Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: qDfDGupR7dG//sY9nCkK8o4kt+hEkTBUwLWHTBcoebE=
Subject key identifier: 1C:07:91:D9:29:1C:3A:33:4F:29:AA:F9:EF:6A:41:8F:BC:7F:42:EA
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 019FA9AC2E7C6FDCAD009B0E54D468D2C1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 17A6
Signing time: Tue 28 Jul 2026 17:01:01 +0000
Manifest this update: Tue 28 Jul 2026 17:01:01 +0000
Manifest next update: Wed 29 Jul 2026 17:01:01 +0000
Files and hashes: 1: 0HigbbPnkZoyonq1yyfi617xeII.roa (hash: MUaxT3D+6K8H+XJRqIFEKgk/lwlHeolFKwuvBRyzNa8=)
2: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: P+wiXeDQKPIrxhGNrY1pMzw7BBhSHTtO0ceDQRBCYQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:2e:7c:6f:dc:ad:00:9b:0e:54:d4:68:d2:c1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Jul 28 17:01:01 2026 GMT
Not After : Jul 29 17:01:01 2026 GMT
Subject: CN=1c0791d9291c3a334f29aaf9ef6a418fbc7f42ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:04:80:24:5a:e8:55:0c:f0:0f:1b:b3:48:
d9:81:bf:06:46:11:23:44:45:05:52:33:88:d8:5a:
b8:0d:8a:ac:d4:78:ee:ec:71:8b:47:ee:28:b6:ea:
c2:5f:2b:5f:88:14:d1:e1:bb:3b:f1:0b:5c:03:59:
83:b6:15:48:08:4e:89:ce:16:4c:5c:10:02:c7:22:
91:c4:0b:6b:fd:f0:24:ff:cf:c2:fc:ad:d4:c7:33:
26:8b:c0:8e:cf:48:f1:09:9d:ec:db:81:16:a3:34:
33:9d:49:a4:71:e1:f2:57:6b:8c:bf:8f:da:f7:89:
b3:18:f0:87:43:db:3b:be:29:cb:c8:ab:26:ae:1d:
7d:2f:fd:f5:ab:7b:15:47:cc:fb:99:14:da:fc:84:
1b:73:c8:b9:d3:29:61:85:de:52:0d:c3:2d:af:f7:
6a:41:58:e4:53:93:9b:1c:3a:99:ce:4b:d0:f2:e8:
b2:29:fd:83:a2:c1:b5:43:4d:4c:d7:aa:88:03:eb:
d3:a0:01:8e:19:80:68:0c:d8:70:07:37:e5:ee:23:
cc:ca:b9:e6:dd:44:ce:3f:ff:20:9e:b2:fa:06:36:
95:0b:44:41:c8:29:5e:ed:91:a8:02:e0:fa:63:1d:
94:44:da:88:d4:3c:e8:fe:9b:ab:e2:45:19:99:29:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:91:D9:29:1C:3A:33:4F:29:AA:F9:EF:6A:41:8F:BC:7F:42:EA
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c9:a1:9c:7f:89:da:6b:af:ed:95:6e:52:e4:63:29:51:fc:
51:a8:5f:19:dd:3b:52:51:03:32:0b:18:27:f4:fd:10:73:54:
8d:e0:fb:9b:7b:b3:d2:a1:16:ef:f7:9f:99:22:70:ed:3d:f2:
a7:80:fa:ee:0c:7d:a6:4b:2d:9d:ae:e7:84:9a:60:e2:df:e0:
04:64:06:9e:ef:44:f3:bf:24:36:a9:71:20:5c:51:49:ec:f7:
ac:c1:5e:71:4d:9c:d5:5d:19:11:ee:67:f4:4d:cc:ce:cc:7d:
28:9b:fe:53:1e:7d:41:cc:20:83:16:61:c3:57:31:55:73:1c:
3f:24:a6:cd:d5:cb:ef:cf:72:d2:1c:af:33:12:6c:e3:54:9a:
bc:fb:76:45:09:ae:15:85:b8:40:71:4c:4b:b3:9a:ba:7a:f5:
c8:29:e7:3a:55:d6:07:8c:45:97:e9:14:4e:51:63:9a:98:fe:
f0:7c:cf:a6:39:6c:d8:70:9b:02:7a:12:98:aa:c1:7f:77:b9:
bc:9b:ab:7a:7b:be:ca:15:86:4d:f8:0a:09:80:d5:57:1b:a7:
e3:7c:31:4f:b6:7a:9f:a1:37:73:21:6c:b2:7a:df:0e:ce:95:
57:c9:38:0d:b8:81:67:80:a8:67:f8:8f:be:3b:74:5b:19:62:
ce:9b:da:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prC58b9ytAJsOVNRo0sHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZWJiZmFhZWMyNDAzOWI0MWViYTU2YmIxY2FhNTE2Nzdk
MjFjNzAwHhcNMjYwNzI4MTcwMTAxWhcNMjYwNzI5MTcwMTAxWjAzMTEwLwYDVQQD
EygxYzA3OTFkOTI5MWMzYTMzNGYyOWFhZjllZjZhNDE4ZmJjN2Y0MmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt94EgCRa6FUM8A8bs0jZgb8GRhEj
REUFUjOI2Fq4DYqs1Hju7HGLR+4oturCXytfiBTR4bs78QtcA1mDthVICE6JzhZM
XBACxyKRxAtr/fAk/8/C/K3UxzMmi8COz0jxCZ3s24EWozQznUmkceHyV2uMv4/a
94mzGPCHQ9s7vinLyKsmrh19L/31q3sVR8z7mRTa/IQbc8i50ylhhd5SDcMtr/dq
QVjkU5ObHDqZzkvQ8uiyKf2DosG1Q01M16qIA+vToAGOGYBoDNhwBzfl7iPMyrnm
3UTOP/8gnrL6BjaVC0RByCle7ZGoAuD6Yx2URNqI1Dzo/pur4kUZmSnRTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwHkdkpHDozTymq+e9qQY+8f0LqMB8GA1UdIwQY
MBaAFAzrv6rsJAObQeula7HKpRZ30hxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmIt
YjE2ZTY4M2RiZTI3LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmItYjE2ZTY4M2RiZTI3
LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsmhnH+J
2muv7ZVuUuRjKVH8UahfGd07UlEDMgsYJ/T9EHNUjeD7m3uz0qEW7/efmSJw7T3y
p4D67gx9pkstna7nhJpg4t/gBGQGnu9E878kNqlxIFxRSez3rMFecU2c1V0ZEe5n
9E3Mzsx9KJv+Ux59QcwggxZhw1cxVXMcPySmzdXL789y0hyvMxJs41SavPt2RQmu
FYW4QHFMS7Oaunr1yCnnOlXWB4xFl+kUTlFjmpj+8HzPpjls2HCbAnoSmKrBf3e5
vJurenu+yhWGTfgKCYDVVxun43wxT7Z6n6E3cyFssnrfDs6VV8k4DbiBZ4CoZ/iP
vjt0WxlizpvaPw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:51:58 2026 by rpki-client