Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: rl/MX+ekfEuurw8gY9kBAbsYstM22gCcU7ITTDrgGSg=
Subject key identifier: 55:C7:2D:A8:B3:AF:4A:02:6A:52:90:DC:2E:5E:BF:5E:B5:D2:C2:A2
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 019D3941AF709F725574201259AD4C1AC036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0FEC
Signing time: Sun 29 Mar 2026 11:01:39 +0000
Manifest this update: Sun 29 Mar 2026 11:01:39 +0000
Manifest next update: Mon 30 Mar 2026 11:01:39 +0000
Files and hashes: 1: 1-9nncl2Rz3YTcRI0RsbvVm3atY8.roa (hash: fiUr+kWvE5jBfhGIbu/5gFTDAF5L/xbwDDasP7mBO+8=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: Mlbf2sDOe/WRB0ECeDxVbFb70xutxevGIOCqekNZ/tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:af:70:9f:72:55:74:20:12:59:ad:4c:1a:c0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Mar 29 11:01:39 2026 GMT
Not After : Mar 30 11:01:39 2026 GMT
Subject: CN=55c72da8b3af4a026a5290dc2e5ebf5eb5d2c2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:38:b4:46:23:2b:d4:0f:d0:71:7f:7d:bc:
a4:5e:4a:b9:61:0c:42:bd:55:3f:97:59:0c:78:8a:
d1:7f:dd:cb:1c:bd:9a:fe:41:9e:e3:73:ab:73:cf:
47:8d:5f:76:3d:49:c8:28:f5:15:28:84:ee:d3:b0:
20:06:41:1b:59:e2:16:30:76:fd:d5:f1:4a:5a:3a:
4c:fc:b6:d6:41:d6:33:f7:9d:1c:c5:b2:88:48:7e:
8f:dc:ff:3a:7e:0d:15:93:f3:3b:f3:fe:1d:bb:d3:
4b:de:a1:5d:6e:86:c2:9a:91:89:27:2a:dc:37:29:
d1:30:cf:0a:38:44:81:c1:00:59:ff:7e:7b:fd:29:
00:0d:17:3e:65:7c:a2:f5:7b:b4:a2:57:d2:3b:e5:
1d:c4:f4:12:66:14:88:9a:a3:90:61:d8:4e:5e:10:
4a:05:74:c1:64:d6:d2:68:a7:53:a1:dd:3a:91:33:
f2:90:fa:56:6c:93:0b:71:e4:f2:12:cc:46:3a:93:
c7:09:6e:79:6b:42:93:ba:16:e0:b3:1d:95:b0:dd:
9b:51:fb:ec:9d:00:6c:2c:37:40:36:4a:76:2c:ce:
1c:97:05:46:7c:10:6e:41:b7:e2:a7:ea:3f:bc:90:
51:cd:7a:2b:22:e6:38:2f:76:fd:56:b3:4c:e0:05:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C7:2D:A8:B3:AF:4A:02:6A:52:90:DC:2E:5E:BF:5E:B5:D2:C2:A2
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6f:08:c3:f5:ee:9a:36:48:7c:de:2a:8c:d6:91:65:2c:81:
27:c0:a2:45:e2:e4:0e:c4:30:f9:e0:70:45:98:ec:0b:d3:ef:
5f:84:ef:21:ec:e3:a8:52:1a:be:1a:eb:b9:64:62:8a:61:38:
94:ef:f4:29:56:2c:b2:a0:94:e1:50:de:7c:c3:05:88:02:a2:
c8:9b:d8:42:7a:44:8c:e7:7e:13:6d:e8:c4:0c:9b:a3:1e:17:
ea:5b:0e:49:f8:a2:45:22:d5:94:c6:59:59:9f:4d:2a:39:10:
0b:bd:2b:65:31:b4:74:dc:99:30:69:66:6c:09:22:b7:93:c5:
39:d6:cb:2c:f0:f2:d9:79:50:5c:29:b9:ce:7b:1d:7c:e6:ac:
11:e3:1d:ae:94:42:2e:20:9c:28:4a:a7:e8:04:39:18:72:11:
79:36:ff:8e:0e:7f:dc:09:1a:86:a2:b9:ab:7e:f7:ed:11:dd:
48:9e:f6:cf:55:be:9d:84:5e:5d:ea:69:d5:70:68:e8:31:7d:
51:98:c0:ed:7c:b8:cd:ad:62:40:7c:f6:1b:10:20:b0:d3:a9:
4d:40:c1:0b:b6:d7:c6:53:f5:fa:52:c2:99:80:8a:aa:11:31:
6f:8f:1d:70:cd:ce:45:ed:84:87:88:00:fc:44:45:0e:2d:f5:
ee:b0:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:46 2026 by rpki-client