Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: hW2VyoPNEBVVp56A01SQIWZ1+4bSynviR+RjSkkKVyg=
Subject key identifier: A8:C1:87:9C:83:F3:D2:DC:9A:8E:BF:F8:44:53:6D:B8:A2:44:E0:85
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 019D38D381323C5911C8B3918176CBE1AD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 0651
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: AN7d4TXrtt5_te4VnJ6dVmu47oE.roa (hash: j0ueVlAIinrIC36bzKoLDFrIbGMkcFuqoDWXY+F2+w8=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: /zp8o6FNuQTp6F+32Gswc5Hrt9g+JcJqhCMCpHA9U6A=)
3: LaBbMvd3OwQhNnrUizZKTdnekiQ.roa (hash: gyzOiFVxonnT2AmLy7+95jCrZWSk+rERZGHB5wVY/w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:81:32:3c:59:11:c8:b3:91:81:76:cb:e1:ad:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=a8c1879c83f3d2dc9a8ebff844536db8a244e085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f2:8a:79:ba:4c:e0:f3:bc:96:25:37:89:21:
ca:87:03:43:75:7a:be:76:31:88:dc:26:b7:ee:12:
74:91:d1:83:8d:88:a5:f7:e3:1e:7d:25:19:66:10:
d2:f9:46:ae:08:93:53:fc:a5:9f:ea:31:db:8f:f5:
7f:c1:0a:07:3c:d9:1f:81:9e:56:bb:30:09:92:a1:
5d:eb:f7:45:9e:e3:ac:71:64:52:89:7d:ff:40:0c:
81:df:8e:d5:f4:8b:5d:17:32:2a:ab:db:a0:e4:3e:
41:d8:11:9c:55:7f:a8:31:41:2b:10:96:eb:28:60:
7c:3c:f4:1b:9f:b9:98:58:8c:f5:1e:03:de:1a:38:
59:f3:ec:b5:a0:17:18:c8:5c:76:72:01:c6:59:5e:
0f:fc:ef:49:be:0b:9a:cc:04:47:d3:28:70:99:eb:
ed:64:5a:38:71:6e:bd:62:eb:32:48:28:d7:b9:07:
56:5b:24:85:e1:23:73:d9:4d:42:db:a7:8e:ea:e7:
25:fe:c5:81:3d:76:3e:8c:3a:16:c0:eb:85:f7:e3:
75:2d:00:f2:a3:77:03:99:59:39:13:02:e9:7e:4e:
aa:11:b1:b6:c4:d2:70:ee:ad:82:b0:68:56:89:31:
2d:dd:0c:0d:7d:de:60:3d:98:45:8a:9b:20:61:87:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C1:87:9C:83:F3:D2:DC:9A:8E:BF:F8:44:53:6D:B8:A2:44:E0:85
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:45:49:56:76:bc:02:e5:af:e6:28:b4:e2:f4:b5:5f:3e:46:
16:bd:3d:99:f8:49:d6:f7:88:79:07:b5:c3:00:e9:15:de:11:
27:30:b9:67:ce:d9:cc:78:69:80:d6:16:fb:0c:1c:b0:be:0a:
fa:ef:85:bc:f8:85:28:1e:91:25:4f:01:d8:f0:ff:54:92:87:
ec:2a:6e:f9:0d:10:6d:db:dd:83:0c:8c:9e:ad:56:61:b0:e0:
42:a0:31:a2:b7:50:44:84:ce:e9:da:b9:06:dc:31:6f:14:81:
c6:45:b0:ad:4f:7f:65:8a:cb:aa:c4:39:5d:66:9a:dd:13:b3:
d0:a5:cf:af:b5:15:d0:cf:40:87:dd:54:c0:b5:31:55:3a:01:
4d:32:bf:cd:d1:fd:e8:6e:a1:6f:2c:4f:53:4c:0e:35:b1:95:
4f:72:05:dc:30:aa:8c:e3:cd:f8:a3:ba:66:a8:85:5b:84:b1:
02:e2:2c:cb:c2:37:f5:06:15:49:d6:8a:a5:ba:78:2c:c2:2d:
40:ee:9f:e8:e6:3b:45:03:32:1f:b0:9e:62:e3:26:69:8e:2e:
b9:d6:3d:cb:99:6b:69:05:d6:2a:bf:80:85:3a:1e:7b:48:0e:
64:5a:bd:a0:24:bc:70:29:48:9b:e9:f8:d5:2a:f6:5f:88:c2:
a7:df:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:50 2026 by rpki-client