Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: +f2OCsGFXouoleF8Exexz1sSI2gYj8ju+nvRHfUVAv0=
Subject key identifier: 8C:D9:59:5E:55:E3:EE:DF:8B:B9:7A:C9:0E:7F:52:03:F6:83:D8:28
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 01A0C28D9F6DCFB376F3AE83D46AE461AE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 06:00:56 +0000
Manifest this update: Mon 21 Sep 2026 06:00:56 +0000
Manifest next update: Tue 22 Sep 2026 06:00:56 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: kLUypChBjtnb+HX0+3oeFGYEOBCYXtK7vLcOCCErh2Y=)
2: ObhdsLoa75B_QVzex3UCt65oqHE.roa (hash: 7Rfm5BnnQZXvsHH1k9k4V3PGLN/GXjrUrEyjZS8MwJc=)
3: UIll6YIedo-QY-yPa3jX6bp0h0Q.asa (hash: AZvI46Ji0DAlrLNpPAxAAMglepWrJCLYP2IYIypu/4Q=)
4: a-4CKpObY5cKeSuMoMgMffjvfWQ.roa (hash: SXxBaVwsAs/dLbHjv4oplsKiiaVfa0F06dRrYRWo100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:9f:6d:cf:b3:76:f3:ae:83:d4:6a:e4:61:ae:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Sep 21 06:00:56 2026 GMT
Not After : Sep 22 06:00:56 2026 GMT
Subject: CN=8cd9595e55e3eedf8bb97ac90e7f5203f683d828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:c3:70:e3:10:04:28:45:ec:7e:97:1e:ed:
8f:35:55:87:a9:45:cc:9b:d2:8c:a9:ed:cb:34:a6:
38:63:e0:dc:c3:35:b7:11:7e:b1:b5:06:77:60:02:
2c:f6:11:fa:f8:41:78:62:a3:9e:fe:7b:5d:a7:04:
38:7c:74:1d:bf:ea:08:d3:09:61:3f:0b:c4:a2:5a:
2f:79:d8:91:b2:09:01:bd:a2:9e:50:05:17:da:a4:
90:91:27:e2:01:86:89:73:f0:47:82:69:ac:3b:06:
f7:a9:36:3a:21:84:62:da:66:49:b3:d6:53:9a:fd:
23:62:f9:f3:8c:4b:b7:10:e4:c3:8a:dc:2f:37:2a:
fe:06:64:24:ab:a5:9f:c3:ee:ed:27:b9:e5:69:9c:
5a:12:b4:10:a6:0c:b0:cf:3e:88:dc:ac:64:1e:93:
44:31:99:10:78:7f:2d:6e:1e:d6:37:9e:8c:95:c2:
26:35:9a:27:d7:a5:0e:a3:22:e1:c2:53:f1:33:c1:
57:3f:b5:16:ea:20:02:37:b2:e5:90:41:86:e3:01:
a0:da:2e:c8:b5:38:02:bd:0a:30:9c:91:0d:19:ee:
80:47:e2:a3:ed:2f:a1:59:62:9e:42:df:32:05:24:
e8:be:02:14:3a:90:43:68:1a:c8:4c:0f:be:e1:1b:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:59:5E:55:E3:EE:DF:8B:B9:7A:C9:0E:7F:52:03:F6:83:D8:28
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:59:bb:63:50:81:7e:3e:0c:d1:ef:ca:3f:e5:63:97:b4:c9:
a1:b6:35:16:57:51:3e:8e:68:52:a5:b7:49:e0:d3:a4:de:74:
a9:c9:12:a2:38:ba:1b:70:56:6d:34:fe:a4:d5:e4:13:47:61:
c6:1b:7e:60:c6:cb:99:20:be:8c:14:f4:2e:64:0e:b4:bb:70:
67:4a:c2:56:1c:53:d8:51:88:98:72:a1:f5:b4:70:5f:41:a7:
e0:7e:5f:60:1c:bc:e5:79:ae:9b:e7:49:79:81:2c:a8:a0:69:
8f:6c:71:bf:c1:73:17:55:71:82:c1:23:3f:d5:b8:74:61:5b:
bb:93:6c:77:e9:7f:96:47:2d:26:e1:df:a7:1a:f4:c9:6a:48:
f8:5d:0b:92:c5:f7:fd:06:dd:29:aa:9e:55:0f:8e:a7:a4:57:
e5:fc:99:ff:1f:d9:10:a8:5d:a4:d0:dc:a8:05:89:15:2e:1d:
b5:5a:70:1e:5f:ca:c7:73:30:7e:20:d8:51:d1:37:0a:69:e2:
3a:35:20:8e:7a:bc:7f:fd:54:2d:45:d7:3f:01:11:2c:e0:9c:
08:77:26:df:2f:ef:fe:1a:78:d3:1d:3d:b6:91:d4:e4:75:64:
dc:c7:d1:11:5b:08:88:17:46:78:2d:c0:de:7a:c9:10:50:89:
14:da:5f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:46:43 2026 by rpki-client