Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: ESfeKv6gnSNGkibdU8Xa7rcYH+9Rh8607oOtZ8n0Znw=
Subject key identifier: A2:E9:A2:D5:1A:BA:02:1D:A4:97:79:CE:FD:55:DD:2A:58:84:2F:67
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 01A0EC9C5A813AB993E1A4D054DD30F1D615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 10:01:04 +0000
Manifest this update: Tue 29 Sep 2026 10:01:04 +0000
Manifest next update: Wed 30 Sep 2026 10:01:04 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: YgSYbwIINA4EW6QbkpeKmXSl7xdKHCvVOHkRFQ3z9L0=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:5a:81:3a:b9:93:e1:a4:d0:54:dd:30:f1:d6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Sep 29 10:01:04 2026 GMT
Not After : Sep 30 10:01:04 2026 GMT
Subject: CN=a2e9a2d51aba021da49779cefd55dd2a58842f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:b9:f3:5d:31:ca:5c:cd:27:bc:4f:d5:3d:
78:63:3d:86:31:3f:8f:18:c1:c2:f9:f5:84:16:56:
26:1e:13:f0:7f:65:d9:91:1b:59:c5:b4:da:35:26:
dc:59:f8:a4:d2:f9:c0:87:95:f4:0b:46:b8:67:79:
1a:4c:3f:78:3a:24:b4:f6:34:b3:98:5a:99:29:ae:
5e:52:67:54:cd:69:dc:a1:8d:ff:8f:f8:71:ce:a4:
f2:7e:24:ad:5d:56:41:d3:e0:a4:8e:d8:73:c7:a6:
72:1b:31:b1:fc:27:17:c9:56:d6:bb:4a:2e:1b:dd:
a6:3d:5e:be:a2:0b:f3:24:ab:19:67:15:2d:30:b0:
2c:22:c4:43:f8:16:22:07:b9:ed:93:4a:1b:7f:05:
79:17:4f:42:5f:1e:f4:ae:29:0c:82:0a:85:b7:59:
df:51:38:87:4f:cf:e0:61:24:4e:06:64:2e:3b:5f:
7c:f3:a9:f6:43:61:7b:7f:f4:61:2d:ac:d9:80:46:
33:0a:7a:3d:6a:f6:2b:f1:fd:72:f5:43:b8:87:8f:
6d:81:81:f2:04:e2:95:c6:1c:1f:94:03:2d:32:7a:
c5:2a:6b:58:16:dd:ee:bb:7b:7a:c2:17:3d:1c:15:
3e:cd:fe:85:b4:d5:0e:55:ed:f4:54:c3:3c:8d:14:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:A2:D5:1A:BA:02:1D:A4:97:79:CE:FD:55:DD:2A:58:84:2F:67
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2b:e1:03:b2:ba:e7:78:a6:29:c0:aa:68:a8:b2:f7:5c:b3:
53:eb:8e:af:ad:4b:b5:1a:8c:75:10:8a:86:16:eb:fa:91:b2:
26:56:c3:91:f9:52:32:ed:6d:b9:0f:8a:61:a5:e7:b1:db:c1:
f0:95:24:e1:98:f6:b5:44:76:98:a0:d4:7c:04:fa:5b:73:80:
e3:e7:a3:b5:33:a2:8b:02:9e:bd:ad:e4:a1:72:88:30:3d:46:
c3:27:a5:67:10:25:b9:46:e9:f7:6a:0a:b1:a8:1a:b6:e7:0f:
b2:a3:eb:85:80:11:7a:97:51:0e:d4:f2:a1:0a:85:42:ac:5f:
be:75:ae:3e:79:84:f7:1b:d0:3d:e1:43:33:62:da:89:49:22:
dc:1b:69:46:90:ec:dc:66:3e:84:52:9e:64:e6:71:30:60:72:
ad:fc:c8:a6:96:3d:eb:36:37:d6:96:cd:07:67:a3:15:37:87:
7d:3d:30:ee:92:60:c3:5a:26:56:42:60:a5:7d:d3:f0:70:33:
20:34:69:b0:29:a5:d6:56:a3:c1:43:ee:ec:c5:08:8f:4b:53:
7b:09:eb:f4:c1:ae:d1:d7:d1:cb:11:37:ab:e2:eb:a2:b5:d3:
10:0c:ca:95:92:4d:11:9a:36:bd:13:cb:a2:a7:53:83:23:72:
26:4e:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:31:47 2026 by rpki-client