Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
File: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft (raw, json)
Hash identifier: m7y0CJBKR6xQd6f+KJ9I/3Iu5jZvavnnXB/fLEbt95E=
Subject key identifier: D7:F5:64:07:B2:D3:7D:95:05:23:23:B9:C4:A3:8B:3B:BF:A0:8C:AB
Authority key identifier: D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
Certificate issuer: /CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Certificate serial: 01A0D64BA8250DF86F4E61410AD6874094B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 02:01:17 +0000
Manifest this update: Fri 25 Sep 2026 02:01:17 +0000
Manifest next update: Sat 26 Sep 2026 02:01:17 +0000
Files and hashes: 1: 0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl (hash: M7BE+/oS0rJQm+PVJ+dV9lxbsl/Gu0LHBtWyRgnzEwc=)
2: 4eTqXPsY2k0nfIKnegQTKL9VsZc.roa (hash: J2j96Igp+h3cc2jy3MZ29Vf0gTNVfHTR+h+cL3q6LnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:a8:25:0d:f8:6f:4e:61:41:0a:d6:87:40:94:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1004a86e87d3e69be3210d70ccc00bef8a09968
Validity
Not Before: Sep 25 02:01:17 2026 GMT
Not After : Sep 26 02:01:17 2026 GMT
Subject: CN=d7f56407b2d37d95052323b9c4a38b3bbfa08cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:ed:97:9b:6a:9f:aa:47:2d:21:ae:3d:81:
2a:b8:52:e4:fc:02:93:d7:74:55:8f:40:48:94:dc:
ee:27:f9:b9:43:59:e1:42:27:55:7d:d9:4e:75:b8:
dc:d9:e3:61:8c:79:d0:66:c9:82:ca:61:3a:9b:fd:
a2:f8:2b:a4:c1:41:b9:d2:95:6f:77:aa:6a:81:99:
3c:be:da:1b:0a:2c:cf:c3:ce:f9:e4:f1:3d:e6:9b:
66:c7:e1:c0:c3:4f:f4:77:aa:d0:ca:37:08:f7:0b:
4f:77:3a:eb:ce:5f:1c:ba:c7:0c:54:04:6e:e8:27:
32:ad:03:03:b6:f5:2c:9a:fe:9d:7d:61:31:bb:21:
07:21:16:9d:b7:71:89:1e:c4:68:52:32:ba:4f:6b:
fa:b9:b4:ab:4e:82:01:28:0c:d0:94:8d:ca:cd:e1:
97:4f:4f:3d:b1:6b:e4:92:d8:62:5f:dc:cf:ee:26:
d3:dd:8b:66:c4:1a:e2:0e:f9:63:99:78:25:59:24:
98:49:78:2b:b3:ca:36:32:46:99:c5:c9:0b:d1:e5:
49:de:4b:f0:fa:16:55:de:d9:07:84:dd:9a:f4:1b:
81:27:33:11:85:da:89:a7:d9:60:1f:a7:29:e7:58:
31:01:2e:6e:e2:82:af:4f:f7:fd:8d:91:60:c9:38:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:64:07:B2:D3:7D:95:05:23:23:B9:C4:A3:8B:3B:BF:A0:8C:AB
X509v3 Authority Key Identifier:
keyid:D1:00:4A:86:E8:7D:3E:69:BE:32:10:D7:0C:CC:00:BE:F8:A0:99:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QBKhuh9Pmm-MhDXDMwAvvigmWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e0ead-eec2-4d21-abe9-16bd8db85893/1/0QBKhuh9Pmm-MhDXDMwAvvigmWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f4:73:d5:87:23:f1:e6:c0:1b:c1:5b:41:07:d2:4d:ac:b1:
bd:55:01:4b:6d:c5:8e:16:d4:7e:82:1c:fc:57:21:ca:cd:c5:
c2:75:5f:46:ef:14:f8:fb:c1:41:b7:e1:89:e3:21:32:9f:b8:
06:79:a5:7d:17:2f:e0:13:cc:47:68:b0:c5:b7:d8:0e:48:3c:
6f:15:a9:cf:aa:d8:ac:b6:78:9a:9c:2f:76:ac:39:b9:1f:6c:
5a:44:16:e3:78:9c:d4:72:37:c7:f6:70:05:d7:77:e5:d0:82:
3f:16:fc:65:be:d0:ad:df:bb:aa:34:b3:19:be:b0:41:8e:bf:
88:a0:ee:ea:4f:b7:2a:b4:0c:b0:0d:9c:dc:aa:30:3c:66:f2:
6c:04:7b:d3:aa:0d:ac:58:19:24:b6:1f:65:bb:3d:38:2a:ce:
fb:40:99:12:fa:f3:32:6d:b9:b0:c2:ea:5f:d7:43:4b:3e:6d:
c2:db:ed:48:9e:f6:39:86:71:29:ce:69:7d:06:96:26:b3:43:
a1:b2:e9:db:66:fb:cc:2d:78:fc:4a:2c:0a:e3:8f:72:70:3a:
f7:55:8b:ff:c3:7b:b9:84:b3:96:8c:69:5a:d8:9d:2d:5b:f2:
c6:06:65:d9:b3:17:44:72:b4:73:b0:a5:b1:3f:44:e0:19:87:
08:96:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:37:29 2026 by rpki-client