Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: fJ/frCYWvftrqKNZ/cbR19iIYEWrG4LNETMmmcTzlu0=
Subject key identifier: 7C:6C:C8:A1:35:97:E6:F1:75:48:00:46:E8:48:A6:C6:29:BD:DE:7A
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 019D3940D726D3D0259D492AFBA50D6A9444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 1680
Signing time: Sun 29 Mar 2026 11:00:43 +0000
Manifest this update: Sun 29 Mar 2026 11:00:43 +0000
Manifest next update: Mon 30 Mar 2026 11:00:43 +0000
Files and hashes: 1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: KIpFaxZBn7HmUgIOgQSmyihfagp4WlW7TsUwAdMDRAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d7:26:d3:d0:25:9d:49:2a:fb:a5:0d:6a:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Mar 29 11:00:43 2026 GMT
Not After : Mar 30 11:00:43 2026 GMT
Subject: CN=7c6cc8a13597e6f175480046e848a6c629bdde7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:8b:63:08:23:4e:a9:1b:6d:31:bf:0a:53:
97:8f:ba:24:7f:0b:50:94:d7:8c:f1:6a:2d:02:9b:
75:b9:8c:4d:2a:60:83:4f:78:8f:46:cb:13:76:49:
38:f4:70:cb:f1:59:ca:2d:46:f0:45:e8:29:47:df:
73:e8:58:16:8f:a0:9d:28:0a:dc:fa:a9:e0:91:a5:
d1:e2:11:5b:2d:e3:e5:98:27:6c:8f:97:62:f2:86:
cc:9d:19:95:82:10:b1:5c:64:82:1c:66:f1:ba:da:
64:32:91:a2:a7:87:1d:9e:0e:d8:4f:1b:67:a5:33:
b7:dc:33:a3:34:1c:f7:79:1b:98:4b:b1:6a:6d:37:
af:45:1c:1e:4f:25:2c:3a:85:ab:4c:c6:89:a5:0f:
09:a7:84:97:0a:27:b4:75:af:33:14:db:aa:87:dc:
7a:09:b4:eb:1b:db:b7:ef:33:42:b9:16:8d:90:cc:
94:c8:59:ba:66:55:88:34:af:36:2e:9b:ca:db:48:
dc:5c:f0:69:ca:ab:bd:3b:8b:cd:65:c7:c3:1c:bd:
7f:96:f8:71:f9:43:0d:f3:ff:76:d2:42:ac:f2:51:
e4:e0:90:04:07:b3:85:42:70:97:5f:05:e0:69:e6:
94:96:b9:20:c3:dd:13:1d:20:7a:72:39:e7:4f:e4:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6C:C8:A1:35:97:E6:F1:75:48:00:46:E8:48:A6:C6:29:BD:DE:7A
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9e:68:6a:6e:da:3a:44:b7:db:15:26:1a:90:f1:a9:b0:67:
77:e4:c3:f1:e4:68:80:b8:61:1c:cb:0d:d8:c3:40:1e:ea:18:
59:ce:e0:cc:e0:7a:d5:df:35:b8:ee:72:57:eb:87:a8:ef:73:
57:c1:d6:ea:02:3c:b5:fc:e3:17:7d:cf:20:7b:86:ca:92:4d:
d5:93:27:2c:dc:0a:68:0d:e1:a2:6a:03:94:21:90:03:b1:73:
60:9e:bb:52:04:f2:85:91:58:0d:1e:b0:c4:b5:8f:0c:98:29:
e9:9c:51:0a:b2:7e:93:34:d1:11:ac:1a:03:f6:64:33:d9:46:
ee:03:ac:95:e7:c4:8b:15:39:3c:1a:4b:5c:5b:84:22:44:ff:
00:ac:2a:32:65:ae:8e:55:54:18:a6:f1:52:ec:0b:e5:c0:5e:
86:c3:4b:f7:45:04:52:d3:d9:e9:e4:a7:a4:0a:16:5d:ee:aa:
9e:69:f7:9f:e4:cc:1f:e1:d4:c4:7c:ce:2b:41:c6:df:e1:5b:
2f:73:3a:99:cd:c7:f6:63:60:a4:61:79:5a:fa:58:b1:8a:a1:
a7:ef:ba:75:e8:c0:5a:9e:d7:80:fb:98:0d:3c:4c:b4:ff:0e:
74:48:a5:97:74:1d:47:02:fb:c1:3d:a0:3c:62:f6:51:c2:31:
51:6c:9c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:58 2026 by rpki-client