Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: 3nj7/ztKaZS8t3h25rhpySP7J/0ka70NHNSnUlQpinA=
Subject key identifier: 91:92:14:72:33:CB:82:DE:D8:02:E5:E0:52:C5:79:C1:7F:40:17:55
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 01A0DB3B1B26B06EDB4F065C797B26E7B3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 01:01:18 +0000
Manifest this update: Sat 26 Sep 2026 01:01:18 +0000
Manifest next update: Sun 27 Sep 2026 01:01:18 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: wP07bvS72Rzuhhw6cU73y49VzjEIQU8zAsr/De1WZfc=)
2: QcwY7QRBfg0U1vYTD3tEyK1tCIk.roa (hash: C8EnG7j+HGwDjJjN4fPZ3xTluNmlPd7Cuxa75PRIy0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:1b:26:b0:6e:db:4f:06:5c:79:7b:26:e7:b3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Sep 26 01:01:18 2026 GMT
Not After : Sep 27 01:01:18 2026 GMT
Subject: CN=9192147233cb82ded802e5e052c579c17f401755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:6d:a8:84:ce:c2:10:e2:db:f1:ba:ed:35:
5f:13:4d:f3:24:d5:de:dd:dd:e0:fa:65:34:91:34:
e7:50:97:6c:4d:0d:9f:0c:88:77:77:b9:42:20:60:
ad:48:e6:36:d1:d2:83:b4:dc:ca:54:dd:42:d2:ba:
c6:77:cd:87:0d:3a:88:3e:93:bd:94:05:c3:37:67:
59:e0:82:8d:87:0d:fc:fa:a1:6b:05:69:d4:e3:2a:
22:99:63:ea:26:08:cb:b8:66:b6:fb:6e:8b:48:1c:
76:00:a4:78:d8:14:c6:f7:cc:66:c2:40:3e:b3:eb:
c0:3d:a3:d6:66:bf:f0:87:89:e5:d1:8a:20:bf:39:
ea:99:97:89:49:32:46:ca:0f:4d:fc:42:26:0b:91:
0a:70:1e:62:4c:a2:3e:fb:5d:8c:46:bb:d9:6d:0a:
d1:e3:89:ba:46:3c:41:c6:94:02:56:83:ea:27:f1:
5b:0d:f6:f6:87:fb:ab:8b:92:53:bc:5d:93:3d:44:
7f:99:dd:6f:37:c1:2e:e7:2a:f5:96:6c:e2:23:f1:
95:1e:c5:4e:bf:d1:42:0a:8d:4a:72:77:d7:07:7a:
f6:4a:87:ca:80:72:8a:11:c3:5b:46:6c:6a:bf:1b:
97:d0:23:3d:9b:b9:17:ae:bb:c3:60:59:2a:1d:7f:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:92:14:72:33:CB:82:DE:D8:02:E5:E0:52:C5:79:C1:7F:40:17:55
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d6:70:bd:2a:70:df:d5:cd:b0:d0:a8:ea:81:9d:b1:18:e2:
5f:36:cf:ef:e0:ca:0f:da:d3:73:02:6e:b8:2e:b6:7f:c3:8f:
12:a6:67:97:2b:b2:78:5d:a5:a4:41:55:95:5b:d4:e2:2f:62:
85:41:10:a2:15:10:8a:99:a5:dd:55:c5:98:be:c0:44:66:9f:
5d:a5:2e:b5:45:0c:db:cc:bc:88:d3:26:12:c0:31:16:14:70:
87:4d:cd:0a:fd:5d:56:51:46:42:d1:9c:53:80:58:00:32:5a:
5b:b2:68:11:53:7e:a3:50:55:98:67:65:19:f3:89:7c:0e:86:
49:16:81:5d:a0:32:6c:b8:ca:47:96:56:e1:9f:36:5f:b4:85:
0a:7a:4a:07:df:82:5a:24:a7:46:7b:ed:67:07:c6:96:79:b8:
66:be:dd:29:c7:94:ab:21:af:07:4a:3d:72:01:45:00:b4:25:
59:95:3f:32:6c:34:18:6c:b3:46:ed:57:62:92:99:5d:38:fa:
56:3e:d7:ff:88:fc:1a:7b:ef:e2:d5:b7:62:6e:22:6e:64:71:
1c:14:42:f0:fb:24:ad:82:a4:1f:cd:55:03:ce:57:d3:59:22:
00:c7:62:3e:cc:af:1d:ab:cc:3b:0c:bc:dc:cb:ea:78:69:4f:
27:43:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:06:51 2026 by rpki-client