
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: vdZl5qPsVIPLH7WdTnY6tQIHwpJnGCgML8X1S8ZF0ik=
Subject key identifier: AB:96:03:91:8F:80:5D:9A:4D:9A:F6:63:3D:29:8C:67:C5:B8:0A:2C
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019F1867E984C1550BCE1440415A8846858D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 1350
Signing time: Tue 30 Jun 2026 12:01:30 +0000
Manifest this update: Tue 30 Jun 2026 12:01:30 +0000
Manifest next update: Wed 01 Jul 2026 12:01:30 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: ECEck3Cgq+HOs0K2XcwqNf5YipyBfuOhrMYpMjk+Iqg=)
2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:e9:84:c1:55:0b:ce:14:40:41:5a:88:46:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Jun 30 12:01:30 2026 GMT
Not After : Jul 1 12:01:30 2026 GMT
Subject: CN=ab9603918f805d9a4d9af6633d298c67c5b80a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:40:60:36:bd:ac:8a:e8:26:52:1e:30:45:
09:05:d9:ea:71:a8:d6:f2:ba:a9:d7:d1:c7:ab:b8:
7a:fb:b1:a0:1d:2c:77:b3:a0:0e:6e:d5:bf:f6:4f:
39:b5:5c:05:e5:4d:3f:22:17:87:0f:27:ab:5d:08:
f0:12:0d:e7:ab:f4:79:3b:84:a6:12:d3:0d:4c:9b:
c0:21:9c:81:ad:12:af:42:20:05:3c:a7:25:c0:51:
53:9a:a4:d8:fd:ae:fb:3c:cf:d9:ec:1d:86:bf:69:
4a:09:61:4a:56:fe:b8:1f:0f:b9:5f:a4:d8:1e:d6:
6e:67:78:3a:c1:f8:49:8f:d7:da:e2:e6:3c:e7:46:
92:71:c6:ae:37:ef:ff:c2:3e:f7:d8:23:f2:ae:2e:
b3:10:96:80:24:6a:1a:c2:ea:e4:11:30:29:78:47:
15:46:ae:c7:b5:83:60:ba:79:5b:4b:96:2a:ec:50:
32:6e:c4:b8:00:54:03:b5:94:2e:48:21:e8:d6:41:
66:fa:d1:51:78:5f:cd:ce:f3:45:7a:f3:ee:62:d9:
f8:f9:6b:94:31:a0:29:ec:da:87:f4:c6:97:d9:53:
0b:91:8a:d2:5b:8b:b9:f6:31:10:71:a7:7d:04:d3:
19:a7:e6:12:b3:e4:03:a0:34:e5:3c:8b:1b:5f:58:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:96:03:91:8F:80:5D:9A:4D:9A:F6:63:3D:29:8C:67:C5:B8:0A:2C
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a1:b6:91:99:bb:c4:d4:ef:18:56:06:4d:5f:72:68:b0:60:
48:cb:cf:9f:12:d0:51:d8:57:3c:db:d2:9b:c4:5a:a1:8b:13:
93:3b:f4:9d:be:6c:92:8e:91:cb:0d:22:f7:57:23:a5:12:a6:
d0:06:cd:6f:14:21:cc:df:f7:3e:31:7b:a8:46:40:cb:b6:d8:
b0:c7:00:f8:4a:05:11:41:56:c8:cc:c1:e6:3b:d0:3c:ee:f1:
1c:a9:ae:b9:05:45:05:46:ac:2e:b2:e2:78:5c:51:94:65:0f:
52:f0:64:c6:1e:59:85:6c:ab:c2:14:97:9b:d2:e4:e2:4c:fc:
e8:8d:b0:13:24:2f:0e:a1:3a:b9:62:1c:ac:8d:1b:cc:c0:c6:
47:c4:59:f1:7c:ff:3b:e1:11:a0:a5:f9:09:68:17:c0:b5:7b:
12:3b:c0:46:a3:af:d9:f6:ec:79:f6:0a:ac:d3:76:60:2b:fa:
01:6b:3b:29:f4:e0:75:f7:e7:10:55:df:e4:49:fb:e3:ac:b9:
96:17:6f:eb:36:02:f2:f6:6f:50:6a:e6:3c:f5:87:95:e6:a6:
a8:c1:e9:a7:dc:e1:1c:2d:b7:cc:0f:6b:78:2e:a7:5d:db:9b:
81:79:54:95:74:91:03:ed:ab:98:6c:f8:2e:0e:ac:d0:97:b1:
44:ec:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:43 2026 by rpki-client