Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: JvMtk9of6T/2wBP8lQENjO7tB29AfCQdGd03Mm338ng=
Subject key identifier: 63:11:A8:E3:43:3D:85:3E:02:C2:6B:9F:46:CD:E4:EE:B5:EE:64:60
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 01A001DCBF81E957C7D69E7BD905094AAC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 17F1
Signing time: Fri 14 Aug 2026 20:00:39 +0000
Manifest this update: Fri 14 Aug 2026 20:00:39 +0000
Manifest next update: Sat 15 Aug 2026 20:00:39 +0000
Files and hashes: 1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: iZ71htjlqQFMzxeslUVaD/2p+c23nDhX7p4ZOO0P6Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:bf:81:e9:57:c7:d6:9e:7b:d9:05:09:4a:ac:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Aug 14 20:00:39 2026 GMT
Not After : Aug 15 20:00:39 2026 GMT
Subject: CN=6311a8e3433d853e02c26b9f46cde4eeb5ee6460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:87:52:70:8a:08:cb:af:a7:f8:d4:a6:58:
ab:33:f7:46:b1:66:bb:46:52:08:9d:67:fb:55:4b:
49:4a:54:50:9c:06:1c:95:19:ac:0f:4e:f9:65:a5:
1f:45:3e:04:a9:85:8a:f2:d3:8f:05:7f:0b:74:95:
b0:0e:d1:a7:0e:20:8c:2c:99:8a:7b:cf:f8:4e:4e:
6e:49:df:05:4e:14:45:9e:eb:0e:86:3b:64:36:62:
ce:27:33:86:15:7b:12:a6:42:bd:ea:2a:4b:c8:37:
b9:4b:51:36:7e:1a:9a:62:b0:17:db:c6:1c:01:76:
42:ed:7d:3f:57:61:8b:76:b7:c4:45:e4:a1:63:90:
82:b1:fe:85:2b:12:3a:57:fe:e2:3e:e6:8d:ef:42:
f3:09:82:b5:79:c5:a3:80:fe:72:5a:29:7d:10:8f:
18:51:57:95:e0:c3:58:6a:c8:af:5f:c2:b9:dc:4a:
12:58:78:27:29:98:86:c3:8d:78:11:a0:da:3c:d3:
ef:f5:3f:c9:8d:ce:80:3e:53:32:5d:6e:f2:ac:ce:
44:9d:a2:65:d0:b8:a3:d9:3d:b4:d5:61:7c:72:5e:
4d:89:46:7d:87:26:61:de:06:66:c1:7f:78:ec:fa:
56:1c:36:b0:9c:04:f6:d3:64:41:10:cc:5a:fd:11:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:11:A8:E3:43:3D:85:3E:02:C2:6B:9F:46:CD:E4:EE:B5:EE:64:60
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d7:98:01:d3:f8:62:00:a6:96:c5:03:44:9e:8e:26:7e:d5:
95:e0:e3:1b:93:a5:dc:10:e4:72:61:9f:08:f6:15:20:36:49:
7b:40:34:b0:08:10:c5:f2:9b:10:0e:8e:49:7e:06:a5:9e:7a:
03:16:e0:f9:95:a4:db:ca:cc:b3:b0:22:04:07:5e:47:0a:01:
c6:46:66:81:bc:2e:c1:36:46:28:93:69:40:8e:8e:a9:98:fa:
49:c9:33:cb:13:eb:6f:b7:0f:cd:69:6c:7e:a9:17:bb:16:7c:
0b:6c:98:70:48:3f:0e:0a:7b:01:c3:3e:03:c0:eb:19:64:51:
72:25:3a:30:9c:05:c2:88:29:34:ae:e5:ab:0a:a9:21:5d:04:
19:1c:25:82:ed:bd:d8:f0:9f:7a:5f:a6:8d:24:4f:02:39:11:
cd:c8:b3:94:6d:26:26:3b:2d:f8:b5:19:a4:5d:03:cd:ec:0c:
67:06:38:6a:78:b8:d2:4e:8d:a1:e2:33:f2:1f:35:5d:b7:87:
5e:37:cd:09:e4:3b:20:5f:ef:94:3f:80:ce:34:02:3d:5e:1a:
de:e6:fb:26:ec:21:43:5c:c3:39:bb:3d:70:8c:e8:63:41:45:
ba:3d:46:e2:37:b6:2e:b7:f1:b1:c5:d9:0b:4f:1a:f7:5e:53:
73:54:56:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:51 2026 by rpki-client