Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: m/Aa5MhAaDHpFcc9LY7Qp03D40pC6syf2gBHTJGSpNU=
Subject key identifier: 49:C4:BF:31:F2:09:DD:E0:2D:B9:29:F4:2E:8D:23:B6:3A:EF:F9:F2
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 01A0C3A03998995CD9C898D1A33D0C443911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 1838
Signing time: Mon 21 Sep 2026 11:00:52 +0000
Manifest this update: Mon 21 Sep 2026 11:00:52 +0000
Manifest next update: Tue 22 Sep 2026 11:00:52 +0000
Files and hashes: 1: 0HigbbPnkZoyonq1yyfi617xeII.roa (hash: MUaxT3D+6K8H+XJRqIFEKgk/lwlHeolFKwuvBRyzNa8=)
2: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: gpxltD6gDwCTVcOqZqn4HrKbYp5o9iftV3PtUI53tG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:39:98:99:5c:d9:c8:98:d1:a3:3d:0c:44:39:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Sep 21 11:00:52 2026 GMT
Not After : Sep 22 11:00:52 2026 GMT
Subject: CN=49c4bf31f209dde02db929f42e8d23b63aeff9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:88:93:cb:d6:56:26:80:6a:a6:63:42:f0:
66:b8:94:db:17:aa:a2:f4:bc:48:92:e8:21:9c:62:
f2:40:6e:9d:fa:31:9a:5c:09:c6:df:7f:aa:fb:b4:
e7:58:62:36:c7:2c:77:19:f6:8a:23:70:66:b8:86:
2e:52:02:9b:e0:c1:a8:7d:d0:3e:63:08:55:68:6c:
70:71:0a:26:2a:9f:31:a2:c4:74:e1:84:52:78:57:
a3:03:1e:bc:52:6c:1a:28:93:cf:ec:f2:52:ea:e1:
46:81:76:ec:b7:73:2c:ac:fb:94:c6:19:6f:33:d9:
4c:f5:a1:9a:ce:dd:3a:7c:fa:fc:8f:ee:38:e4:2d:
af:19:2b:cd:bf:f7:74:45:66:88:85:16:6c:08:c2:
47:41:d6:4c:5a:d9:92:7c:fc:5c:f5:f5:42:45:51:
2a:0e:40:25:fd:fe:d4:aa:22:77:c7:01:e5:20:b3:
09:46:55:42:59:78:eb:85:57:c3:14:a2:f7:04:46:
1d:17:61:1b:19:7e:35:dc:7b:0f:21:b7:1c:d5:d7:
82:18:f2:cf:c3:eb:d0:6a:bf:37:45:bf:b2:f2:7f:
1f:03:81:8a:2a:22:18:40:68:7b:0c:f5:e7:a6:84:
ef:3e:74:28:a1:e7:26:04:c5:63:3c:5b:12:c7:89:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:BF:31:F2:09:DD:E0:2D:B9:29:F4:2E:8D:23:B6:3A:EF:F9:F2
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:33:20:35:d3:b0:57:c8:a4:8b:0f:b6:db:a3:0c:d1:7b:ed:
ed:bc:a6:5f:8c:2d:7b:d7:8b:68:03:68:21:52:6e:20:d0:cd:
7e:0d:cd:a9:b8:5f:e8:3d:57:f7:e5:60:6d:09:c3:3b:31:b5:
be:f8:cb:6a:da:23:93:ac:c7:a7:b3:68:c0:61:ab:eb:e6:26:
40:7d:da:8b:38:3c:d9:76:1d:f6:d4:f8:87:b6:ef:fc:05:4d:
d6:11:f4:b4:ec:fe:16:9e:3f:e3:31:42:69:22:e5:7b:63:88:
86:f1:d7:37:63:58:72:8a:fd:37:e2:48:f4:51:d9:16:25:67:
a3:48:f4:32:0d:b7:cb:00:34:4f:ff:01:d1:ad:35:e5:8e:12:
c3:d9:a9:3b:e7:61:45:8c:a5:90:83:a3:dd:fe:b5:0e:77:0b:
28:cf:c3:70:fd:c9:5d:40:f7:49:db:0f:80:c0:cd:7b:82:df:
f6:59:28:c7:00:21:df:19:7a:5a:39:96:f7:24:91:a4:ab:ea:
c9:9f:3c:f1:3a:d3:5a:3e:34:cc:af:f4:0e:45:b1:a3:e9:34:
11:d3:e0:32:e3:e1:e5:6b:6b:67:c8:a7:be:8b:47:c9:99:70:
f2:74:39:7d:1d:7b:18:93:1f:b2:5f:63:63:76:45:f6:fb:84:
b8:cf:22:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:59:14 2026 by rpki-client