Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: 4qi3z5twWGuNGkfa7elaFCxGPRsAVGzLIWYMmA1JEQM=
Subject key identifier: 86:CA:D9:B3:D1:87:36:8A:DE:AD:2C:BA:07:2F:E2:16:76:71:09:1A
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 01A0D2A633A6A93B939CE06D0E20BDDA77C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 1435
Signing time: Thu 24 Sep 2026 09:01:42 +0000
Manifest this update: Thu 24 Sep 2026 09:01:42 +0000
Manifest next update: Fri 25 Sep 2026 09:01:42 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: YgNi2MDuq9xJKtx6I4KXdulBbcZ+IBszqXNGnMBH2A8=)
2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:33:a6:a9:3b:93:9c:e0:6d:0e:20:bd:da:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Sep 24 09:01:42 2026 GMT
Not After : Sep 25 09:01:42 2026 GMT
Subject: CN=86cad9b3d187368adead2cba072fe2167671091a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:3a:0f:ac:fa:b0:2d:bf:bd:09:ca:85:d6:
af:42:ca:10:20:38:a0:5a:77:a6:23:ee:f7:bf:73:
b8:47:d7:b4:7a:3a:46:f4:37:00:78:b2:e2:db:f3:
68:88:61:a2:ab:a8:d9:7f:5e:ee:5c:c2:f5:14:b8:
ec:ab:b5:6a:94:34:ca:b0:7d:e3:06:24:8e:83:2f:
e9:50:51:a3:66:d4:22:14:23:35:1f:50:4a:34:2b:
3f:12:06:bb:c4:e1:e2:fb:17:b1:ec:c8:73:27:f7:
49:9a:04:90:40:5d:d8:eb:64:17:7b:c6:ad:ae:8f:
28:2c:fa:b7:6d:ff:c1:71:07:b4:91:39:df:b4:49:
ce:65:0f:60:73:ee:fe:9c:26:43:fe:61:1f:bd:3b:
dd:86:ab:47:6d:4f:9a:71:a4:fe:ce:36:ac:b3:85:
f0:f3:4a:70:68:72:61:f5:b7:be:36:d4:51:a3:eb:
9a:22:75:70:1d:90:f1:f8:41:fb:d8:65:a8:c6:46:
d1:54:41:54:e4:fa:eb:d4:71:59:d3:1b:b9:21:56:
31:c2:f5:da:50:48:99:3a:9b:ec:4f:83:c4:ba:29:
56:b0:7d:f2:ef:78:92:1e:0d:7c:5a:61:f1:e3:98:
d2:97:16:81:25:f9:bf:1b:6d:6c:ea:8b:33:3e:48:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:D9:B3:D1:87:36:8A:DE:AD:2C:BA:07:2F:E2:16:76:71:09:1A
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:27:71:0e:2f:01:97:e8:16:f7:5d:df:7c:0e:9b:68:5a:a5:
c3:34:4c:e5:04:fd:8b:9b:4f:07:2b:40:c5:0c:fb:e4:81:c3:
12:01:ef:e3:5a:16:8a:ed:3e:dc:f4:e0:78:59:e2:04:da:94:
3d:ae:ab:e1:4e:32:fd:4e:e5:67:02:f1:c2:53:07:33:1b:d1:
02:13:b3:63:47:2f:0e:cd:1f:d4:98:38:21:d9:7e:48:cc:cb:
6e:51:0d:b3:cb:bf:61:0a:dc:99:55:66:32:6e:82:0f:7b:42:
71:08:a6:c4:ca:46:c0:78:61:2c:d5:e1:46:71:2c:c3:d2:0a:
b0:68:13:8d:f6:bf:06:77:c1:c3:ad:7a:dc:19:10:63:d9:cd:
5d:69:b3:21:21:6e:b1:0b:38:6c:6b:62:d0:99:70:e8:a9:a9:
32:02:1f:39:08:34:ed:9b:eb:89:82:78:45:99:2f:6b:23:dc:
f3:01:c3:ce:f8:2e:0d:26:2f:7a:df:b1:83:6d:be:5b:13:ae:
26:9f:92:96:9b:28:a0:90:10:4f:1e:4e:69:55:4f:9a:27:e1:
e5:80:1f:8c:0d:e6:31:6f:b5:dd:78:39:45:6b:66:99:9d:b4:
06:10:90:dd:e7:ce:38:6c:e4:53:7c:57:95:d3:b8:40:8b:18:
59:cc:87:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:09:56 2026 by rpki-client