Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json)
Hash identifier: yIMwmGVvD7zKp9PKKsUMAH8yRDhZ7z0b2pyhaZzpSIM=
Subject key identifier: DD:65:C0:3F:61:E3:F9:D1:2C:02:F1:97:34:4D:A3:5D:F0:DB:85:6E
Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Certificate serial: 01A0BDD4E40A33B5C46BCBD32BC7E9D895D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
Manifest number: 035C
Signing time: Sun 20 Sep 2026 08:00:40 +0000
Manifest this update: Sun 20 Sep 2026 08:00:40 +0000
Manifest next update: Mon 21 Sep 2026 08:00:40 +0000
Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: 5I6ME36eidGebXHGrdQbCLubqwmH1FR5oGYV1g4hNik=)
2: 1f3cl6fa8t-l-W7Ec_h4Hi3qeJo.roa (hash: aNyojc3jYn6lQHQNmAXrSGeiZeVM+znH218BSnC07+A=)
3: duEAUG-bxB2EvWz-YifRDzDM_48.roa (hash: Ah3/AgVili0L8xB1wP9XrE7QvUAGK2Wo6GmF16qZYm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:e4:0a:33:b5:c4:6b:cb:d3:2b:c7:e9:d8:95:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87
Validity
Not Before: Sep 20 08:00:40 2026 GMT
Not After : Sep 21 08:00:40 2026 GMT
Subject: CN=dd65c03f61e3f9d12c02f197344da35df0db856e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:bd:e8:bd:53:25:58:5c:66:44:eb:bf:4e:
e4:0b:4a:c9:0c:ac:55:25:35:75:6a:a1:28:76:f0:
e5:44:d4:70:a8:97:92:8d:c7:36:7c:0b:c1:28:90:
a2:89:7f:2c:25:cb:fc:91:e7:94:61:97:0f:e3:92:
4c:15:2c:92:b0:65:dc:99:37:6e:13:dd:ca:69:59:
00:53:f3:e2:01:0b:2a:a8:ce:5d:1c:ce:68:ff:a0:
70:1c:c5:e6:50:2f:f0:1f:b5:d2:e9:d1:ba:17:6d:
52:e8:42:f9:d8:37:f4:a0:5c:f5:8d:a7:7d:a8:2d:
4d:bd:ed:2c:9d:11:8b:67:ad:42:27:84:28:b8:0d:
4a:7a:56:db:5a:f5:6f:51:94:71:68:bf:06:d7:70:
34:79:74:25:23:e4:96:69:0a:d5:04:81:24:57:b2:
29:db:96:e7:d1:28:c4:46:10:78:b9:1a:77:76:85:
a4:6b:0d:4a:4a:2d:8d:ca:9f:3d:4c:d7:d3:76:2c:
e9:9d:29:e5:58:1d:de:cc:ce:6b:d0:cb:fd:89:a8:
64:6e:52:3d:bc:25:b9:8b:99:cb:6e:cb:69:4f:3e:
74:60:a8:0b:4d:9b:32:2e:91:1d:7f:16:5f:aa:b4:
66:44:f5:08:6c:4f:19:92:98:d4:c0:eb:13:cf:c0:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:C0:3F:61:E3:F9:D1:2C:02:F1:97:34:4D:A3:5D:F0:DB:85:6E
X509v3 Authority Key Identifier:
keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:65:60:fc:f4:03:1b:ba:9c:5c:5f:0f:e7:94:cf:46:47:49:
5a:30:fe:41:1f:8a:e7:43:e4:a2:2f:19:87:d7:eb:c2:0c:31:
43:71:89:90:7f:d4:3d:81:0c:4a:1b:db:af:3a:4d:5d:8f:fd:
93:1e:1e:ee:7b:5c:34:44:f8:06:c3:45:65:b6:77:99:8b:28:
c6:14:1e:73:ac:d7:b4:74:b5:e0:64:4c:38:a8:ca:09:62:53:
f7:70:56:d2:f0:e3:c6:fa:ea:44:65:b5:c5:20:a2:bc:95:2e:
ff:34:e7:ee:c6:7f:51:55:5e:be:d3:6d:3e:05:eb:91:45:9c:
d9:ee:84:db:3d:b7:6b:c6:6c:98:f9:cf:99:0e:c3:3a:da:8a:
65:2b:04:2f:31:9a:19:89:ac:38:94:76:0c:e7:30:e9:d5:79:
b8:d6:e5:04:7a:01:21:3a:13:4b:91:bf:f7:e5:86:1b:10:74:
10:be:65:2e:4e:ac:a2:a0:aa:57:a3:18:18:9a:1f:26:99:37:
cd:a9:33:13:9b:ca:a4:7f:d2:22:19:05:fd:d2:d3:0a:7b:d1:
90:93:f5:ed:d9:ad:aa:6d:0d:5b:ab:17:06:93:73:2e:3c:cc:
78:e3:b1:94:2b:94:79:9c:88:46:27:c9:97:6c:e1:06:07:8a:
a5:08:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:45:48 2026 by rpki-client