7d:81:22:f8:67:b1:0d:1b:
09:19:82:d0:8f:11:17:b6:e2:12:d0:2e:36:5e:f0:
8f:c0:be:fa:49:3c:2a:37:c0:a5:24:5a:06:5b:3e:
ab:19:7d:57:e4:96:73:a8:89:f4:b0:90:87:b3:f9:
37:83:2f:4c:e9:d6:de:48:a0:c1:30:97:f1:26:99:
7d:69:42:7c:80:ec:71:45:2e:8e:0f:57:5f:c1:1e:
b1:c2:ad:e3:82:3d:66:7b:aa:ed:cb:4c:64:b8:ed:
ce:b6:1f:2e:d7:1c:94:f8:e8:d6:f9:fd:00:2f:6e:
9f:17:d4:7f:5c:3c:71:15:15:2d:34:69:19:6b:e0:
82:01:5b:cf:a5:2e:8f:08:3e:43:9f:2a:2a:b1:b6:
6d:67:3e:70:b4:17:58:d0:1b:fb:ef:ee:7c:d0:2a:
bc:fc:18:4e:c3:ce:c4:03:a0:a6:11:83:e8:97:d0:
c8:15:53:1b:bf:78:44:75:d5:85:24:0f:a3:60:19:
88:24:d7:d5:46:69:c6:d0:24:0e:32:dc:4c:a5:8e:
f0:30:37:a0:33:35:b1:d5:90:a9:f1:d6:00:2f:f8:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:8C:AB:66:24:91:A6:E5:21:E6:43:DD:4D:80:18:79:D0:41:6D
X509v3 Authority Key Identifier:
keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:cc:81:f1:53:15:64:bc:e6:cb:a5:73:92:08:e4:cc:0d:10:
4e:5d:85:14:d3:63:fa:28:da:d7:71:c9:3c:eb:42:0a:42:c1:
c4:e5:fd:ce:f9:88:db:e4:e2:57:17:d6:13:a6:4c:fa:3d:a1:
c8:50:75:cb:8f:dc:e3:a6:d1:77:93:42:0a:80:2c:6a:2f:a5:
5b:ab:54:20:c0:1a:14:03:a6:d4:43:67:18:3a:c8:50:71:24:
80:70:6c:8f:b9:4f:3f:e0:e6:6c:db:5f:40:cc:aa:a8:51:be:
2f:9a:2d:45:79:f6:86:73:fa:75:f0:d6:4f:e5:d2:46:56:85:
5e:b6:10:0b:ca:f0:c4:42:19:38:08:f1:a2:fe:81:8f:ba:75:
75:c1:5f:7e:48:00:a9:aa:fe:64:1e:43:5c:bd:8e:33:31:b0:
ae:50:ef:39:38:fb:f9:2e:03:b6:81:8c:33:bc:3e:c2:2b:49:
ff:07:ba:27:07:f0:19:82:cd:93:f2:d9:c4:da:ce:69:c7:ac:
80:2c:e4:6f:99:a2:6e:aa:97:3f:4d:c2:55:1c:86:d9:42:42:
73:e1:ac:7a:6c:14:f6:49:b6:61:6c:6c:d8:d8:cc:7a:84:a2:
30:1f:d7:ac:02:b1:83:6d:71:41:1e:af:61:f8:58:06:cc:11:
0c:26:a4:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzhtH/LOY1xkrZNwq4oc4RtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYTAzMWYxMzlkY2VkMmY3MzIxOTczMzU0ZjQ2YWFjOTcy
ZmFkYWMwHhcNMjYwMzEyMTEwMDI4WhcNMjYwMzEzMTEwMDI4WjAzMTEwLwYDVQQD
Eyg3MDNkOGNhYjY2MjQ5MWE2ZTUyMWU2NDNkZDRkODAxODc5ZDA0MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyEeN/ElZ1zhEsGGLl44CpkS+EpA
zFpKSQ4BDDz3imiNY3AtfYEi+GexDRsJGYLQjxEXtuIS0C42XvCPwL76STwqN8Cl
JFoGWz6rGX1X5JZzqIn0sJCHs/k3gy9M6dbeSKDBMJfxJpl9aUJ8gOxxRS6OD1df
wR6xwq3jgj1me6rty0xkuO3Oth8u1xyU+OjW+f0AL26fF9R/XDxxFRUtNGkZa+CC
AVvPpS6PCD5DnyoqsbZtZz5wtBdY0Bv77+580Cq8/BhOw87EA6CmEYPol9DIFVMb
v3hEddWFJA+jYBmIJNfVRmnG0CQOMtxMpY7wMDegMzWx1ZCp8dYAL/h+hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA9jKtmJJGm5SHmQ91NgBh50EFtMB8GA1UdIwQY
MBaAFNKgMfE53O0vcyGXM1T0aqyXL62sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHFBeDhUbmM3Uzl6SVpjelZQUnFySmN2cmF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iNDUxZjMtNGNjYi00YTA4LWFiNzgt
NjI3NDA3MjVmNzFhLzEvMHFBeDhUbmM3Uzl6SVpjelZQUnFySmN2cmF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9iNDUxZjMtNGNjYi00YTA4LWFiNzgtNjI3NDA3MjVmNzFh
LzEvMHFBeDhUbmM3Uzl6SVpjelZQUnFySmN2cmF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8yB8VMV
ZLzmy6VzkgjkzA0QTl2FFNNj+ija13HJPOtCCkLBxOX9zvmI2+TiVxfWE6ZM+j2h
yFB1y4/c46bRd5NCCoAsai+lW6tUIMAaFAOm1ENnGDrIUHEkgHBsj7lPP+DmbNtf
QMyqqFG+L5otRXn2hnP6dfDWT+XSRlaFXrYQC8rwxEIZOAjxov6Bj7p1dcFffkgA
qar+ZB5DXL2OMzGwrlDvOTj7+S4DtoGMM7w+witJ/we6JwfwGYLNk/LZxNrOaces
gCzkb5mibqqXP03CVRyG2UJCc+GsemwU9km2YWxs2NjMeoSiMB/XrAKxg21xQR6v
YfhYBswRDCakzw==
-----END CERTIFICATE-----
Generated at Thu Mar 12 18:43:00 2026 by rpki-client