Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: vs0MQpOJqKRV1cCfr0zODYiQBN3qKr+Ec0Txne+LHHQ=
Subject key identifier: 6D:BA:9A:DB:29:9E:31:A8:BE:29:A9:FF:23:62:60:AC:A2:15:DF:37
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 01A064FF424EB5541D45D8429FB35ADB70BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0ACB
Signing time: Thu 03 Sep 2026 02:00:45 +0000
Manifest this update: Thu 03 Sep 2026 02:00:45 +0000
Manifest next update: Fri 04 Sep 2026 02:00:45 +0000
Files and hashes: 1: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
2: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
3: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: ZnePTVVCPtOvoSp3L9qxIwsG/8Ymrtcb60SFBqS6Nl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:64:ff:42:4e:b5:54:1d:45:d8:42:9f:b3:5a:db:70:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Sep 3 02:00:45 2026 GMT
Not After : Sep 4 02:00:45 2026 GMT
Subject: CN=6dba9adb299e31a8be29a9ff236260aca215df37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:27:7b:cb:5e:c9:0a:bf:8d:ed:da:59:ec:
60:c6:78:1b:d9:b1:04:24:e2:89:21:6d:b5:fd:d8:
22:51:c1:bf:4e:38:2b:3d:ec:3b:fb:2f:26:46:77:
b7:d7:2b:e5:67:b4:04:32:99:68:28:66:2a:1c:f6:
a6:d2:77:6b:35:24:11:21:ee:20:b9:f6:4d:a7:c5:
7d:57:e0:9c:aa:40:18:41:6d:60:21:8b:02:72:ab:
ad:3c:c6:94:03:e8:16:a3:11:af:31:21:57:72:e3:
c4:35:f9:91:3f:d9:c4:50:44:6a:97:65:c1:f9:0c:
ad:25:f7:ed:2a:03:21:26:50:21:48:30:73:6d:4e:
50:ae:4e:67:b6:a1:05:5a:4d:5e:e4:4d:2c:16:ea:
7f:c7:5b:61:17:ed:c9:44:cf:4e:07:e7:40:9a:7f:
d7:42:83:39:46:e2:88:0b:3f:dd:1f:0e:d8:21:bf:
bb:58:53:a7:29:18:f0:76:ed:4e:34:f7:0a:bf:e9:
ba:0f:30:3f:44:81:5b:fd:02:73:70:9e:59:a0:4f:
a9:40:18:43:30:de:79:98:be:cd:e0:f6:24:ca:1d:
a2:be:89:fb:4b:08:65:a9:7f:c5:a2:53:87:20:fd:
60:2d:33:72:00:9d:18:6e:ee:d1:31:a7:de:79:c7:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BA:9A:DB:29:9E:31:A8:BE:29:A9:FF:23:62:60:AC:A2:15:DF:37
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4e:c1:09:8f:3c:96:34:9f:e4:d4:06:e8:d4:92:6e:64:64:
03:67:1f:32:41:f2:01:bb:15:67:3d:3d:fb:fe:75:47:81:40:
7a:1e:4d:0b:e8:db:ad:4d:38:78:0d:30:34:7c:82:ff:a4:b7:
ed:4a:eb:36:57:7d:55:06:af:94:4c:da:87:32:52:85:2d:c0:
b4:42:4b:9a:4d:9c:22:61:06:12:31:fd:6c:dd:f5:31:90:02:
53:be:e3:15:af:7e:6f:a2:fb:3d:32:17:6f:ee:7d:ca:fa:9e:
72:df:dc:da:af:0a:aa:bd:a3:c6:5c:38:4f:45:b0:f6:1d:11:
d5:33:b2:7f:e8:a9:8f:df:f3:62:a9:ab:75:43:26:08:7a:59:
ac:4c:b2:50:f9:2f:0d:f3:89:3e:80:35:47:7f:59:86:65:87:
e7:06:f6:a7:bb:a3:6c:95:07:86:f8:39:83:80:94:06:c3:e4:
3c:3b:aa:29:75:db:e0:73:01:71:4d:7d:25:2c:d7:24:a6:7d:
7e:20:2a:b2:e8:26:51:b6:ea:4a:a0:92:24:7a:8c:48:98:ff:
b1:a8:56:e5:cc:5c:58:4e:4e:89:fb:f8:ad:08:70:88:ab:39:
a7:cd:d8:bf:07:3f:4f:bf:3e:c7:d3:34:25:76:52:02:90:2d:
ef:7b:47:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:36:59 2026 by rpki-client