Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: Fw7AO9E8WbQzRVa/q8yBFwRQctmVodvHqHFbscFtpHU=
Subject key identifier: CF:75:76:02:3A:6A:5E:F6:13:27:0D:CD:8E:8D:4D:13:F9:57:4E:50
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 01A13CDC4D47390CD04D4074F7E381BDB7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 146C
Signing time: Thu 15 Oct 2026 00:00:32 +0000
Manifest this update: Thu 15 Oct 2026 00:00:32 +0000
Manifest next update: Fri 16 Oct 2026 00:00:32 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: hkcK6PMP8D3n80TuVaOfvdLj3gfGzH9ozilMzPXj240=)
2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:4d:47:39:0c:d0:4d:40:74:f7:e3:81:bd:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Oct 15 00:00:32 2026 GMT
Not After : Oct 16 00:00:32 2026 GMT
Subject: CN=cf7576023a6a5ef613270dcd8e8d4d13f9574e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:e7:83:f2:a8:93:00:35:b3:63:89:08:b9:
7c:a0:b4:8f:bc:92:19:61:7c:2d:48:6b:52:4f:71:
5c:e7:73:75:97:b9:27:25:27:5e:3c:fe:94:cc:99:
ee:29:1e:11:f7:b2:06:87:73:56:e4:e4:ee:77:0f:
37:9c:3d:5b:b3:b5:8b:68:34:7c:ae:75:06:a8:78:
11:56:49:96:c4:a0:0c:89:28:95:b1:b3:9a:6c:78:
73:4e:95:ea:ec:84:86:66:97:1f:52:38:5b:f5:d7:
1f:85:bc:f6:cd:d1:4f:7c:89:cf:37:72:e6:ba:c6:
73:26:1f:ef:13:de:c8:67:a8:08:6f:ef:42:75:e6:
62:63:13:9d:f8:d5:9e:a0:44:a6:11:2b:62:3a:3e:
50:6f:65:65:df:21:99:58:7d:f4:4a:7f:a5:7b:14:
9a:1f:3c:eb:91:8c:c6:3b:9e:38:70:2b:50:c8:46:
b8:1e:6b:18:c3:8b:4b:08:de:da:a0:e0:d7:28:fe:
50:a1:62:81:7f:9c:f2:e8:52:46:0f:40:d1:0c:23:
8a:c6:d6:c7:11:7c:0c:19:0f:98:de:a5:d5:d1:e0:
42:f9:86:fe:29:50:73:61:10:c4:c4:14:b0:38:68:
d8:94:f9:58:78:f7:c0:aa:d3:a8:0c:29:16:c1:59:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:76:02:3A:6A:5E:F6:13:27:0D:CD:8E:8D:4D:13:F9:57:4E:50
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:25:2c:11:24:95:77:95:63:8f:ac:1a:1c:11:50:c6:2b:f2:
90:f2:11:df:81:cf:ef:e0:d1:da:85:67:0a:e8:47:ec:5f:07:
f9:e5:d1:25:22:0f:28:d0:75:91:5c:f6:35:02:e7:9a:a5:1a:
1e:a7:0f:bb:f4:bc:96:bd:09:39:b9:1a:9d:6a:bd:f0:a6:fd:
c4:57:fa:9a:29:c1:8d:69:15:e4:97:66:26:11:42:ee:03:74:
5e:96:c7:c1:e8:0b:59:60:1b:e1:be:d7:15:03:cb:ca:a4:88:
38:d7:85:3b:2d:1d:56:23:50:d6:2b:a1:10:78:a0:d8:4a:c4:
c8:91:73:4d:8e:27:22:c9:34:5c:54:e3:46:8c:26:0c:e2:a6:
0d:92:ad:7f:16:bf:82:c6:3f:03:ad:95:d4:14:ea:02:4e:3b:
ac:34:79:9a:6b:c5:46:c5:2b:f4:42:50:9e:8e:61:5b:88:ee:
d9:12:de:cc:1c:ca:37:62:cb:ef:eb:47:16:4b:24:8a:2b:18:
de:eb:31:cc:c2:97:86:80:5f:0b:57:c6:2a:12:d2:d3:be:d0:
a9:57:09:86:e9:65:41:fc:c3:c6:25:04:61:78:a3:b3:82:af:
34:95:e3:14:61:8a:09:4a:d5:e4:e6:66:d8:7f:65:10:35:a4:
1c:fc:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:17 2026 by rpki-client