Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: o0BiNyt3AnEYpTwrwQTLkxUTD2D5pvYLxY5bZJex2oc=
Subject key identifier: CA:2F:C8:AC:BD:71:6D:1A:F2:B0:92:49:BB:4D:D5:A7:BC:BF:81:B7
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 019FA82B948D3E1DB4CEB7A5545ED3028B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 10:00:56 +0000
Manifest this update: Tue 28 Jul 2026 10:00:56 +0000
Manifest next update: Wed 29 Jul 2026 10:00:56 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: cNqRnY1a0FxNbRbhIujMC5AgtOzE5p8nbkxZSzViBJM=)
2: QcwY7QRBfg0U1vYTD3tEyK1tCIk.roa (hash: C8EnG7j+HGwDjJjN4fPZ3xTluNmlPd7Cuxa75PRIy0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:94:8d:3e:1d:b4:ce:b7:a5:54:5e:d3:02:8b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jul 28 10:00:56 2026 GMT
Not After : Jul 29 10:00:56 2026 GMT
Subject: CN=ca2fc8acbd716d1af2b09249bb4dd5a7bcbf81b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:5c:03:d3:e3:c5:0a:50:5f:c3:f8:0e:de:
a4:da:5f:c3:0a:0c:bf:c9:b9:07:8f:01:73:73:3c:
83:9b:c6:74:06:90:d4:1a:d9:4a:fe:05:3d:ef:2e:
cc:25:2c:80:b6:1d:7a:c6:07:b5:9e:c0:33:98:9d:
74:97:d7:02:68:94:95:19:80:31:e5:5b:7a:c9:2c:
7f:ca:95:3a:fa:1d:1b:5b:10:73:bb:9b:59:1f:f0:
fc:df:1e:a0:53:4d:63:16:12:a2:84:d0:75:bf:8a:
3e:3d:b7:fe:3d:15:ce:ff:2f:99:d7:38:02:f0:8a:
81:90:1a:81:95:b3:fd:fa:da:42:59:b2:ce:fd:7e:
9e:9f:fd:dd:e3:aa:32:88:10:d2:f6:eb:c7:e7:b9:
9d:a2:7a:da:f3:f1:2e:82:ce:99:1d:5b:90:56:7d:
9c:74:47:cc:93:29:fc:3d:fb:a9:f0:ad:ea:3f:70:
d8:fe:82:3b:0b:95:ab:9d:ee:38:1c:8e:c9:3e:7f:
c4:13:43:42:0c:28:a1:f7:34:fc:6a:54:ea:68:d7:
7d:3c:05:33:1e:c5:6a:1e:eb:36:66:93:d9:47:4d:
47:d1:40:15:89:d8:32:ea:a1:58:a8:46:1f:17:ec:
68:1f:57:d7:9f:1c:94:dd:10:a7:f4:38:9d:b8:1c:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2F:C8:AC:BD:71:6D:1A:F2:B0:92:49:BB:4D:D5:A7:BC:BF:81:B7
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:da:77:71:03:13:9e:6b:19:95:50:0f:33:7f:9a:3a:41:d6:
b5:83:7f:00:e4:ed:2c:39:56:35:1e:27:55:5f:22:90:32:3b:
75:84:38:68:ed:c3:dc:e8:41:2e:8b:e8:cb:a3:48:24:ae:61:
f1:cf:4d:45:ff:89:3f:04:c2:af:e5:9c:9d:f8:48:42:20:1b:
7b:b9:0b:14:bc:5a:17:9e:b2:25:54:2d:7b:c7:3b:6a:31:5d:
45:e8:15:44:e1:75:2c:74:50:a3:d8:9e:ce:c9:68:99:8d:36:
2e:f6:13:38:cf:94:65:75:e5:48:25:c4:da:78:9d:d9:d0:83:
85:1c:24:0a:4c:68:d8:b1:ba:6b:4f:54:63:0c:a8:f4:59:42:
11:2c:73:1a:fd:e8:b6:cc:6d:a0:91:0c:02:d9:4a:e4:c9:57:
20:1f:cc:00:53:f4:22:a2:43:32:45:ff:98:b9:f0:47:61:46:
c8:56:8f:78:a2:10:74:79:19:3f:f6:7c:c7:28:60:74:d5:89:
93:8a:24:ce:01:0f:b4:a3:f7:5f:f0:10:08:6a:c3:e8:b7:79:
47:a5:45:0a:c7:01:61:df:d5:ba:a4:e4:16:b9:00:0f:03:45:
62:90:0f:96:04:ab:18:e4:7b:e8:e0:47:4c:4a:cf:4c:2c:67:
2f:53:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:49 2026 by rpki-client