Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: FWMsHJjGXQoYKkx6In44CLAdMIjA+eZApkbKYoz118c=
Subject key identifier: D4:EF:6E:2C:80:80:B0:37:04:F2:68:C9:87:26:A8:28:78:5F:2F:AD
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 019CACEBEAD2E0F65B1860D0F2C8F23C4259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 161A
Signing time: Mon 02 Mar 2026 05:01:07 +0000
Manifest this update: Mon 02 Mar 2026 05:01:07 +0000
Manifest next update: Tue 03 Mar 2026 05:01:07 +0000
Files and hashes: 1: 0HigbbPnkZoyonq1yyfi617xeII.roa (hash: MUaxT3D+6K8H+XJRqIFEKgk/lwlHeolFKwuvBRyzNa8=)
2: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: AiLX5e7+VApcAHouG3+kJteHaeY4OUeOUcpVO7ntr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ea:d2:e0:f6:5b:18:60:d0:f2:c8:f2:3c:42:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Mar 2 05:01:07 2026 GMT
Not After : Mar 3 05:01:07 2026 GMT
Subject: CN=d4ef6e2c8080b03704f268c98726a828785f2fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:7a:fc:8b:1e:4f:de:18:a5:fd:9e:a9:b6:
7d:bf:52:0b:d5:e6:79:1d:79:63:5a:83:68:8f:fc:
fb:3d:b6:64:43:b0:9c:b1:db:a1:84:96:6c:49:b9:
2c:95:ad:b6:a0:77:52:2b:38:f6:a5:4c:ea:3a:5c:
3f:42:aa:69:31:5e:69:53:0b:e3:43:c9:d3:76:0c:
4b:6b:86:1c:93:44:81:16:d3:ed:6d:d2:cc:b9:be:
b5:34:1a:ff:3a:5d:4b:33:c7:91:4d:ab:94:28:a0:
8d:06:60:37:d6:f2:97:b9:32:1e:e5:2b:66:da:43:
8c:93:c6:62:c5:16:71:7e:a0:9e:8e:95:9f:29:f7:
cf:e9:fc:f9:74:b3:7c:e0:ff:87:21:fc:47:54:9b:
5c:75:04:95:c5:fb:69:80:d1:a2:9b:55:11:83:e1:
d6:4d:25:5a:71:3e:b7:7b:90:52:cc:9e:94:ba:2f:
3c:57:2a:7a:35:25:66:f0:24:9c:dd:50:51:77:36:
af:55:56:8c:6c:05:fc:52:eb:32:32:5a:db:65:93:
f1:3d:1a:fb:2b:87:b2:1e:b8:55:cc:88:0d:5f:b4:
fc:03:49:22:85:8b:ef:58:5a:67:e7:49:4c:74:e2:
a9:c1:c4:eb:cd:3f:66:57:a7:e9:f8:bc:45:34:d3:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EF:6E:2C:80:80:B0:37:04:F2:68:C9:87:26:A8:28:78:5F:2F:AD
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4b:f9:43:01:01:63:ba:bf:ec:54:3b:2d:9b:e6:a4:37:61:
82:ef:09:65:d5:5a:37:40:d6:02:b2:05:91:57:29:03:fb:a7:
c4:ae:b5:4e:bc:b6:0a:12:57:84:4c:dc:c4:b2:90:6b:62:1b:
99:cd:fb:d7:56:62:2a:be:e2:b4:24:63:64:45:97:c5:72:a5:
22:59:b9:75:5b:28:e1:b4:89:9a:6a:66:da:80:81:02:98:a7:
cb:25:d4:0a:65:6f:d6:9a:c3:cc:75:df:dc:01:38:04:14:7f:
e9:22:e3:8e:64:56:b9:ef:81:78:0f:4d:a6:c0:34:ac:f9:9d:
c3:49:02:68:90:7a:a4:02:e3:52:27:bd:91:d2:40:36:07:c1:
94:0d:1d:1a:b3:e9:b9:fb:3f:79:40:3a:4c:1a:54:18:b2:82:
50:78:7f:cc:c0:09:ef:9e:eb:6f:20:ef:e9:e5:3d:fc:e7:5c:
d8:d6:72:d0:f0:0f:f8:e9:2f:8a:c9:15:34:6b:07:58:73:57:
f9:1b:c2:cf:ae:f5:f8:f1:87:36:ef:d0:e0:ed:8c:eb:07:bc:
80:41:0b:50:e3:a1:05:e2:f7:62:46:70:11:a9:ff:6f:3b:11:
20:3d:f8:80:19:dd:72:fd:45:a7:22:81:9d:20:2b:10:7a:4a:
9e:f4:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:06 2026 by rpki-client