Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: DjLV7zWA6pfYaDiIXVJRY3CrQPEa0ceJE/2E8m9agSo=
Subject key identifier: 63:75:9F:10:EF:1C:63:51:F0:25:CC:BD:F9:5D:60:B7:A8:25:51:A3
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019FA93E7FD6B94277C9C95F3244623652C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 139B
Signing time: Tue 28 Jul 2026 15:01:13 +0000
Manifest this update: Tue 28 Jul 2026 15:01:13 +0000
Manifest next update: Wed 29 Jul 2026 15:01:13 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: Is/kkE1w2e43iVqjcmdPoRy0WnGXmpNG77NvMtTXnSs=)
2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:7f:d6:b9:42:77:c9:c9:5f:32:44:62:36:52:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Jul 28 15:01:13 2026 GMT
Not After : Jul 29 15:01:13 2026 GMT
Subject: CN=63759f10ef1c6351f025ccbdf95d60b7a82551a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:6e:2b:1e:01:6d:d8:d7:e6:43:e0:ab:34:
af:78:74:9d:f1:b7:bf:f2:82:6f:74:50:af:dd:84:
d4:25:29:ed:f8:1e:68:7a:1a:9b:14:dc:e3:1d:1e:
47:fc:eb:79:fe:eb:33:a8:50:7c:75:f2:91:76:d4:
c5:e0:af:e2:bd:ae:01:68:b4:a4:cf:31:05:e1:84:
37:f8:f7:73:7a:bb:59:72:5c:80:4a:47:49:7d:2e:
34:d6:ef:31:77:6e:04:91:55:3d:87:39:9c:92:01:
b6:6a:04:20:6b:9d:60:cd:95:52:45:0c:f2:3e:5d:
2c:f4:5f:f3:d3:6d:ae:b0:62:d6:b1:9c:c3:bc:e3:
45:04:73:36:6d:04:4a:41:d4:43:4e:34:75:b5:e8:
27:92:35:55:33:2b:37:6a:f8:72:38:94:fd:21:36:
cd:3d:65:fc:84:9f:22:28:47:6c:58:2b:6e:97:05:
3e:0c:36:59:d1:4e:f3:a0:9d:4c:b2:99:8e:8d:80:
d8:03:dd:e0:b0:22:03:24:a6:27:78:44:16:32:de:
e5:03:1f:e4:4d:33:21:e2:3d:5f:9d:79:7b:e6:ee:
0d:ea:37:eb:95:4f:da:9f:0c:d8:a7:9e:d5:da:f9:
f5:e7:d7:ed:7f:7e:64:5e:f4:ce:bd:19:a7:02:d8:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:75:9F:10:EF:1C:63:51:F0:25:CC:BD:F9:5D:60:B7:A8:25:51:A3
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c6:38:2f:f4:4c:bd:68:a3:da:9e:61:9d:99:3a:24:ba:a8:
be:f6:6c:01:31:30:12:bc:bb:88:9c:80:78:6b:a5:b1:92:a5:
4f:ff:3a:7c:48:93:80:30:21:ea:8d:98:6a:ce:9c:4d:0d:bc:
f6:97:5c:a0:3e:59:1c:ea:b8:c3:d0:96:b7:f6:d1:0b:64:42:
14:7e:f9:33:1e:50:e5:d9:83:c5:36:77:50:81:a7:47:bd:46:
fc:b4:d5:b6:e1:87:bd:fb:66:60:18:a6:b7:01:08:b8:89:32:
4f:95:2d:a6:ed:cd:23:fa:3e:0f:50:85:43:b4:4e:f4:fe:fe:
27:c0:12:15:aa:1d:19:0e:23:4c:fd:b1:a3:1c:dc:f6:f5:91:
38:69:43:29:f2:fd:97:3a:13:00:5a:8d:77:c1:4e:8d:17:37:
48:6e:c0:3b:74:f1:1a:0c:b2:80:08:06:69:59:74:0c:32:b1:
51:ed:b3:0b:6d:34:49:7b:c4:2d:06:96:40:19:90:c4:f1:4c:
c1:30:24:a5:2c:8a:43:e5:20:40:d2:f3:a2:9d:2a:a0:8e:f7:
3e:b4:dd:25:c8:15:5c:da:f7:96:32:58:49:01:93:e7:b9:48:
d7:d5:f1:9d:89:06:c1:dd:fc:38:88:98:e9:fa:e7:f6:ca:1d:
ac:ad:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:26 2026 by rpki-client