Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
File: 0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json)
Hash identifier: uYX6nTVOxJuTVTq5YDb1lTbQP4lovPZYxXlW3mg7GkY=
Subject key identifier: 9A:FD:E5:CD:10:8B:27:8A:58:16:58:58:A5:B8:8F:09:A3:77:5E:16
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Certificate issuer: /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial: 019CA90EB14389FFE352093A804280690179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
Manifest number: BE
Signing time: Sun 01 Mar 2026 11:00:38 +0000
Manifest this update: Sun 01 Mar 2026 11:00:38 +0000
Manifest next update: Mon 02 Mar 2026 11:00:38 +0000
Files and hashes: 1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: /ax6jWAf+Du50WwAcmoY2Od4mpddJ/RbJsu7foIeOOA=)
2: 1fXLoidrR-aUf1SmssfaAZyzdo8.asa (hash: YtrHqVFgYRzmfo5sver7tfaRLF7z/utDYIqu5x0aKYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:b1:43:89:ff:e3:52:09:3a:80:42:80:69:01:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
Validity
Not Before: Mar 1 11:00:38 2026 GMT
Not After : Mar 2 11:00:38 2026 GMT
Subject: CN=9afde5cd108b278a58165858a5b88f09a3775e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:20:45:63:13:29:96:3a:d4:d2:e6:dc:3a:7c:
83:d5:6f:b6:d5:be:8a:65:b9:65:ce:5e:61:9b:ad:
95:6c:e7:65:91:68:c0:c8:70:57:0e:e5:51:6b:cb:
0f:35:43:36:b1:93:f5:46:fb:5a:56:36:02:dd:e2:
62:f9:e5:b1:ec:a7:5c:00:4a:01:3f:0b:a4:9d:c5:
34:3e:ba:da:f8:27:16:2c:3d:3e:c8:a0:c1:c8:9f:
f6:a8:3d:de:dd:6f:85:46:d6:ce:02:5d:f1:41:23:
ed:ac:4d:30:ba:b6:58:4f:7a:0a:ab:8b:f0:26:c9:
dd:24:00:8a:0c:6f:3d:4e:73:ca:69:4d:a1:1e:91:
19:5f:ea:ad:d8:c2:7e:9a:cb:46:46:04:7d:ff:d5:
e8:7b:3d:2e:e4:22:53:ed:69:1b:ca:09:29:65:97:
22:21:ed:6d:34:65:6f:66:ef:d2:e0:90:73:39:96:
4e:72:e0:ba:6e:b4:a3:fc:06:a6:a7:1b:f3:b8:bb:
63:c4:ce:8e:2f:13:fe:65:07:0d:b6:86:2f:7e:d4:
96:af:1c:36:8b:59:2d:5f:5c:b7:11:e0:13:25:62:
4f:be:51:52:5f:62:4a:42:5e:a8:8f:08:d9:a5:f8:
ba:4c:c3:8b:ea:d9:a9:b0:eb:44:9d:7f:41:0d:13:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FD:E5:CD:10:8B:27:8A:58:16:58:58:A5:B8:8F:09:A3:77:5E:16
X509v3 Authority Key Identifier:
keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8b:42:24:07:e9:b2:65:62:93:98:f0:ec:65:09:73:51:ef:
97:ad:aa:2c:a7:5e:01:a3:da:4f:49:d0:8f:08:21:24:29:d2:
ad:31:f3:99:be:ce:2d:1a:94:c4:90:a9:2a:e6:4c:8f:69:e7:
29:4c:a4:44:94:be:34:57:c8:8c:90:f1:65:f2:56:52:09:77:
d0:9c:ea:b9:23:16:17:0e:8c:8d:2e:c1:be:27:88:c2:ea:46:
38:e9:4a:44:55:9c:01:d3:77:e0:9f:4b:c8:53:5e:21:59:c7:
de:67:03:5d:c8:45:e7:54:44:4f:ff:f7:48:d6:56:52:76:c2:
72:31:d6:ba:41:4a:3e:08:6c:2d:a0:d8:bb:88:a5:08:07:4d:
04:d5:52:fc:d9:d8:c9:4c:72:b1:fe:17:2a:dd:8b:e3:63:f8:
9f:58:ca:b0:95:ff:23:6d:64:3f:4f:cf:e6:f1:d4:23:9f:d3:
42:11:df:67:f6:aa:64:a4:8e:b0:61:02:e9:27:98:be:77:34:
95:57:65:d9:24:4c:a7:bf:7f:c1:75:04:65:dc:c1:df:cc:a7:
77:f9:cc:f7:50:1e:85:05:5a:2b:e9:26:d3:3b:e4:ac:fd:f1:
50:40:5e:bd:0e:27:b4:90:08:da:81:f6:6e:eb:33:d2:10:0b:
8c:51:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:12 2026 by rpki-client