Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: Pedc8fTMXRn8572ons8u/fiayt2pAEFq0OkX7UKYUDo=
Subject key identifier: 69:98:33:CF:1B:08:A8:6E:CD:9C:5A:EE:83:B9:31:B0:5E:17:40:3E
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 019EBE10D71FB987D9DB0783EDC2F929B2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 172C
Signing time: Fri 12 Jun 2026 23:00:35 +0000
Manifest this update: Fri 12 Jun 2026 23:00:35 +0000
Manifest next update: Sat 13 Jun 2026 23:00:35 +0000
Files and hashes: 1: 0HigbbPnkZoyonq1yyfi617xeII.roa (hash: MUaxT3D+6K8H+XJRqIFEKgk/lwlHeolFKwuvBRyzNa8=)
2: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: fezuzPitvebQyQNRYSw29cw7gysw6VPoUbA3GP6icYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:d7:1f:b9:87:d9:db:07:83:ed:c2:f9:29:b2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Jun 12 23:00:35 2026 GMT
Not After : Jun 13 23:00:35 2026 GMT
Subject: CN=699833cf1b08a86ecd9c5aee83b931b05e17403e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e6:43:6c:2c:ec:06:e0:09:98:41:94:0d:ec:
b2:c9:d4:bf:7d:3d:10:76:0b:ef:18:3e:95:97:12:
b7:de:9d:3a:98:50:17:ac:80:08:d6:a9:3b:bd:0e:
76:76:06:dd:2c:1f:cc:db:e6:84:eb:fe:e9:2e:30:
ef:eb:32:52:76:12:8b:2a:9d:91:ce:07:1f:88:da:
f3:10:10:f9:2d:34:0d:61:c2:90:d5:f6:4c:03:23:
69:2a:bb:c9:00:e4:76:29:bf:d7:32:c9:ee:a5:22:
78:7e:8d:af:fe:39:47:c7:32:ca:16:63:34:7c:e4:
0f:18:29:82:c0:a0:a5:48:32:c6:a5:bc:e4:42:73:
91:ac:9e:0b:60:61:4e:00:59:d9:3a:90:2b:ae:ea:
89:cd:6b:44:87:14:85:c3:cf:b9:78:76:f1:19:e1:
79:6f:5e:ce:97:2c:2e:62:d2:e6:77:71:71:a6:ba:
55:43:53:f6:ac:de:4e:4d:22:eb:f1:f0:73:22:b8:
1e:f4:c8:80:2c:96:9a:ae:ba:bf:30:4e:53:26:db:
ed:34:43:07:64:1e:a9:12:2e:f9:e0:ff:f9:dd:0a:
88:1b:06:83:35:79:0d:71:f5:e7:71:cf:42:27:f9:
cf:39:79:d6:19:dd:8e:cb:60:34:1f:18:42:d6:7b:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:98:33:CF:1B:08:A8:6E:CD:9C:5A:EE:83:B9:31:B0:5E:17:40:3E
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:59:bb:1b:69:90:32:e7:e1:38:25:83:e8:9e:82:72:26:ef:
92:a3:ee:c2:56:0d:2c:99:65:ba:5c:d0:37:3c:f7:7e:6c:5a:
8e:98:ae:f9:e2:0b:6d:91:5c:67:1c:2c:36:83:62:e8:35:5f:
fb:b2:e2:14:01:3f:ef:2d:41:e9:ae:0c:bc:7a:4c:ac:0b:1e:
97:37:cc:14:36:34:c9:90:3d:92:03:27:2d:56:25:5f:b7:0a:
1b:26:1a:b7:59:9c:c6:91:29:39:98:05:71:4a:75:6e:ec:ea:
99:f7:73:9f:be:d0:fc:65:c4:99:2e:87:12:0e:36:3c:b5:6d:
9e:08:93:a2:dd:a4:f4:ac:78:0b:f4:8a:7f:70:cb:03:66:0a:
ef:01:f1:5b:f1:8c:e6:66:c0:b5:d3:df:6d:53:2e:cb:46:e5:
c4:47:34:3b:25:72:00:1e:83:44:84:79:4d:a0:3b:1e:ff:90:
20:24:c8:3b:c6:f2:64:b7:dd:8e:a9:ae:35:13:31:98:b6:ff:
fd:5e:85:aa:2b:7b:df:d3:ca:45:86:a2:2b:f3:7d:f0:f4:6e:
24:6f:0c:28:1d:be:da:d9:d2:df:3a:c2:70:41:7f:d2:b7:b2:
18:23:9f:e5:0a:e4:5e:a7:7c:f3:57:3f:37:e6:65:97:f2:57:
cc:b2:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:37 2026 by rpki-client