Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json)
Hash identifier: 9hGzkotWU60OcmQn7WItBe6ri0mhqvXNBXHfUEspdcY=
Subject key identifier: F5:9C:3D:B5:A5:85:2B:FB:34:3E:1F:BF:E7:99:7F:25:50:11:34:D6
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial: 01A0CA47089B6A540B8F8AA1B9FEFFA93241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
Manifest number: 082A
Signing time: Tue 22 Sep 2026 18:00:47 +0000
Manifest this update: Tue 22 Sep 2026 18:00:47 +0000
Manifest next update: Wed 23 Sep 2026 18:00:47 +0000
Files and hashes: 1: AN7d4TXrtt5_te4VnJ6dVmu47oE.roa (hash: j0ueVlAIinrIC36bzKoLDFrIbGMkcFuqoDWXY+F2+w8=)
2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: dylPMwBzHXXtfr6J1NE7+c0UKuL8oyOGAzwglJn/kM0=)
3: LaBbMvd3OwQhNnrUizZKTdnekiQ.roa (hash: gyzOiFVxonnT2AmLy7+95jCrZWSk+rERZGHB5wVY/w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:08:9b:6a:54:0b:8f:8a:a1:b9:fe:ff:a9:32:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Validity
Not Before: Sep 22 18:00:47 2026 GMT
Not After : Sep 23 18:00:47 2026 GMT
Subject: CN=f59c3db5a5852bfb343e1fbfe7997f25501134d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:8e:e6:cb:03:ed:86:5d:c6:c2:25:2f:a3:
33:95:37:5d:85:3d:7f:0b:1a:60:9f:3b:8b:76:b1:
3a:f4:60:c2:f4:7f:e5:da:d5:f3:5e:29:ce:4a:a9:
81:24:a1:c3:e9:dc:bb:ca:6b:e0:0c:78:ef:50:a6:
19:c0:5f:67:0d:0c:01:da:1c:6c:c5:a4:64:ff:1b:
b9:84:13:35:76:d1:9a:ed:88:5b:62:53:1a:2f:a6:
37:6c:02:37:03:cb:dd:32:3d:48:0d:c3:34:9a:17:
29:fb:4b:e0:48:c9:56:1d:ad:7c:93:78:42:f2:5e:
9c:29:29:7b:fb:9a:69:23:8b:8e:ab:62:36:77:0e:
23:74:39:54:d5:42:fd:d0:ad:de:ec:07:25:d9:1a:
9a:17:93:da:aa:bc:12:df:01:33:d5:2d:ca:17:a4:
c0:c2:6e:d7:ad:09:1a:f3:2b:69:f7:7d:ca:29:a5:
ab:fa:24:36:0f:67:e9:9b:76:25:0c:24:0a:a4:9a:
49:cc:34:ba:df:a4:87:aa:7d:05:99:68:94:0e:e7:
ef:32:15:81:54:9e:71:df:6a:5f:ef:5c:d0:a0:60:
af:35:5c:b8:24:98:7a:65:ef:4d:c6:85:e3:ae:45:
ee:ce:5d:5c:57:c4:d0:2b:73:e1:b3:dd:6b:2f:19:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9C:3D:B5:A5:85:2B:FB:34:3E:1F:BF:E7:99:7F:25:50:11:34:D6
X509v3 Authority Key Identifier:
keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ca:1f:44:58:d2:23:df:04:1a:40:fe:e2:35:45:df:68:70:
64:d9:f1:ac:90:97:ae:65:8d:43:62:6c:93:8e:70:ab:29:5e:
d6:6f:53:81:ce:43:0f:1f:b5:6a:3b:cb:96:0b:a2:9a:0e:60:
7c:1e:1c:1a:34:68:21:85:4c:e6:8d:83:48:da:c7:29:13:a8:
06:4e:52:ce:29:d4:8f:74:f8:06:07:51:5c:72:4c:29:be:99:
bc:9d:ab:cf:f8:c4:ae:6b:94:06:72:f7:37:59:e7:f5:d1:28:
66:bb:b5:01:b2:f4:25:24:1f:93:9d:54:ca:51:a7:fa:f0:64:
ab:ed:9d:e7:c5:e4:8e:a4:30:1b:01:42:63:e6:6c:09:4d:ca:
a1:dc:b1:09:95:99:20:20:7b:95:a4:bf:2e:3c:df:1b:98:c8:
0f:86:40:e1:5f:86:d2:21:fb:26:cb:ae:d3:6b:c0:10:cb:94:
3e:a2:73:74:8e:82:72:b2:2f:04:1f:72:02:6a:9a:5d:c1:28:
d2:b9:a2:8f:34:7a:28:3e:2f:25:21:fd:c0:b7:09:8d:8c:f1:
0f:d8:b0:ba:7e:0d:fc:c8:59:9b:6b:58:68:a5:0d:86:6f:13:
f8:c1:59:57:5f:cf:53:d8:0b:4c:16:6f:2b:97:46:aa:a8:90:
f0:3a:89:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:22:17 2026 by rpki-client