Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: YBN1Ce9KUXX9JKIo+soUB41ixKDZEu6OdXw7DMN1z+Q=
Subject key identifier: 29:51:6D:46:F8:8C:C3:4B:A1:24:58:90:D5:FD:3A:9C:CE:29:17:A7
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 01A0C4E928CF53E7545A09C64033457E5B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0E8F
Signing time: Mon 21 Sep 2026 17:00:09 +0000
Manifest this update: Mon 21 Sep 2026 17:00:09 +0000
Manifest next update: Tue 22 Sep 2026 17:00:09 +0000
Files and hashes: 1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: 7rPdMGJzc1uBvmTN0l7ss9tdNNY13xdmWzwxjnVo1SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:28:cf:53:e7:54:5a:09:c6:40:33:45:7e:5b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Sep 21 17:00:09 2026 GMT
Not After : Sep 22 17:00:09 2026 GMT
Subject: CN=29516d46f88cc34ba1245890d5fd3a9cce2917a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:c0:ad:9f:91:b7:b2:0f:e1:ca:0e:67:2d:
a6:4a:ef:7e:13:b7:46:22:78:4a:ef:17:aa:46:a3:
77:3c:74:49:51:45:1c:af:d8:46:b4:f2:76:54:9e:
05:90:6e:e2:ae:65:83:cc:3f:b9:c7:9d:aa:31:73:
9c:4a:fb:53:af:71:99:80:c5:6e:dd:20:5a:c0:b6:
07:eb:ce:30:d5:a1:e2:3e:73:19:48:30:f3:05:64:
89:3a:f0:5d:d4:dd:ca:46:27:37:ab:09:11:8d:4c:
ab:a9:36:5b:4b:8f:54:c2:c4:d2:a7:5d:5f:7c:5d:
87:00:c5:97:39:68:77:c9:10:21:48:0a:d8:b9:83:
03:d6:69:53:54:e3:74:85:b8:e5:c4:32:18:a0:6e:
23:0f:c0:68:41:c6:c1:a3:9c:af:f0:76:ec:9d:2c:
45:7d:5e:10:29:12:04:7c:6d:f7:f0:da:f6:47:53:
6a:cb:15:a7:1e:af:6f:fa:1b:06:58:b0:b3:7f:6f:
26:74:db:95:d2:a7:f8:8f:0c:85:4d:5c:8b:12:29:
84:1d:16:a8:46:df:f1:1a:ac:28:1f:dc:c7:1f:14:
d3:50:05:81:3b:f4:d6:41:e9:64:14:59:06:69:f8:
88:d7:20:61:4f:1d:37:ec:22:28:d1:f6:a7:57:3e:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:51:6D:46:F8:8C:C3:4B:A1:24:58:90:D5:FD:3A:9C:CE:29:17:A7
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6d:6b:79:22:2d:89:e4:47:03:ae:1b:a8:b9:74:e0:51:d4:
cb:5c:b6:19:0a:a1:bd:cd:48:42:a2:19:24:d3:29:8f:ed:ad:
0c:cb:49:5d:dc:60:d4:8c:eb:2b:e3:dd:fe:8e:e5:71:99:a3:
45:78:07:69:a9:bd:76:a4:0c:00:72:92:bf:29:20:ef:6c:e9:
bc:e6:c1:de:f9:8d:06:16:7d:30:95:b1:d5:f8:ec:c1:a4:38:
25:cd:0b:f8:1c:37:e4:45:f0:41:c2:7e:68:51:6b:e3:9e:8f:
0a:b4:5b:17:fc:76:11:ad:86:4f:6c:48:b4:5b:1d:3a:43:e8:
86:d0:21:a8:61:4a:63:5a:f6:a0:c5:d0:5b:b7:f3:7e:bf:e5:
89:46:68:8f:55:09:81:9d:c4:13:f5:8f:56:d5:34:9d:73:fd:
56:ef:5d:66:85:c9:9e:49:4c:19:8c:56:3e:ef:5f:d3:43:42:
01:40:99:42:26:91:de:d0:b6:a5:88:36:7b:24:01:32:c0:79:
c8:fa:86:2d:fc:0b:6b:3f:60:6f:8d:51:51:c2:e1:63:da:73:
4a:bc:69:6a:22:a7:d6:cf:be:70:7e:46:ef:d9:35:d1:46:9e:
0c:3b:53:56:31:bb:f4:29:da:b7:9a:fc:f4:15:93:e8:6f:1a:
b3:f6:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:21:37 2026 by rpki-client