Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: tqyvFxIwb5hkbbcHEjXxLVERapQj5PMJ7nJQ3yifgM0=
Subject key identifier: 6A:20:6D:86:8D:3B:84:98:54:2B:32:1A:F9:F3:88:48:B6:75:87:4A
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 019DDD6844944E0F1E97EA17CEFA85AD273D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0D0E
Signing time: Thu 30 Apr 2026 08:01:31 +0000
Manifest this update: Thu 30 Apr 2026 08:01:31 +0000
Manifest next update: Fri 01 May 2026 08:01:31 +0000
Files and hashes: 1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: vWnOlyYOtgm7fydOgwLAb+EWRXpWcJKs3iekmdYdIn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:68:44:94:4e:0f:1e:97:ea:17:ce:fa:85:ad:27:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Apr 30 08:01:31 2026 GMT
Not After : May 1 08:01:31 2026 GMT
Subject: CN=6a206d868d3b8498542b321af9f38848b675874a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:28:28:94:06:bb:35:10:f2:9a:b1:3b:ab:
6e:e1:57:88:2b:a4:2f:6a:97:9c:51:b5:ad:8f:ea:
ca:5e:7e:6d:89:da:b7:a1:a4:af:4f:a5:a9:7d:df:
9c:93:53:3e:50:58:6d:19:19:70:56:2e:95:33:82:
40:09:98:b3:d1:47:5a:de:7e:6f:30:ac:c0:03:7f:
c7:be:6e:9f:db:d7:73:c9:50:d3:db:47:b1:49:84:
b3:ab:dd:86:5b:0f:51:f9:ee:83:34:34:fc:ab:f9:
c3:f6:da:20:cb:3f:52:c2:4d:14:16:b8:7e:fd:6c:
4a:50:fa:2f:7d:64:e7:1a:05:ce:33:59:d7:27:7c:
79:34:e4:9c:ea:10:20:32:18:18:9f:00:c9:95:20:
96:7b:b2:45:3d:73:ad:b9:e5:bd:b0:84:93:08:af:
d4:39:16:70:a8:cf:71:36:b6:e3:d8:26:3b:c0:ae:
70:7c:dd:41:70:f5:6f:7f:c7:2c:d2:d1:2e:b1:0d:
02:34:3e:0f:05:f5:85:39:21:a3:76:23:8a:a6:e0:
2c:a9:e9:b0:23:6e:cd:a9:ef:46:3a:99:0e:de:0c:
a9:3a:f6:89:0a:0b:27:4d:21:b6:2d:14:a0:c7:1d:
6d:8e:19:60:a4:7e:94:9a:f7:fa:17:9a:eb:12:44:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:6D:86:8D:3B:84:98:54:2B:32:1A:F9:F3:88:48:B6:75:87:4A
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6b:a7:27:45:4e:7f:f4:bb:8d:a8:89:69:18:b8:99:27:de:
be:ea:19:f7:2f:bc:af:a6:6c:e9:f2:18:81:86:57:82:31:ca:
a4:63:d5:07:c5:62:2f:a1:65:dc:09:02:c8:07:29:26:e8:bb:
ae:0c:ac:53:fa:97:6f:7b:6b:50:cf:57:22:80:08:a4:9d:23:
03:40:04:59:70:e4:f6:ed:4e:fc:ab:8a:4f:4e:1c:1e:df:31:
98:4e:83:73:da:f0:9d:99:fe:d5:c1:86:b5:ba:8e:c4:6b:3e:
c9:08:da:76:97:5a:08:d2:01:1f:0c:aa:85:c3:89:11:64:c0:
5e:ed:16:02:0a:8b:d3:d7:39:57:55:5e:f7:2d:f8:a6:39:9d:
2d:1a:58:eb:1b:c7:82:ed:d1:b8:0a:a7:95:d5:1f:0d:71:be:
91:74:40:4c:58:49:ac:f9:d7:e8:63:2a:d4:ea:a4:c9:79:0f:
7c:3e:4a:68:9f:88:07:0e:b8:59:6a:97:ce:60:a7:2e:0b:d7:
f0:3b:00:da:4b:91:9d:a7:1e:fb:49:6d:16:4e:63:f7:f0:ed:
76:e2:17:19:b7:a7:57:20:a7:11:23:27:bf:a3:69:68:1a:fd:
ee:83:c2:3d:a0:9c:da:3a:d9:bf:3a:c2:a8:b3:d8:c8:22:8c:
98:da:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:54:49 2026 by rpki-client