Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: a5YUylvwAWYnR4r6fx9MqWdCjJjM6VSxDm+eQ2KJGBw=
Subject key identifier: 9D:CB:13:23:11:04:DE:34:45:D0:52:A5:7E:A2:BF:22:F5:01:57:09
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 01A0D4CAF09A13984D106F8309DC9D9B5975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 19:01:04 +0000
Manifest this update: Thu 24 Sep 2026 19:01:04 +0000
Manifest next update: Fri 25 Sep 2026 19:01:04 +0000
Files and hashes: 1: T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa (hash: SXBhd3/vnyIoPB/kDRi62FVnMbysfno7J5T9Eftc8tY=)
2: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: KWQPU1Wyt8m7e0FUp7nyl0VWVHKuhYL3BFy1m7/Pg6g=)
3: tSpDrZGtdp0mH1aXKivR6nDrhuY.roa (hash: xkSEr+C7WhhCLocSo1zhSLhZi6gcFYi1jnV4sR3gnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:ca:f0:9a:13:98:4d:10:6f:83:09:dc:9d:9b:59:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Sep 24 19:01:04 2026 GMT
Not After : Sep 25 19:01:04 2026 GMT
Subject: CN=9dcb13231104de3445d052a57ea2bf22f5015709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:25:13:42:cf:93:90:62:62:31:a1:fd:5c:
d8:9e:3e:ea:13:c4:a3:bf:48:58:00:7b:ab:ab:31:
74:31:fa:e8:c1:2c:97:fa:cc:45:35:9f:2e:1d:3a:
a6:3d:7b:2d:1d:03:2c:2b:bd:bf:39:e0:c6:21:b2:
98:50:84:c7:60:a4:75:6f:88:39:58:ed:cf:4d:22:
73:0d:1a:2a:cd:7a:b7:5a:c3:01:cb:4c:0d:aa:12:
a1:80:05:b8:a7:fe:02:92:bf:42:ae:30:2d:3f:1e:
3b:39:ec:84:45:cd:1b:aa:5e:fa:f4:b7:f3:f6:f2:
24:a5:ce:6e:4c:98:42:58:77:08:c9:61:70:c6:56:
cc:46:b7:79:39:28:b0:38:9d:d4:d2:52:62:b0:b4:
00:30:ed:cd:33:e2:be:bc:f0:6f:f7:60:06:9c:78:
03:61:9a:b1:26:8c:ee:55:9c:38:78:62:01:5c:d5:
e2:69:27:96:c0:8c:17:7a:a3:f3:3a:d2:65:ab:b2:
fa:6f:dc:89:07:ed:7f:c9:7a:93:20:d9:27:5a:41:
06:e1:8f:00:a1:30:84:58:6e:f6:fd:10:f6:5b:ff:
46:1c:b5:72:ba:86:c6:5f:8d:2d:4f:ea:48:74:65:
b0:7e:0a:18:9c:82:8c:23:37:0f:0f:58:ad:35:ec:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:13:23:11:04:DE:34:45:D0:52:A5:7E:A2:BF:22:F5:01:57:09
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:85:2a:e2:51:b4:ef:4b:fe:88:39:bc:5f:68:33:8f:04:d5:
2f:67:ba:62:11:e9:bd:60:dc:b8:df:79:0a:67:ca:2a:d2:39:
25:65:74:f9:f7:9a:38:0a:b7:22:36:12:f7:4f:e3:91:12:f4:
6d:ac:66:57:7f:29:7f:54:8e:16:b3:23:c6:96:1f:21:fb:21:
fc:24:a0:de:8f:89:f3:2d:b9:54:98:9b:bf:58:a3:d7:25:a5:
13:e5:91:ae:c2:47:c9:7f:a1:32:31:47:42:df:b4:1c:7a:b7:
4b:c3:ba:73:b0:94:5e:b5:8e:38:ab:d5:18:50:53:ed:ea:ed:
a7:0d:e1:df:d2:cc:6c:46:40:32:dd:72:18:2a:1a:37:b0:ed:
1c:83:0a:c8:5b:65:c3:c9:f9:8a:5f:f5:54:b7:6d:09:10:b5:
52:58:07:3c:72:b8:f0:62:dc:41:0a:58:07:fb:8d:d2:f6:42:
06:2c:8b:a9:2b:4e:27:3c:70:55:11:7f:5a:7e:13:27:36:80:
f2:54:31:f0:da:25:d2:2b:58:86:75:e4:99:99:db:47:1e:3d:
b2:c3:a4:d6:a4:87:df:0f:c4:0c:20:fe:4a:08:ce:cf:dd:f8:
e8:63:40:0a:1f:f3:9d:b1:53:dc:31:9c:cd:c3:45:c4:3e:af:
4c:e8:6f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:41:47 2026 by rpki-client