Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: W4RqzI/Wb/CtXsfzX9iUgNe+X44pNrRBZMNHoUKV0cI=
Subject key identifier: D4:D0:A0:82:C2:FA:9E:2B:44:8C:79:DE:67:DF:90:9C:9A:4C:92:62
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 01A08BD63050EC5C9CA852CD09B1A764A029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 15:01:05 +0000
Manifest this update: Thu 10 Sep 2026 15:01:05 +0000
Manifest next update: Fri 11 Sep 2026 15:01:05 +0000
Files and hashes: 1: 0jE3hZkv3e72FXBQNOB1Z87I7hE.roa (hash: ufiFlOn3uZQmY7BK2PstScG7xVreKj7F3Ayx+q4ondk=)
2: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: M3ySx6FkomcCdux0c5fz0cSBs2UWoV8Fpz2OttE4gEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:30:50:ec:5c:9c:a8:52:cd:09:b1:a7:64:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Sep 10 15:01:05 2026 GMT
Not After : Sep 11 15:01:05 2026 GMT
Subject: CN=d4d0a082c2fa9e2b448c79de67df909c9a4c9262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:21:2d:09:8c:d5:19:54:5b:f2:61:58:6e:
31:aa:3f:e4:c7:bf:7b:91:08:f9:22:9a:34:bf:1b:
20:c1:aa:09:ee:43:a3:9a:e1:d7:dc:20:c0:2d:8f:
81:d9:d8:38:4a:7b:96:31:43:4c:4a:d4:36:24:dd:
4b:e7:f3:5e:fd:14:66:d6:40:54:f1:1d:52:ff:21:
e5:3a:b2:34:5a:58:cb:a2:c3:74:02:23:af:86:4c:
5c:0d:7e:4d:df:1e:4f:3a:1b:75:c7:5d:f5:79:e3:
0c:53:ea:79:ec:fb:a2:e7:3b:7c:e1:a4:c7:bb:e9:
ea:46:30:49:92:ad:bf:46:67:f7:bb:e1:ab:0e:e0:
53:83:b2:b1:a8:4b:cc:6e:e9:2a:24:be:d2:b4:69:
3e:ea:e3:40:9e:21:90:6f:af:82:a5:ed:c3:6f:a5:
bf:dc:f8:10:6a:ef:5f:32:66:b6:01:6f:0e:21:2a:
66:8b:81:97:44:e1:68:46:92:99:94:59:71:0e:00:
fa:f2:b8:d7:c0:db:ac:da:48:52:7d:c3:2a:93:50:
7e:b0:97:fb:9d:91:03:9c:58:49:b6:bf:de:0c:db:
b3:98:5c:f8:40:81:ac:0b:41:c0:c5:66:20:9d:92:
cd:25:57:17:b2:e4:82:55:a8:9a:e1:5f:ca:9c:34:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D0:A0:82:C2:FA:9E:2B:44:8C:79:DE:67:DF:90:9C:9A:4C:92:62
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:36:26:1c:0e:51:75:fc:92:4c:06:d9:e0:74:3b:6d:ec:62:
a6:ac:55:7a:4d:88:d2:88:ef:81:30:b1:1e:d9:3e:fa:f0:8e:
c1:e0:07:6f:c8:fe:1a:78:92:77:c9:bb:d0:b5:8c:fb:cb:fa:
db:9b:fb:f2:a4:6c:20:50:b5:7c:14:19:de:7e:18:0c:24:4b:
09:e5:55:a4:19:94:33:81:4f:c8:dc:81:92:72:65:36:ca:27:
5a:d6:1a:67:eb:17:e6:67:c8:40:01:49:21:58:36:d2:e8:9a:
58:ee:64:67:e6:c1:02:69:33:f8:61:2f:87:d2:72:4e:57:2b:
e0:34:66:7a:f7:ad:5b:c1:5f:26:3d:76:6f:0f:d0:41:22:16:
6d:07:8e:66:ba:51:99:75:ba:da:24:8e:4a:a1:f8:0f:d2:09:
30:fa:3e:40:b6:ae:f1:95:23:8b:fd:e9:2a:8e:de:9b:3d:32:
38:36:00:74:dd:8a:35:c1:5e:60:2f:14:c2:ef:1e:9f:9a:3d:
61:d3:99:91:cc:c7:c4:b5:cd:e2:05:43:74:e5:dc:ca:1b:86:
28:2e:b4:89:47:01:30:5f:57:1f:f5:a9:46:90:a7:20:7d:ee:
42:2f:d4:c9:f0:f9:68:64:0b:b1:88:3b:0e:f9:3d:68:98:ae:
a2:5a:08:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:07 2026 by rpki-client