
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
File: qMbudsTo2UYU4IJQX_6MmRokr4o.mft (raw, json)
Hash identifier: AVlLyx+IP6pja5QoRS94HuLWPrLvTH2kr4777QLnFVI=
Subject key identifier: F8:DD:F9:3B:68:B1:AB:ED:F4:F7:07:A3:67:99:C7:82:C3:41:DE:21
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Certificate issuer: /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial: 019D390A5F6EC6975E169286F39574475060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
Manifest number: 14F5
Signing time: Sun 29 Mar 2026 10:01:14 +0000
Manifest this update: Sun 29 Mar 2026 10:01:14 +0000
Manifest next update: Mon 30 Mar 2026 10:01:14 +0000
Files and hashes: 1: Ig5_iQWFva6wEaZIrvBQREaV2rM.roa (hash: FNZtMMnZ+tjsd2FzsKX3m62nR2nsdipfzhoI6BMqglg=)
2: qMbudsTo2UYU4IJQX_6MmRokr4o.crl (hash: gqtiaBQ5DH2HbnWJiHLHJghc7YoB2hz87oklJsDMFPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5f:6e:c6:97:5e:16:92:86:f3:95:74:47:50:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Validity
Not Before: Mar 29 10:01:14 2026 GMT
Not After : Mar 30 10:01:14 2026 GMT
Subject: CN=f8ddf93b68b1abedf4f707a36799c782c341de21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:89:0c:93:fa:42:61:56:93:00:b8:57:c8:
33:b8:c0:11:46:ad:f0:f3:2a:b7:36:3b:1a:c9:fd:
7c:0f:a6:35:34:50:f1:1e:c5:41:bc:25:49:6f:e2:
44:19:8f:a7:59:1c:c3:07:b6:32:04:86:b1:9e:c6:
6b:9f:dc:ed:ef:69:b2:09:c4:4a:e3:18:e7:66:64:
51:69:2e:87:1b:5a:8e:ec:c2:d0:0e:7c:24:ea:d7:
8e:c6:07:0b:c4:be:30:32:96:e9:0f:64:11:9a:44:
dc:85:ca:5b:cd:c9:90:42:e8:e7:98:5f:fc:9f:25:
24:20:b8:35:4c:0e:1a:fb:cc:c1:72:6f:74:13:de:
63:b0:87:ec:18:e7:88:f4:fd:49:0c:4b:26:7b:2b:
7e:87:75:82:9a:54:91:91:d8:fd:31:78:b4:7f:6a:
55:8c:1e:bc:22:6c:d1:27:fc:6f:e4:fb:e8:ab:79:
b5:22:8e:d1:41:5d:70:14:ed:91:6c:06:c6:25:77:
33:76:1c:a0:2a:a9:cf:cd:fc:d1:91:a0:28:5d:dd:
c4:23:63:3b:2f:3b:18:0e:7a:88:e6:e2:94:fc:02:
f0:98:6e:da:6b:78:85:d0:7e:10:8b:14:1b:84:ff:
b1:d0:2c:bc:5c:e1:be:00:27:f7:32:97:30:06:e2:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:F9:3B:68:B1:AB:ED:F4:F7:07:A3:67:99:C7:82:C3:41:DE:21
X509v3 Authority Key Identifier:
keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:34:56:79:b9:d6:b6:ac:f1:72:b2:ea:5f:83:dd:7c:23:21:
7d:55:da:17:61:19:a7:f3:50:c4:5c:26:89:23:ee:6e:f5:40:
0d:2f:e2:5a:99:53:e6:0b:58:a1:72:c7:79:cf:5a:ea:12:b1:
b0:04:f2:be:a0:ae:ec:18:98:e0:15:38:52:e4:31:2e:7b:79:
a7:51:26:b4:ea:b5:ac:18:2b:e6:bc:bc:0e:0d:8c:e4:5a:7f:
b7:f3:c1:23:49:9c:71:8e:5f:0c:64:7b:ed:80:78:9d:1e:d8:
07:a8:5d:33:0f:82:c1:cc:de:4c:c6:2a:f7:53:99:9d:9b:86:
82:33:31:04:0a:35:3e:e1:73:32:0f:74:9d:d9:a0:1b:44:a3:
84:47:f1:b8:89:6c:20:74:31:c3:95:f3:8a:fd:eb:21:ba:92:
56:6b:f2:31:05:f2:27:a1:f0:77:3a:98:ac:46:b8:21:73:cf:
56:98:31:55:66:05:20:cf:49:4d:40:c6:90:ad:91:18:6c:c1:
12:3a:a8:0f:a5:c2:fb:f9:e8:fd:1f:83:a4:fc:23:da:a7:e1:
1d:53:6c:2a:4d:c0:50:b4:7e:3d:4c:1a:3c:43:d4:e2:45:68:
1f:c4:d4:8c:6b:19:bf:f5:61:c8:3b:5f:46:6b:b4:1d:e5:2a:
fc:47:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:41:09 2026 by rpki-client