Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: SXprZCVP9TUlR/kL4ENnOYQCTDt1Rl31TpQlzz+P6mw=
Subject key identifier: E0:F3:E4:82:BF:6C:1B:F8:DD:C2:F4:83:1A:44:A4:87:91:C7:91:44
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 019CAC46F8A246292147FA0C862B223B164F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 1637
Signing time: Mon 02 Mar 2026 02:00:58 +0000
Manifest this update: Mon 02 Mar 2026 02:00:58 +0000
Manifest next update: Tue 03 Mar 2026 02:00:58 +0000
Files and hashes: 1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: 4AxssePtN0lj1P59VgYJ04H5gD/ZNtKGa+1Wr4RvMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f8:a2:46:29:21:47:fa:0c:86:2b:22:3b:16:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Mar 2 02:00:58 2026 GMT
Not After : Mar 3 02:00:58 2026 GMT
Subject: CN=e0f3e482bf6c1bf8ddc2f4831a44a48791c79144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:e5:35:67:52:da:f2:ed:3b:53:3c:19:4e:
a9:62:00:01:cf:13:e0:24:bc:f7:a7:b2:1f:04:64:
fd:b7:ec:1d:0c:be:5d:76:9e:16:b9:99:d5:62:90:
9e:02:3b:c2:8b:e7:86:39:35:86:44:3f:10:73:3d:
8d:9c:9e:5e:62:cf:32:61:b5:6b:57:3f:bb:e1:62:
a8:44:9f:4a:72:bd:51:4f:45:e8:74:4d:ef:fa:c2:
32:6a:43:c6:be:f6:30:20:a2:88:ab:f9:ca:b0:a0:
85:de:c2:77:ea:74:83:e6:20:d5:f7:81:a7:d2:65:
aa:61:28:8e:fc:5d:99:91:ee:62:e4:ea:17:44:44:
e9:f3:e9:23:f6:74:b2:57:c0:8c:e2:8d:a0:c0:7e:
ac:10:22:6a:b1:c8:90:25:29:59:69:a7:f5:84:0f:
84:6c:46:cf:9d:01:16:13:b4:ef:55:aa:af:bc:79:
00:8f:32:41:5e:df:be:47:93:a2:6c:cb:9d:05:22:
a4:1d:da:09:bc:a5:6d:b1:b2:54:05:31:ab:14:dc:
5c:29:03:c8:a3:30:d8:ce:60:db:15:6d:dd:1f:23:
e8:49:c4:38:93:6d:10:1b:f9:d5:84:55:61:a2:93:
92:7b:82:96:dd:e2:c1:8b:94:81:22:4e:3b:ca:b0:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:E4:82:BF:6C:1B:F8:DD:C2:F4:83:1A:44:A4:87:91:C7:91:44
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5d:34:63:f1:9f:93:7c:fe:d8:32:38:09:10:4f:59:76:b0:
29:37:13:90:97:07:0c:72:25:ad:10:77:2e:69:f3:c6:e4:05:
a2:75:30:1c:a1:61:77:e9:5e:28:74:82:2d:ce:2d:b0:d3:99:
5c:71:32:30:fb:d1:0b:0f:38:0d:78:14:d0:5c:49:4e:2b:f6:
f4:cd:4f:04:bd:79:f3:50:d7:6e:3f:ba:af:49:44:db:d1:23:
f4:b6:85:1d:1c:78:a6:60:a6:7e:73:7c:7c:9f:45:36:e3:0a:
c0:c0:5b:29:98:1e:ca:56:ab:c3:4d:21:2a:3e:81:4f:35:ae:
aa:af:d3:0e:c7:8c:4e:19:3c:1c:53:0b:29:76:b0:01:d2:ce:
dc:f2:3c:1a:8d:9c:10:68:4d:eb:02:fe:45:da:83:97:37:e1:
4b:1c:d0:b1:42:80:89:a6:ea:a0:62:d7:06:ee:d2:28:02:3b:
ff:81:2f:31:9e:d3:67:44:71:62:42:21:14:68:dc:1f:78:87:
f7:e1:4b:c4:81:7e:8a:f7:f1:6d:58:56:03:22:09:a6:66:bb:
f0:a4:cc:cd:17:a1:79:ca:35:e0:5d:03:4a:bc:cd:fc:89:6b:
9d:2e:ff:fe:ee:7c:95:c3:bd:74:eb:05:27:55:a0:2e:f8:27:
54:e0:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:07 2026 by rpki-client