Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
File: 0Q44sLejPvOhbhVDNAKYfW1njaE.mft (raw, json)
Hash identifier: WJPeNSa0aM/rBpPc5QbZjfRet+NXKuE86PNTooiZCxQ=
Subject key identifier: EB:A7:39:8F:28:56:8B:09:BB:08:A4:89:3E:CA:6B:72:49:D3:F7:58
Authority key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Certificate issuer: /CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Certificate serial: 019F17F9A19265DCCD3B0ED166E336F179BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
Manifest number: 1632
Signing time: Tue 30 Jun 2026 10:01:03 +0000
Manifest this update: Tue 30 Jun 2026 10:01:03 +0000
Manifest next update: Wed 01 Jul 2026 10:01:03 +0000
Files and hashes: 1: 0Q44sLejPvOhbhVDNAKYfW1njaE.crl (hash: IxtDE9oafVRsi65xG6Fg62jndnucTl38ZeN7n3bZuGQ=)
2: phJ6M8N_zrI_IBZJHi5JECkFqfg.roa (hash: uo9pYnUB/RDMAdAyJLZVD99p6FFm8bpqEEb9g4ygjVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:a1:92:65:dc:cd:3b:0e:d1:66:e3:36:f1:79:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Validity
Not Before: Jun 30 10:01:03 2026 GMT
Not After : Jul 1 10:01:03 2026 GMT
Subject: CN=eba7398f28568b09bb08a4893eca6b7249d3f758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:5a:0e:ca:74:af:ed:ef:b8:e6:d1:fd:ae:
ba:39:7f:4a:07:ff:f6:d5:a4:d4:d6:97:09:5e:38:
40:73:61:77:4b:2b:54:7f:83:01:66:2d:27:68:f3:
ce:a9:28:40:27:24:97:f0:09:c8:65:b3:26:cc:29:
2b:c0:7c:ba:c9:60:ba:42:57:90:42:d0:99:ed:29:
b6:8e:ce:a4:11:01:1e:a3:33:ed:7f:99:19:7a:30:
24:60:52:4d:15:71:02:bb:25:0e:f5:1f:43:1d:2c:
ef:ac:64:d9:06:53:10:8a:05:89:4f:00:71:53:77:
87:07:02:11:e6:f4:b9:7b:28:60:df:fb:82:6b:52:
21:5a:aa:9c:39:a4:5c:cf:3e:33:17:28:ea:f0:a5:
49:5e:9f:cf:d4:90:4c:1c:fd:77:7b:76:9d:6a:ab:
21:75:a1:9f:a9:a6:24:fe:a0:58:9b:54:5e:11:f4:
18:c2:e4:77:bf:eb:9e:69:f1:9d:e4:fe:93:c0:ba:
05:98:bd:04:e2:a5:02:a2:a2:60:b5:67:69:e2:06:
01:df:27:b8:bf:c8:62:6f:95:9f:fc:14:21:2b:e9:
a4:88:2f:30:e8:2a:97:f1:f2:7e:53:c0:c1:6e:5b:
49:23:d2:fe:83:68:7a:1c:38:50:73:33:31:08:81:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A7:39:8F:28:56:8B:09:BB:08:A4:89:3E:CA:6B:72:49:D3:F7:58
X509v3 Authority Key Identifier:
keyid:D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:04:1f:ee:70:1e:38:9d:27:d8:b6:36:e0:97:72:85:93:1e:
95:35:f7:4e:a2:06:03:38:7f:0d:46:74:b8:98:4b:cc:27:c4:
c5:ee:77:b3:f9:66:84:80:47:ec:c1:4a:53:aa:5e:e5:56:fb:
f3:74:05:b4:db:d2:df:cb:4d:be:59:ac:8c:20:6b:1f:8b:fc:
d8:cd:0f:0e:f2:de:4e:f8:73:a4:d1:a0:70:39:a5:ea:72:7f:
95:d2:7b:e9:07:94:09:ab:f1:8a:60:2a:5f:8a:6a:b8:6c:72:
c3:03:71:65:70:c9:b6:a1:e0:40:0f:cf:8c:af:5c:ec:ed:42:
03:f4:32:6e:66:76:62:b3:ea:cf:87:55:2f:99:4f:a4:bf:ce:
05:d7:a2:7c:2a:83:41:a6:ac:de:72:33:38:41:13:fd:71:57:
0d:7e:ad:45:8a:e7:b9:4f:41:11:ea:66:f9:fe:fb:a1:6e:3e:
83:d5:54:29:c7:82:ed:9b:9d:92:6b:c1:98:3b:52:b8:e2:b9:
a3:8e:17:49:b1:f5:7d:0c:1f:ea:61:d7:13:bf:f9:4a:69:49:
5d:4b:ca:99:7c:44:26:9c:c6:8e:c2:24:99:db:0d:19:bf:5f:
3e:f5:e3:03:ce:ce:82:2f:3f:ec:e2:8c:92:a4:8a:ec:eb:7e:
9f:85:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:00 2026 by rpki-client