Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
File: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft (raw, json)
Hash identifier: iRCGDRwg4UvIGXVW0XTi1f2MgWXvYwBQaOAW2nDoG7Q=
Subject key identifier: A0:94:50:46:6C:E1:47:9D:24:FB:3E:45:B4:60:95:94:02:13:03:3F
Authority key identifier: D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
Certificate issuer: /CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Certificate serial: 01A04084B60D7E4FE3D31EA4243EC207BAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
Manifest number: 035A
Signing time: Thu 27 Aug 2026 00:00:33 +0000
Manifest this update: Thu 27 Aug 2026 00:00:33 +0000
Manifest next update: Fri 28 Aug 2026 00:00:33 +0000
Files and hashes: 1: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl (hash: lAaYbyTFIYtZw9FmL1m40QBisZDw/CDN+Ts2U20Na+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:b6:0d:7e:4f:e3:d3:1e:a4:24:3e:c2:07:ba:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Validity
Not Before: Aug 27 00:00:33 2026 GMT
Not After : Aug 28 00:00:33 2026 GMT
Subject: CN=a09450466ce1479d24fb3e45b46095940213033f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bb:a0:8e:43:1a:a6:3f:a1:fa:f1:55:44:50:
75:a2:43:b4:d1:c4:b3:64:32:56:ea:41:e4:d1:61:
14:cb:23:d1:2e:b3:12:fd:43:56:82:44:ee:6e:57:
14:f4:91:9c:17:29:6c:a0:ac:6d:d9:f9:6d:75:b7:
86:cb:b7:cf:ed:69:00:2e:e8:13:da:7c:cc:4b:74:
43:64:7f:e4:f4:5e:36:6b:12:77:5b:f0:e3:fb:6d:
e2:77:6b:ae:a9:32:23:1f:bc:6b:05:c5:2e:0f:ae:
d8:5f:1e:02:9c:65:fc:9f:29:04:f4:37:60:0c:9b:
75:6a:95:1b:7f:25:33:bb:8f:94:9b:98:ca:93:cb:
46:52:d9:b4:da:38:30:8e:ed:6f:ab:71:20:2d:1e:
90:7b:32:8c:a7:1a:35:d8:af:b6:91:d9:25:b0:8e:
2e:54:bc:7f:63:54:85:bc:91:a4:46:6e:c2:69:19:
d4:f4:76:5a:ec:50:ca:21:19:1d:99:f4:90:3c:9a:
ff:4a:6b:97:96:ee:d2:18:4a:87:7f:60:57:a2:84:
90:4a:d6:c0:f3:4d:78:14:39:08:c7:e3:4f:79:4a:
fc:a8:59:0b:3d:5b:6e:56:3a:d2:0e:b4:76:1c:9a:
9c:7c:da:fd:bd:4f:25:c9:5d:86:13:8f:7d:fa:1d:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:50:46:6C:E1:47:9D:24:FB:3E:45:B4:60:95:94:02:13:03:3F
X509v3 Authority Key Identifier:
keyid:D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:88:8f:1c:f6:72:10:8a:67:4a:50:26:6a:31:11:3c:c4:62:
27:7e:dc:f4:14:5f:33:c3:7b:ff:44:e3:4c:60:1b:a9:16:14:
83:ea:be:96:77:fd:b2:f2:73:de:a7:0f:88:01:22:d9:e1:81:
ce:be:19:91:65:a5:6d:71:c5:52:70:9b:b9:7b:73:72:a8:c5:
60:8d:f3:b3:c1:14:25:ee:a5:1a:1c:ea:41:8d:44:08:a6:65:
cd:a3:5d:4b:e9:1f:19:6a:53:91:97:46:5b:08:e8:64:10:3d:
fe:95:b4:3f:66:da:23:04:03:ff:7e:2d:26:f4:e2:70:3f:4d:
60:ba:b8:e3:e4:36:34:da:1d:2e:9c:b4:dc:9d:9f:3a:5d:94:
f4:8d:41:33:4e:62:b9:c8:c4:37:e7:98:0e:42:30:09:7b:c5:
92:b2:47:e6:d2:e6:a2:46:e0:a7:85:0d:11:06:af:09:1a:38:
00:c5:2e:a1:32:a7:11:85:aa:53:a7:ed:1f:65:61:49:3c:d4:
0c:ae:f3:83:62:77:c4:ec:71:53:d8:35:79:58:7d:ec:d7:1b:
e5:7a:43:1e:b5:16:fd:8a:de:e6:f0:bf:94:08:84:0b:e0:a8:
5d:c1:33:95:cf:b7:13:80:fd:35:db:0a:ba:b3:bc:98:28:d5:
c5:94:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:12 2026 by rpki-client