Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: +v/pKvpZFWDWpMgTyMMu+Eapy3M1nirvOwfeRtzKrBE=
Subject key identifier: 71:90:A4:29:B7:27:53:50:EA:B4:44:85:A5:F5:28:A4:97:B7:35:66
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 01A15665F56241F248D4146D158136EE29D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0B48
Signing time: Mon 19 Oct 2026 23:01:24 +0000
Manifest this update: Mon 19 Oct 2026 23:01:24 +0000
Manifest next update: Tue 20 Oct 2026 23:01:24 +0000
Files and hashes: 1: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
2: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
3: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: 0SQTfR7Yf5k/nuNVc24ACaWeaFBBNxML7d11CFTXSqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:65:f5:62:41:f2:48:d4:14:6d:15:81:36:ee:29:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Oct 19 23:01:24 2026 GMT
Not After : Oct 20 23:01:24 2026 GMT
Subject: CN=7190a429b7275350eab44485a5f528a497b73566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:62:24:5c:ba:77:cc:b0:28:1e:20:16:46:ac:
9d:d9:be:d9:9f:fd:82:6e:ef:f3:19:a2:37:a2:0a:
48:72:c4:ac:42:5e:d7:7a:3f:28:0d:4c:ef:3c:6f:
15:89:2f:bc:95:e2:ff:da:13:69:cc:0a:ad:e2:72:
e7:7d:47:e9:c0:20:2a:df:3e:dc:c6:50:23:07:49:
bb:84:c0:1e:cf:60:e1:d3:17:37:c1:d6:20:20:ec:
5d:77:e9:95:b2:8f:bf:17:b7:58:6a:58:a2:04:e2:
b9:c2:db:ff:7e:8d:ed:d3:d0:32:2c:d3:60:16:10:
f6:82:10:b9:4f:4c:c7:78:e1:21:2a:c2:0b:81:6a:
9e:81:da:77:95:9b:3f:11:38:4f:34:63:f4:16:27:
a3:5a:c1:85:08:21:45:74:26:fa:cc:ef:12:e0:fe:
95:29:0c:cc:ec:86:16:5c:31:4f:8d:0e:55:06:87:
08:4b:db:d6:ad:d9:72:e3:f7:e4:36:aa:51:03:06:
a1:30:e8:7b:29:7b:70:93:13:5b:28:b0:f2:d2:6f:
07:bd:ce:e8:ae:ea:f1:9d:e6:f2:7f:5d:1c:18:08:
6f:84:04:65:7a:f6:04:ee:9a:bf:49:86:0e:d9:db:
a2:b9:91:5d:a6:47:90:5a:bc:84:9f:df:dc:64:e0:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:90:A4:29:B7:27:53:50:EA:B4:44:85:A5:F5:28:A4:97:B7:35:66
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:54:b3:3b:b6:14:1b:44:e5:56:55:09:36:d0:f8:09:98:c7:
50:95:3b:ee:df:39:65:aa:11:e4:9b:70:23:e7:6c:b2:c4:d0:
cc:14:55:1e:60:bc:81:f6:b2:03:d2:2b:d2:2c:d8:9f:ee:3f:
e1:30:bf:2e:63:9f:5b:3c:a3:c0:17:9d:0e:a9:70:4e:87:6d:
45:7b:1f:d4:b0:92:e8:80:cd:69:52:c1:62:4a:af:89:82:03:
be:87:86:06:87:5d:e1:4e:59:32:3d:88:12:7a:b8:ee:64:4e:
75:7c:37:3b:2a:42:07:da:b2:70:21:06:e8:08:9d:e6:bc:21:
a9:66:ec:d9:1a:da:76:db:37:4a:55:88:7e:bd:43:10:64:00:
18:73:63:29:31:f7:92:c0:c7:04:77:e9:0b:18:18:8c:13:06:
39:fd:f0:91:84:f3:15:90:ae:12:cf:17:28:b6:73:30:e4:83:
80:95:29:43:eb:12:d8:14:d9:55:83:de:cb:c7:28:04:d3:de:
d4:c6:6b:84:64:ea:98:d0:4e:06:93:62:19:c3:ff:1c:24:4e:
d5:ae:fe:bc:f2:7f:3a:1e:e9:b2:b5:ee:5e:ea:ef:b6:18:dd:
9e:b3:29:7b:42:35:88:b5:78:44:fc:22:7a:b4:08:26:5c:db:
6b:c4:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:38:46 2026 by rpki-client