Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: Z3Fc+gJtzXNinw+YYNDDX83z2N4KuXFlxWwIHahiBak=
Subject key identifier: 76:17:63:C6:75:2B:4B:2C:29:58:40:EB:B5:A0:E6:12:A5:76:EF:86
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 01A13D4A0821AE5627051AF0057A4ACE9FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 1877
Signing time: Thu 15 Oct 2026 02:00:24 +0000
Manifest this update: Thu 15 Oct 2026 02:00:24 +0000
Manifest next update: Fri 16 Oct 2026 02:00:24 +0000
Files and hashes: 1: 0HigbbPnkZoyonq1yyfi617xeII.roa (hash: MUaxT3D+6K8H+XJRqIFEKgk/lwlHeolFKwuvBRyzNa8=)
2: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: d4+3m6BcwIpO2rVnvMIhxZlF18Nxe2GNTGuz2XfhvjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:08:21:ae:56:27:05:1a:f0:05:7a:4a:ce:9f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Oct 15 02:00:24 2026 GMT
Not After : Oct 16 02:00:24 2026 GMT
Subject: CN=761763c6752b4b2c295840ebb5a0e612a576ef86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:a0:d2:c2:3f:17:a7:c3:aa:7e:37:81:3f:
d0:39:de:ea:59:1e:81:0a:8c:e5:41:f5:7e:d3:56:
40:0b:30:14:34:bc:9b:92:bf:3a:c1:d1:48:2a:68:
ae:e1:2c:8a:45:b9:2c:05:2d:d9:69:1d:7a:52:82:
dd:f4:f4:15:79:f1:ef:2d:4d:cb:89:10:2f:0f:c9:
b2:d4:0f:0d:b6:23:f5:e1:25:87:30:a3:d3:aa:49:
7f:b7:5f:cb:5a:9e:8a:fc:6b:1a:f8:fe:86:89:0e:
43:d3:a4:01:2e:aa:56:90:b2:dd:0c:fe:61:9d:ce:
bf:cc:ea:78:66:f2:12:b8:87:4b:2c:4a:20:ef:9d:
26:b8:39:a2:55:e3:2a:4e:af:44:80:27:5e:02:e6:
41:da:5a:fa:62:3b:06:ba:e4:b9:4b:a3:3a:4d:43:
5b:25:3c:30:92:a8:c6:1a:e5:1b:36:78:d1:9e:2b:
a6:2e:e6:09:5e:fa:fe:37:08:b1:91:44:ea:38:2b:
69:16:06:9a:f3:b0:75:23:ec:60:e5:94:cd:65:3c:
29:8e:fb:d6:e4:22:bd:fa:9e:b8:68:19:63:ee:29:
3b:a0:75:e9:ea:6b:bb:9d:38:9b:f3:39:d5:88:aa:
36:a3:e6:1a:f6:7d:4e:2d:15:e6:bc:bf:1d:81:93:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:63:C6:75:2B:4B:2C:29:58:40:EB:B5:A0:E6:12:A5:76:EF:86
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7e:12:6d:e0:45:26:35:51:2b:ca:db:42:73:60:4b:f5:51:
e9:c3:07:5f:08:84:88:65:a6:0e:64:05:22:c8:9a:ac:aa:a1:
cd:5e:37:12:b5:ca:b5:8b:63:2b:bc:11:13:5d:67:c5:5d:85:
0c:66:a8:4a:48:a9:ec:9f:b0:78:e6:c0:93:39:c7:df:26:4e:
dd:c0:99:0f:dc:47:8e:06:f4:25:6c:91:f5:5a:b4:56:ca:f6:
5d:45:29:c1:2c:ee:20:e2:06:7d:67:b8:90:ca:29:99:70:d6:
94:d2:94:fc:dd:63:f7:dd:bb:51:31:aa:f8:3c:21:8b:94:e8:
92:45:bf:e0:12:56:c7:d3:6b:c1:ab:90:33:9f:55:1f:11:8d:
a1:19:8b:ed:15:ef:4d:55:c7:71:ca:0b:93:5c:23:34:a6:53:
32:e1:87:2c:f9:06:fb:08:32:cb:0c:55:31:f5:54:b5:f2:74:
61:e9:f6:21:db:14:d3:6a:32:4e:7b:fc:60:cb:e4:85:f2:16:
95:c9:e3:21:1e:9f:5d:51:44:72:f1:db:a4:19:ab:77:a7:fc:
3e:90:e5:4d:de:69:d2:02:6d:20:1c:da:39:f9:88:18:4e:03:
eb:f2:88:6e:70:bb:5b:29:42:e8:f8:31:38:62:15:08:76:1d:
7d:28:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:53 2026 by rpki-client