Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: tNke/YDH90FCKrc40ZOgKCiJlFhEY8Xj+eL+YvMgkEY=
Subject key identifier: A1:00:E7:F9:E7:34:50:D9:7B:35:96:CF:AA:A7:BE:0B:86:C6:5F:16
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 01A0C5C55242DB2C693A29254358C3744A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 21:00:38 +0000
Manifest this update: Mon 21 Sep 2026 21:00:38 +0000
Manifest next update: Tue 22 Sep 2026 21:00:38 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: 50UomxKE5PQehGkLqQ7URLPf+DGUB9FBMJPuQUuPaQg=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:52:42:db:2c:69:3a:29:25:43:58:c3:74:4a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Sep 21 21:00:38 2026 GMT
Not After : Sep 22 21:00:38 2026 GMT
Subject: CN=a100e7f9e73450d97b3596cfaaa7be0b86c65f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:c7:3a:9d:ec:1d:e1:a6:3c:7f:28:00:68:
14:48:9f:ad:e1:85:ef:40:76:d9:12:0a:b2:59:e3:
7a:ca:0b:0d:43:d6:b2:84:3d:ca:f9:8d:4f:23:43:
4e:70:08:7b:1c:a1:bc:c7:99:b1:54:81:a4:2e:11:
3c:0f:68:10:f3:a4:9e:24:c1:b2:8c:b8:60:83:7b:
cd:b3:28:dc:3a:87:31:d5:0e:e8:70:e1:d2:4d:39:
9c:e7:6b:b2:0f:db:b1:2f:6e:9a:bd:44:fb:b3:50:
8c:7b:46:12:c2:41:0c:51:a2:4b:02:31:0d:1b:20:
3d:79:56:81:11:eb:77:16:11:a4:c5:20:f2:b5:c7:
f8:7a:29:4e:08:f2:1d:ce:21:f8:e6:5c:8b:95:ba:
d6:96:13:d1:f9:81:b7:cd:1e:89:f5:3a:1c:5c:aa:
ed:9a:d8:13:1a:85:ef:82:ce:b5:a1:c6:24:d7:47:
98:2f:08:c7:35:02:1c:73:cf:a4:18:cd:2b:5a:39:
12:44:ef:5d:3e:a1:69:9c:96:e6:4c:78:6a:57:e4:
49:86:f1:00:b8:ba:98:f5:b6:62:7d:ce:5e:7c:8a:
23:a1:68:36:0a:1e:45:b7:5c:d7:22:00:fc:d2:aa:
aa:b1:08:87:3e:7b:71:9d:4f:6f:2d:db:26:c1:58:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:00:E7:F9:E7:34:50:D9:7B:35:96:CF:AA:A7:BE:0B:86:C6:5F:16
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5d:ae:ff:0f:c1:21:35:5e:be:9a:72:7e:ce:e8:40:8e:a8:
b0:8d:62:69:2e:28:a3:a2:75:2b:e3:a9:a8:fe:08:f4:52:ac:
d8:0c:21:4b:cd:33:f5:41:c3:ee:7a:64:af:c5:31:e4:c4:06:
76:eb:5a:87:19:0e:88:72:cf:e1:26:8d:7b:aa:78:9d:5b:1c:
25:8b:c0:77:dc:dc:fc:8e:10:03:6f:b9:f9:7d:65:e1:31:58:
f8:5a:10:9d:02:78:6f:45:39:9a:0a:72:57:fd:e1:87:e6:0d:
3b:9a:89:e8:8e:0f:6e:0b:a1:a2:35:fe:cc:09:5e:65:5b:1e:
18:ef:a3:c4:c3:c7:b7:1f:16:e3:96:cb:f5:35:c3:99:58:16:
92:ad:6b:40:54:3a:e9:84:4a:a5:3b:79:dd:d4:aa:9d:dd:ff:
02:89:95:ba:27:5d:d1:b9:81:80:fe:bb:e9:2c:49:5d:a3:33:
d1:1e:3f:d9:6d:f2:4c:03:be:00:4e:3e:95:53:fc:19:72:9f:
28:0d:fa:81:2c:78:d6:e7:0e:fb:f7:8d:a7:6f:fe:36:8d:b7:
f5:c8:62:a2:6f:79:f4:14:6e:d1:f2:55:d6:be:56:42:ab:e4:
fd:22:1b:40:cb:fd:1a:b8:8c:a9:b1:9d:85:fe:72:96:64:5c:
45:77:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:36:12 2026 by rpki-client