Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: HURbNTdxhAFloopwdY4osBcvr1QDo7QVo4CrLbe713g=
Subject key identifier: 60:8A:83:73:9A:27:12:EB:8D:18:18:18:61:D6:4D:56:A3:2B:5A:DD
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 01A11ABE717C996542521BBFD5AB7EC77049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: 0521
Signing time: Thu 08 Oct 2026 09:00:50 +0000
Manifest this update: Thu 08 Oct 2026 09:00:50 +0000
Manifest next update: Fri 09 Oct 2026 09:00:50 +0000
Files and hashes: 1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: Kca6SEy4w2FdA98OmyCynQc4Fqfw92kqom20duTtHzU=)
2: Lpz2qCyi_pclLucNORkTQKN3m6Y.roa (hash: Q2l7VmCgH626w3ti2dW3eJLOPal4uK77R7IRCnO8dUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:71:7c:99:65:42:52:1b:bf:d5:ab:7e:c7:70:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Oct 8 09:00:50 2026 GMT
Not After : Oct 9 09:00:50 2026 GMT
Subject: CN=608a83739a2712eb8d18181861d64d56a32b5add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:16:d3:70:13:6a:fa:f6:ec:f4:91:40:cd:
6e:7c:a4:85:bf:c9:24:94:bb:2c:75:2b:8b:d5:b0:
7d:5c:ac:a6:e1:25:47:d1:a2:ee:5b:90:b1:38:ed:
76:3b:f3:39:63:bc:08:26:c1:6e:ee:7d:26:d3:89:
4d:56:08:f9:51:0f:07:9a:09:03:c0:f7:01:e1:5c:
84:03:e1:2f:c4:36:c1:b9:2e:24:68:07:82:c9:87:
0e:10:03:d1:99:1a:9d:4e:e2:77:8d:a6:cf:8a:e5:
b1:85:aa:45:8b:0f:29:05:12:a2:82:ea:8a:fe:cd:
d6:37:bc:90:be:3c:3e:6a:06:5f:df:ad:50:57:cc:
bb:bc:41:1e:9e:95:99:d7:94:fe:94:b4:98:9f:82:
99:11:02:3d:ce:12:cf:36:cb:12:29:04:49:b6:be:
7a:f2:e5:7b:1c:00:5d:f9:36:d8:e0:86:b1:bc:ea:
7f:7e:13:e5:ca:e3:4b:e4:80:38:17:5b:69:a4:5a:
cd:30:89:da:93:96:85:41:3a:00:02:36:c6:2c:b9:
bd:c5:b3:40:de:1c:c3:f8:51:04:59:9b:ed:5f:22:
b4:62:90:35:eb:d3:2c:cd:70:b1:15:30:b7:da:39:
cb:b1:10:f3:ed:b0:dd:29:14:9a:95:e5:3f:bc:cd:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8A:83:73:9A:27:12:EB:8D:18:18:18:61:D6:4D:56:A3:2B:5A:DD
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4e:dd:5d:55:80:6f:02:d5:2b:ec:1d:65:ae:2d:00:3e:2d:
d0:0e:a3:0d:91:da:e2:c6:d5:97:43:12:92:52:c1:b1:3d:75:
10:7f:4a:f2:e9:6f:35:7e:58:21:6c:1e:b7:87:ef:11:20:b1:
56:1f:b4:79:66:d1:09:c3:e7:e7:51:77:4d:e2:7c:c9:43:d2:
07:bb:49:eb:14:b0:66:2a:d9:f3:1a:62:14:24:3b:02:fc:36:
82:79:4a:a7:7c:8d:79:f6:0a:82:f1:9a:61:bc:34:07:42:cd:
27:48:7c:17:48:f5:c2:ae:d1:f5:f0:cf:e9:29:ef:03:cc:dc:
ee:4d:c3:aa:bc:20:e1:7f:0f:cb:fb:db:c8:c8:c6:ed:9a:1f:
58:19:db:5c:64:63:ba:a3:24:96:79:ca:bc:d1:1d:15:d3:1b:
d8:50:2a:f0:e2:d9:08:c8:01:46:20:a1:31:bb:04:04:db:da:
62:06:ec:48:95:02:e7:8f:0a:18:9c:a9:f8:70:09:c4:df:6c:
f4:ca:0c:77:83:9e:62:c3:bd:18:37:dd:d3:70:ec:6f:9e:f5:
3a:25:0a:4c:64:70:fe:a9:bf:e1:55:2a:fa:b4:71:62:6e:db:
bf:1a:67:33:8e:10:58:42:e8:94:49:c1:bb:39:e6:69:4e:29:
e7:8c:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 18:17:51 2026 by rpki-client