Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
File: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft (raw, json)
Hash identifier: /mFJIzsEuOSlxj5Q5rVHMwjpRFc7oMRDgwTdsj90ivA=
Subject key identifier: A6:F5:2B:93:1C:FF:A8:24:65:BC:7D:E8:95:05:B5:A3:EF:1F:1E:C6
Authority key identifier: D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
Certificate issuer: /CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Certificate serial: 01A04574EC408A4CB4F271A5FC81CCFFD274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
Manifest number: 78
Signing time: Thu 27 Aug 2026 23:01:25 +0000
Manifest this update: Thu 27 Aug 2026 23:01:25 +0000
Manifest next update: Fri 28 Aug 2026 23:01:25 +0000
Files and hashes: 1: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl (hash: dScVgq75aqjl4vFaW62pAlx6Lg6bX95M+XZruNpfZHs=)
2: 4eTqXPsY2k0nfIKnegQTKL9VsZc.roa (hash: J2j96Igp+h3cc2jy3MZ29Vf0gTNVfHTR+h+cL3q6LnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:74:ec:40:8a:4c:b4:f2:71:a5:fc:81:cc:ff:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Validity
Not Before: Aug 27 23:01:25 2026 GMT
Not After : Aug 28 23:01:25 2026 GMT
Subject: CN=a6f52b931cffa82465bc7de89505b5a3ef1f1ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:8e:30:e2:bb:a1:e8:96:72:63:5e:c9:0a:
2e:b6:f9:a8:11:fe:3b:23:25:10:a6:27:52:ae:23:
3a:aa:95:16:31:95:50:af:5e:e1:5e:5a:65:d4:c7:
38:ae:83:fe:38:d0:bd:d0:06:3d:cc:80:3a:f9:04:
6c:d4:03:bb:0e:72:b0:58:bc:b4:2b:0f:c7:99:d2:
a6:73:b0:dd:b5:61:95:d3:c4:da:3b:90:3c:c7:b6:
3b:41:c6:47:27:04:01:bd:26:4a:a4:e5:66:a7:8a:
92:ba:fc:21:7a:76:21:aa:fa:22:6f:0e:1e:fd:43:
49:78:6b:b2:1e:df:fe:55:d1:45:e9:13:f7:e4:42:
34:7d:c3:a4:df:c4:0f:c4:03:9f:2e:90:48:fc:bb:
8d:aa:77:e9:b2:3e:b8:9a:96:2d:a4:d4:d3:a9:37:
42:16:a8:d3:e6:1b:9e:ce:28:25:93:7e:52:49:65:
e0:39:5a:86:a1:6f:6e:0d:a8:9b:ef:a7:90:bf:6e:
61:cf:b2:89:1c:db:e2:c4:be:36:17:b7:b4:80:f4:
b7:e0:cd:5d:52:ee:37:06:57:88:19:ee:c3:f2:22:
dd:32:17:d6:85:a6:e7:73:17:3a:76:26:21:e9:50:
f9:1e:3d:bd:80:e2:c8:46:48:54:61:f0:c5:c1:68:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:2B:93:1C:FF:A8:24:65:BC:7D:E8:95:05:B5:A3:EF:1F:1E:C6
X509v3 Authority Key Identifier:
keyid:D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:85:e1:5d:95:30:bb:93:0f:19:da:db:45:13:1c:30:2f:f4:
71:56:ab:87:35:06:91:2f:a4:0a:d7:89:34:ec:a4:3a:19:11:
68:bd:5e:78:46:a4:d2:81:ed:5a:de:ad:2d:d9:aa:24:66:be:
a7:9a:33:a3:f4:84:56:e7:5b:a8:98:79:68:ad:2c:35:af:96:
6f:36:1d:3a:2e:eb:e7:75:35:ab:61:6b:49:bd:66:86:51:df:
a7:84:6a:9f:7b:60:c5:a7:e1:20:80:e8:7d:79:fe:ab:5a:8a:
4b:2f:3c:cd:dd:07:f7:f4:fb:2d:e8:61:ad:e9:2f:2a:ea:19:
f5:14:90:b6:92:4c:00:02:9e:77:09:84:10:c4:22:48:05:e2:
73:e4:88:9c:ce:96:88:bc:a5:ca:94:18:48:03:bd:15:53:78:
48:0d:09:c8:da:0c:7d:06:53:c1:49:a7:fc:a9:5c:72:82:68:
bd:0d:b4:59:6d:74:0a:dc:9d:1f:60:4d:c4:f6:d0:79:92:0f:
d8:a5:f0:e5:a3:24:07:4b:55:ca:ea:79:4e:cd:5e:af:74:d5:
c7:64:9d:46:7d:07:9e:92:59:1f:08:9c:e0:52:5c:ef:2a:27:
bc:86:a5:93:86:fd:b7:4b:fd:27:85:02:0e:a8:f2:34:78:d6:
13:0b:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 05:23:00 2026 by rpki-client