Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: h+LTHe2dHtkxFiCHvP3q/XphPoG6wz5KHjBAyI0C8A0=
Subject key identifier: 5C:16:7A:82:00:2C:0B:04:EE:C8:3B:32:DB:57:CF:AE:A0:90:AC:6A
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 019D9A74A248BBAC8387C745FA82E7C72330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 1695
Signing time: Fri 17 Apr 2026 08:00:28 +0000
Manifest this update: Fri 17 Apr 2026 08:00:28 +0000
Manifest next update: Sat 18 Apr 2026 08:00:28 +0000
Files and hashes: 1: 0HigbbPnkZoyonq1yyfi617xeII.roa (hash: MUaxT3D+6K8H+XJRqIFEKgk/lwlHeolFKwuvBRyzNa8=)
2: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: P7UJkKCe3LG6qh/LENthPMPeXjNiHP7EoRoHCTV6/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a2:48:bb:ac:83:87:c7:45:fa:82:e7:c7:23:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Apr 17 08:00:28 2026 GMT
Not After : Apr 18 08:00:28 2026 GMT
Subject: CN=5c167a82002c0b04eec83b32db57cfaea090ac6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:35:c0:99:73:09:5a:ee:96:0d:e6:9e:8c:00:
a7:93:5c:3c:36:f1:bf:8c:88:f1:a9:74:b9:eb:42:
d4:f0:85:2e:07:e7:af:9f:f2:9c:9a:dc:ea:a8:07:
22:8d:e8:26:2e:91:b3:61:5e:3f:55:70:2e:f7:99:
a1:b3:50:9e:06:1d:88:35:de:22:4f:8c:60:aa:80:
a7:ee:37:e7:84:fe:bc:0b:71:2f:41:c8:d2:8f:10:
ab:4b:59:3c:24:2f:60:c1:2b:db:83:c0:84:a0:f6:
56:ce:93:23:f1:0b:be:67:fa:42:b8:ea:cd:72:19:
30:21:dc:c4:21:04:e1:fc:e7:68:be:98:55:38:0b:
32:7c:f3:6c:e8:b8:17:d5:26:19:cf:b0:68:67:f0:
04:c0:9a:7f:67:dd:9f:4f:80:c3:2c:a9:52:55:4a:
dd:0e:9d:3e:a9:3e:b3:25:2a:85:6d:44:ea:64:72:
5b:b5:51:7d:a7:72:d3:3e:0d:d0:c5:e3:bb:d5:f2:
0a:99:77:02:d7:75:45:68:7f:ba:62:32:ce:36:97:
f2:68:46:73:da:b0:d3:f4:e4:66:0b:de:44:e5:af:
e1:e6:4e:47:2d:9e:14:b4:a0:41:0b:66:bf:a2:51:
43:f2:10:6d:77:8d:c6:9a:3f:b2:ce:a4:ac:51:32:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:16:7A:82:00:2C:0B:04:EE:C8:3B:32:DB:57:CF:AE:A0:90:AC:6A
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d0:74:7d:f3:8f:26:02:26:1d:8b:26:5e:21:b9:5c:33:6b:
3c:c7:31:80:f7:3b:50:5f:da:29:bf:ee:8a:bc:ce:fb:ea:ef:
75:7c:4c:dd:11:7c:65:28:96:0b:4c:68:10:10:74:d1:c7:e9:
9f:58:98:23:da:b3:19:54:1a:a4:a4:b9:bb:c3:9f:47:2d:da:
1b:9a:c7:84:f5:41:54:62:04:be:b0:83:e7:a5:a5:3a:b2:ea:
86:44:58:dd:3b:4c:b3:0f:9a:5f:40:65:b3:f1:df:a9:c4:f8:
07:f8:dd:ce:4d:48:73:c6:4c:ce:26:82:f5:a3:79:fb:45:aa:
66:85:65:34:47:ce:d3:90:b4:77:05:da:f0:24:d1:95:86:1c:
38:b3:fe:f0:78:ed:24:3f:10:48:9b:a9:f6:81:18:6b:05:0d:
d8:5d:ba:58:93:c0:25:71:1a:58:d9:f2:83:68:a2:68:79:64:
a8:1b:1c:14:4d:61:ee:40:70:54:16:20:42:19:59:e4:cc:4b:
7a:3a:d1:cd:e8:c8:34:91:27:cb:55:19:29:88:41:43:c6:e5:
f6:83:4b:c8:7c:cd:59:65:dc:a2:be:d7:03:6e:00:7e:c8:82:
a2:63:0b:97:0b:49:51:0b:25:ab:eb:20:43:c2:23:56:95:8e:
e9:b3:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:42 2026 by rpki-client