Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: ZWRwOk4OEcRtWaIDZdBGVqWgZ2H17Aj71GauBUwQIsY=
Subject key identifier: 0F:94:5A:C9:38:9E:0B:70:E3:51:49:2A:33:A2:95:E2:F2:1A:47:13
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 019CAC0FC21080B7C1F62A3D39257ADFCA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0FD4
Signing time: Mon 02 Mar 2026 01:00:39 +0000
Manifest this update: Mon 02 Mar 2026 01:00:39 +0000
Manifest next update: Tue 03 Mar 2026 01:00:39 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: RgvOJOuMxTpQfSFdrF1yOJmJ7IMUNZa0YLkQ9U9k8t4=)
2: v5IXCnTZ04y2d9WWLRJA3XUiJ2Q.roa (hash: XiQ/nHqmOBxj0EoQgjKCVpu4MAjbfP9RThmf0ShdsEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c2:10:80:b7:c1:f6:2a:3d:39:25:7a:df:ca:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Mar 2 01:00:39 2026 GMT
Not After : Mar 3 01:00:39 2026 GMT
Subject: CN=0f945ac9389e0b70e351492a33a295e2f21a4713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:62:7c:59:bd:09:8c:0f:17:32:64:59:bf:
a1:a8:78:71:da:82:d5:7f:c7:be:ce:8e:91:7d:03:
c4:4d:48:73:ca:4c:fb:23:14:19:65:b6:77:89:6c:
ee:a4:15:ed:90:62:48:51:52:99:77:e6:58:b2:cf:
be:fc:70:ef:63:ac:17:e9:25:06:5a:54:04:82:58:
01:a2:bc:ac:0d:a9:7f:8a:81:e0:cd:f8:34:a5:26:
51:05:ad:6d:e6:62:52:5d:23:a4:9f:d9:27:01:b9:
2d:45:11:7a:cf:21:18:02:6c:c5:c0:97:9e:ad:8e:
e5:1e:a0:c8:e5:6c:29:a8:a5:ce:4c:75:3d:f8:67:
1e:df:5f:c8:c6:06:18:31:c0:f3:90:70:66:0c:05:
fa:d7:8e:fb:69:55:dc:d2:7e:5c:a7:96:cb:57:b5:
ae:6b:f4:3c:55:cd:fb:6f:56:12:81:34:a3:cb:0b:
1c:90:f8:2b:1b:c7:60:0a:b0:49:33:54:98:c3:e3:
6b:b3:37:5f:ba:54:72:17:65:04:f2:38:c6:b1:6a:
8e:44:64:20:cc:c3:4d:d9:20:a8:7b:ee:29:f4:54:
9f:ff:e0:76:11:35:81:18:97:dc:b1:fa:61:f5:5b:
b8:41:4c:af:1c:f7:59:b1:aa:44:df:16:7d:d5:e1:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:5A:C9:38:9E:0B:70:E3:51:49:2A:33:A2:95:E2:F2:1A:47:13
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:33:d8:99:c5:dc:42:f3:d0:4c:b0:5f:cc:4a:1d:64:55:70:
ab:f4:75:a4:cd:1e:a1:ec:f8:14:58:08:b7:5c:8f:31:79:68:
e5:98:61:bc:f3:13:84:8e:ed:3b:79:02:c7:e9:de:e0:bc:32:
eb:ef:42:23:2a:ba:a7:30:68:98:d7:40:f0:4b:c2:d1:4f:d5:
a5:84:aa:98:a9:67:68:61:93:20:fa:15:35:c5:80:2e:f8:2a:
01:c5:98:c7:df:56:a6:3f:68:3f:ff:b9:dd:f9:0c:b2:8d:8c:
e0:52:aa:94:3c:33:47:f7:9c:a7:71:cd:6b:d7:8a:49:d7:ae:
ad:0d:68:57:b6:dd:d5:b5:d7:b2:83:62:db:52:cf:e0:b3:9e:
4c:29:99:0d:83:81:87:41:3b:b1:9b:2c:02:8a:73:17:2c:25:
c0:59:ab:12:53:90:91:39:f5:25:70:45:a1:79:5b:ca:f1:e3:
f7:8a:77:fd:43:98:d1:81:6d:cb:d3:d9:77:a8:58:0c:41:1e:
6c:20:0d:e1:aa:4b:f4:3a:89:8c:32:48:11:06:c0:0c:30:a5:
7d:9d:8d:ee:c5:65:e3:87:bc:54:bb:03:30:21:39:cc:03:6f:
4e:30:f6:c3:a9:f5:29:54:5d:c8:63:1e:63:34:7d:a5:8d:f1:
c6:a2:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:51 2026 by rpki-client