Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File: DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier: /tFfQjaTs+XMnSL5dRikojYcxvXsRQUvgeW/Q4tZGqE=
Subject key identifier: EA:2C:30:2B:0C:C2:EA:B3:D8:44:3F:6E:B4:1F:6E:1E:9B:21:DF:63
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer: /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial: 019E3072C522154CF0FF9DF6405278606837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number: 0644
Signing time: Sat 16 May 2026 11:01:28 +0000
Manifest this update: Sat 16 May 2026 11:01:28 +0000
Manifest next update: Sun 17 May 2026 11:01:28 +0000
Files and hashes: 1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: /TxYfTT11CLVcCmCD5Rw04DIq5/exyufkKGcasbdT24=)
2: GPyDbQSHNR39KOU_xi7-Id9KAQQ.roa (hash: BJA1H3BJte9PdHpAhJG8NebAV+K9kBOQF7cMdvjOdG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:c5:22:15:4c:f0:ff:9d:f6:40:52:78:60:68:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Validity
Not Before: May 16 11:01:28 2026 GMT
Not After : May 17 11:01:28 2026 GMT
Subject: CN=ea2c302b0cc2eab3d8443f6eb41f6e1e9b21df63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:21:e3:97:a9:d5:fc:77:a6:ca:1d:c6:76:
4b:c7:e3:a7:bf:1f:41:14:0d:a8:04:64:b0:ee:bd:
ee:59:c8:aa:54:d8:29:4b:4c:ab:d8:6a:f8:e5:0e:
b4:4b:9d:2a:63:3e:1f:bc:5f:eb:8f:84:4a:30:a6:
ee:30:71:88:fa:dc:e3:93:e5:63:f7:ec:33:eb:b1:
08:24:a6:c7:ef:03:ee:50:a1:ee:10:79:d8:6c:d8:
d7:db:f5:a2:1f:7d:91:b7:28:0b:0f:06:e8:ea:ed:
09:59:b8:75:8e:53:8b:0e:d1:2c:96:e4:db:a5:18:
c6:10:4b:4d:9b:7b:d1:03:11:7c:9c:f1:83:f0:92:
c7:d6:ed:75:2f:1c:bc:8e:cc:25:56:7e:0e:34:23:
61:02:ad:e6:18:4d:33:f7:6f:12:65:c7:bf:fb:4f:
78:19:df:10:39:18:cc:fd:c3:39:84:85:37:00:9a:
48:b4:63:2b:85:0c:cf:2b:e8:1c:8c:d3:e7:44:bb:
93:31:52:3f:ea:92:dc:ad:c0:29:ae:73:a0:52:53:
cc:37:b1:d8:d8:78:dd:f3:fb:90:19:91:a9:7a:09:
95:68:6a:56:22:43:80:95:dc:8e:ed:ce:21:cf:5e:
0d:28:b7:a3:ef:f3:b2:ba:f9:ae:00:27:d9:f1:d0:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2C:30:2B:0C:C2:EA:B3:D8:44:3F:6E:B4:1F:6E:1E:9B:21:DF:63
X509v3 Authority Key Identifier:
keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:60:84:ec:fc:d7:ee:56:56:42:7d:ef:dd:d4:02:82:09:
9d:8b:7f:2b:e5:b9:1b:a7:fc:c9:33:e9:a1:63:f6:da:5f:44:
0f:e8:ba:b8:d8:83:57:b5:e7:e7:98:c6:fa:54:34:b0:86:fa:
c0:1d:c1:3a:b4:cb:d9:ac:a7:2e:ce:77:bd:5a:f4:a8:55:34:
b1:e8:49:69:87:75:57:c4:d5:1a:a0:35:c2:03:cd:04:12:77:
55:80:6a:0f:a8:2a:de:d3:31:2c:44:32:89:af:2d:16:d8:cf:
ab:ee:0a:0f:b4:fd:a8:80:f4:81:2b:ca:64:01:3e:8c:ac:42:
7e:0c:28:55:ba:7a:fb:b4:0f:0e:66:0d:2f:3a:d5:8c:3b:90:
0b:42:29:90:68:53:07:c3:c0:4c:ed:6c:6a:cd:a3:0c:89:4b:
21:1c:21:ec:35:81:ee:ef:08:1c:19:5b:ae:3f:51:e3:4b:31:
52:81:6e:20:d4:c2:8a:88:3f:86:d4:18:ea:be:50:95:f9:73:
7c:ff:37:89:9c:b2:26:9c:75:31:09:d5:26:6d:6f:f7:01:14:
2d:d4:3b:9e:65:ae:32:3a:1c:60:b0:9e:0f:d0:56:9b:fe:ad:
1f:f3:9a:97:bb:78:c8:f1:d1:9f:4c:a3:f3:eb:fc:fa:3c:8c:
77:84:81:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:52 2026 by rpki-client