Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: 3axfQkN1zzvAWZZR/kFNr9PNnkXvM1kmz1TYWAGIkqM=
Subject key identifier: 46:B1:18:81:95:D7:5C:E6:BE:91:50:9D:3B:B9:E1:73:D6:2B:7B:1E
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 019D37F75818C8B77ED57D50FF601908CAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 1662
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: 0HigbbPnkZoyonq1yyfi617xeII.roa (hash: MUaxT3D+6K8H+XJRqIFEKgk/lwlHeolFKwuvBRyzNa8=)
2: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: j+CJx1dDw66Amt1j1JgfMeX0FeBxrp6ZGQhL916+5fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:58:18:c8:b7:7e:d5:7d:50:ff:60:19:08:ca:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=46b1188195d75ce6be91509d3bb9e173d62b7b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:57:54:53:00:5c:b1:5b:be:33:9e:40:8e:
da:2f:c9:c9:2b:79:77:4f:93:68:5c:09:a8:00:22:
52:2e:b9:9f:c7:a1:25:6a:75:9d:90:11:0f:64:e9:
9c:df:d3:67:33:78:27:98:35:93:7a:09:12:36:a7:
ef:07:9d:da:9f:ad:13:ae:e5:33:45:58:45:84:eb:
79:d9:10:dd:94:25:25:d0:bb:e9:52:39:c6:00:be:
42:d9:79:02:9c:3a:c1:62:3e:d7:fe:e3:c0:6b:51:
1a:6a:bf:6e:d6:40:70:cb:2c:7c:46:09:3c:1f:cd:
3e:43:d0:ca:6a:32:f9:9f:49:2d:77:15:23:be:7c:
12:78:a5:a7:e1:5c:66:f1:b3:e0:c0:83:13:ae:9e:
5f:59:55:80:93:e0:94:10:15:fd:11:c3:2a:24:00:
08:c2:a8:1e:34:77:d7:77:fa:c8:28:41:cc:dd:6a:
88:02:4d:de:2d:5d:75:28:f1:8b:b2:1e:eb:84:5a:
66:28:d5:7c:cb:41:c8:2f:01:8b:35:bb:63:a5:71:
44:9f:71:e4:31:62:ef:73:20:19:45:86:89:c1:78:
f3:12:9a:78:98:b8:ce:60:98:8b:ed:a0:ef:09:70:
7d:c2:96:df:77:a3:e3:07:57:b9:d6:ad:da:86:9e:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:18:81:95:D7:5C:E6:BE:91:50:9D:3B:B9:E1:73:D6:2B:7B:1E
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7c:34:50:8a:91:8d:85:07:c8:c3:f7:eb:14:4e:4b:6f:b0:
54:44:b9:47:bf:cd:4d:c5:2d:85:3d:4b:e3:c6:c3:d5:12:6a:
03:79:99:59:13:dd:14:52:a1:e0:9b:d2:9b:3a:0e:4c:a1:4b:
fc:2c:59:b4:e3:ac:de:df:44:88:80:99:ae:0f:47:cf:05:04:
21:3d:d6:8f:9b:24:c0:a2:2d:03:33:76:a9:89:2c:c5:35:13:
58:ca:8a:1f:ab:aa:69:a6:4d:51:2f:15:77:70:a0:f9:45:39:
91:83:45:18:3a:f4:5a:40:32:6a:57:cf:6c:67:12:49:d1:90:
d1:1b:0e:64:75:e2:e6:f2:de:3f:b5:64:3c:f2:76:75:7c:15:
b1:41:00:78:7f:ef:26:11:88:1c:39:29:95:da:9a:c3:0e:c5:
a6:d0:0c:4c:ec:b3:85:3c:45:3b:ca:63:a9:21:9d:93:be:d0:
f3:bf:ea:55:de:26:b9:16:be:92:e9:f8:16:7c:f8:cc:a9:b8:
18:a1:40:57:58:64:41:68:9d:69:f2:08:15:b5:aa:64:69:fb:
fa:45:b8:da:de:a7:57:f0:dc:9a:a3:87:2a:56:89:c5:1c:17:
69:e8:f2:57:9d:bc:ee:e7:1b:c2:75:25:ec:6c:22:89:ed:dc:
c1:54:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:07 2026 by rpki-client