Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: VO+t29Ai6IQTMOVZWG0PNq3XBzJWmLt4z9LGueoZ9cE=
Subject key identifier: 89:C6:F1:8B:50:3B:08:7C:F3:D3:3B:D5:15:74:46:55:63:B9:53:41
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019CAA8FAA571FAD62B6296640F98F60589B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 120E
Signing time: Sun 01 Mar 2026 18:01:07 +0000
Manifest this update: Sun 01 Mar 2026 18:01:07 +0000
Manifest next update: Mon 02 Mar 2026 18:01:07 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: PWqoyURezwCmE67IQBcqu3Farm+/BeRmxxtQhL3lq0A=)
2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:aa:57:1f:ad:62:b6:29:66:40:f9:8f:60:58:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Mar 1 18:01:07 2026 GMT
Not After : Mar 2 18:01:07 2026 GMT
Subject: CN=89c6f18b503b087cf3d33bd51574465563b95341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:93:a7:03:78:27:c0:65:18:64:9a:97:1f:
72:3a:bd:be:8a:d4:2d:89:8e:4c:37:0f:bf:e8:ba:
4a:af:b8:73:ba:d4:d3:9e:6c:69:24:cd:ba:08:69:
7c:80:a5:a9:13:7f:15:fb:d8:16:1c:2a:7b:0f:cb:
c9:59:d6:cb:a8:32:82:f6:e6:c6:f1:4b:72:a4:2f:
19:cf:ed:50:36:e1:1a:ab:89:aa:6c:81:69:3c:b4:
c3:75:09:c7:24:68:02:b5:e1:21:dd:7f:80:09:26:
90:ec:dc:46:6a:66:2e:81:a7:fd:7d:e7:49:af:f0:
65:3d:a7:11:4d:1a:3f:bc:c0:66:7f:39:a7:fe:a9:
e5:8a:ed:aa:97:62:1f:e2:df:d1:2c:be:d9:49:8a:
bf:10:23:b9:9c:1b:24:e0:f9:b1:03:db:60:ca:1f:
28:8d:cb:6b:c9:90:ab:ce:43:6a:b9:45:d7:eb:8d:
53:00:73:9c:6d:59:39:fd:e6:2d:35:4a:f8:44:92:
c0:35:26:fb:b1:9d:ec:67:5d:77:4a:3e:d3:c2:ff:
a6:36:31:55:64:10:38:71:49:6a:e4:40:42:39:78:
a7:ab:3e:28:bc:57:1c:a2:d7:80:2d:0b:9b:60:ae:
fd:6b:91:ed:16:35:7c:bb:78:c6:53:3a:ae:35:91:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:F1:8B:50:3B:08:7C:F3:D3:3B:D5:15:74:46:55:63:B9:53:41
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:76:02:9b:f6:1c:2b:31:d9:3b:47:30:60:f9:e6:39:a1:ba:
a4:de:25:1f:e4:17:f8:91:8d:22:53:34:8a:ad:17:bc:46:99:
19:da:a9:09:90:e0:7a:fd:bf:0f:4b:2c:5d:f3:4a:ec:8a:04:
33:58:e2:53:e9:ad:ae:6a:f7:f2:3b:7a:be:5b:2d:ba:f1:dc:
d9:52:53:b3:ae:46:8f:35:74:62:10:99:45:a3:ce:85:3b:bd:
1d:09:d8:b2:4d:ac:66:b9:2e:69:08:1c:c1:c2:2c:93:dd:9c:
c8:33:cc:e2:4b:2b:27:ce:a5:60:d9:e5:72:3e:46:b8:7c:4a:
b0:24:4e:94:30:9b:50:fe:71:02:ac:60:54:bf:6c:09:8b:1f:
93:28:95:4b:58:53:9c:e7:51:30:63:b1:29:8d:a8:c6:ec:6d:
3e:54:e0:88:10:8d:b7:f8:bb:c8:10:53:52:04:9c:93:b3:d4:
20:c3:35:62:71:64:8c:bb:de:8c:89:ae:cf:10:7b:28:56:be:
fa:4d:92:af:7d:8a:9d:c6:ba:44:06:29:0a:83:6b:71:0c:46:
b2:f5:17:7c:d8:4a:19:3e:a0:43:ae:a1:6d:fc:0e:28:0a:1c:
34:68:d8:b4:0c:3c:33:e8:30:c9:3c:00:fd:b4:68:7b:5d:6a:
3a:49:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:17 2026 by rpki-client