
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File: 0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier: Go2N859HLbqHJufYobdJjy1ktjtFIOvbDBDHTOgiRhE=
Subject key identifier: 3E:14:C1:A7:DB:AE:72:B4:F0:0B:DB:6C:FD:6C:58:FD:69:4D:50:10
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer: /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial: 019D9B19707F19DFF344A71B3B2F95B1C783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number: 013C
Signing time: Fri 17 Apr 2026 11:00:28 +0000
Manifest this update: Fri 17 Apr 2026 11:00:28 +0000
Manifest next update: Sat 18 Apr 2026 11:00:28 +0000
Files and hashes: 1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: FBGy23Tgf88FIwte9B/OkEjBASVQUaWOZ2vVjr2dSAk=)
2: IepspGCwPLMLBPzsExkQzO4QbNY.asa (hash: 8W3LBKMDCnMT8UFQAj2NhlyNWtdNB7dBnh/RCWdde2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:70:7f:19:df:f3:44:a7:1b:3b:2f:95:b1:c7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
Validity
Not Before: Apr 17 11:00:28 2026 GMT
Not After : Apr 18 11:00:28 2026 GMT
Subject: CN=3e14c1a7dbae72b4f00bdb6cfd6c58fd694d5010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:42:79:ec:aa:eb:3a:31:66:f8:c1:de:e2:
67:cf:f9:df:b8:ae:14:8f:a2:b5:b1:72:dc:86:a4:
a2:68:fc:af:06:09:89:44:a9:4d:23:e1:96:48:b4:
05:4d:f1:32:d5:d8:d5:78:fc:56:39:99:38:99:5c:
fd:98:ed:0e:ed:87:14:12:bc:8e:a1:6b:5e:e1:43:
c9:ef:59:2f:ce:5b:fc:11:2c:48:4d:6f:b2:81:06:
06:55:0c:e9:21:29:ca:cb:ba:60:e2:8b:82:90:b0:
e1:85:84:de:6d:17:fe:f4:fe:8a:9f:ae:8a:2e:72:
e4:15:ad:e8:5d:75:03:51:2b:7a:9f:88:2f:35:67:
db:1a:73:ab:18:d7:06:fb:73:45:47:2b:8d:fb:68:
72:0d:7c:4f:7a:50:83:30:99:88:85:17:6a:23:ec:
f7:15:79:f3:c6:83:56:a3:33:da:43:2f:ba:af:c0:
f3:e2:d8:d3:8a:fc:1d:52:67:9e:ac:ac:08:f6:bd:
49:a1:9c:92:50:a9:d7:29:c2:49:73:0f:7a:5a:46:
c5:fa:44:b2:12:d0:d4:70:89:82:6b:36:e9:30:58:
7c:2d:08:b7:23:fd:d0:20:43:66:27:d0:12:c5:17:
14:0f:65:68:6e:55:8a:fe:41:d9:69:64:8e:14:7e:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:14:C1:A7:DB:AE:72:B4:F0:0B:DB:6C:FD:6C:58:FD:69:4D:50:10
X509v3 Authority Key Identifier:
keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:74:51:57:48:87:0d:f3:50:0e:6d:f6:28:ad:42:1b:09:38:
b2:69:dc:19:b2:3a:b8:56:08:52:a5:d9:af:d9:16:db:f3:48:
e0:d8:74:72:99:7a:9f:20:b3:b3:16:bd:34:80:41:26:5d:95:
45:13:72:af:31:21:7b:f2:4d:18:ee:15:78:fe:94:b0:2a:cb:
7f:17:c8:88:0f:55:15:ae:b6:67:2e:a9:b8:a8:66:3f:c0:17:
93:fc:56:60:53:d4:02:66:30:fa:0e:4e:aa:df:98:ac:3b:9a:
e8:3f:d0:4b:fe:3e:28:5c:7d:be:d4:07:d0:e6:65:a1:de:17:
79:b8:3e:2a:4f:92:63:d9:77:be:df:e3:60:d6:aa:8f:01:2c:
aa:fb:e5:28:74:04:da:0b:8c:d2:bb:c7:d1:e9:05:98:aa:27:
ff:7d:49:c8:0f:4c:90:5c:12:b1:5c:c7:0c:c3:1f:6f:b7:33:
2b:80:f6:a8:b3:2c:68:93:16:3d:a1:a8:55:df:c3:39:1e:8c:
f3:f1:ef:db:6c:41:5b:a0:97:30:3d:0b:69:5a:7b:a1:9f:f1:
69:28:40:13:7c:99:a6:87:3e:ec:59:f2:12:bd:47:3e:da:4a:
2a:0a:f7:f4:f8:d9:34:7a:5f:81:c3:9d:5f:5f:c3:ca:d8:92:
7b:d2:6d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:22 2026 by rpki-client