Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: rmnAP5IUscqx2KM/Z7hYiiFLSalp0QyiuO9cmRpZWgY=
Subject key identifier: AA:D9:10:D8:66:88:2C:98:67:F0:BD:D1:C2:BB:2E:BC:0D:4A:F7:4F
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 01A002F02C12132612FFFEFA5FC0807315D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 0DC6
Signing time: Sat 15 Aug 2026 01:01:29 +0000
Manifest this update: Sat 15 Aug 2026 01:01:29 +0000
Manifest next update: Sun 16 Aug 2026 01:01:29 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: QXrmDkoVCzFSELkGBCltqiC85ZIHbqcEI15i10/cay8=)
2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:2c:12:13:26:12:ff:fe:fa:5f:c0:80:73:15:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Aug 15 01:01:29 2026 GMT
Not After : Aug 16 01:01:29 2026 GMT
Subject: CN=aad910d866882c9867f0bdd1c2bb2ebc0d4af74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:be:16:37:69:7a:ca:c5:a5:2f:2d:57:72:
3a:b9:f6:37:85:55:8b:5e:8d:81:c9:cf:ed:25:12:
5b:70:15:30:4a:5d:e5:41:f8:55:e3:58:4d:c0:67:
ff:9d:3b:16:f6:3e:7d:d0:f1:fd:aa:0a:b0:46:45:
56:1b:76:46:fb:dc:63:cc:a0:32:3d:d5:5b:50:8c:
ee:d6:5b:1d:e3:44:11:a4:6e:b9:6f:82:49:00:ea:
27:f7:4a:48:12:09:e1:59:42:74:4a:6c:1c:a7:89:
ce:94:c4:b8:f9:ab:f3:e1:31:84:c3:f0:4e:3f:31:
34:46:e4:41:8b:ac:9d:72:41:f1:73:67:17:ed:57:
3e:da:6b:70:5b:73:27:93:7c:07:84:70:d4:fb:36:
eb:97:49:04:76:52:4b:da:eb:65:37:4b:92:28:1e:
57:cd:bf:44:66:a4:21:8c:d9:9e:ad:d0:95:1c:62:
7f:42:4a:fe:d1:17:1e:38:b7:bd:74:7c:1e:0a:18:
67:62:1b:91:8f:e1:ea:46:ef:20:a0:cd:6b:69:16:
04:98:79:41:e3:51:4d:8d:a0:3b:b4:7e:a6:da:18:
41:18:0c:a4:03:22:92:c2:3e:de:ca:e2:b6:81:48:
fe:22:db:e4:9f:2c:41:ce:1b:9c:22:92:59:da:fe:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D9:10:D8:66:88:2C:98:67:F0:BD:D1:C2:BB:2E:BC:0D:4A:F7:4F
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b5:49:db:13:eb:b9:85:cb:d7:ff:fa:c3:6a:c2:e7:71:4b:
16:fa:1e:37:4f:5a:95:f2:4c:a7:2d:8d:e4:8e:55:99:aa:95:
2e:bf:9a:4e:8e:b4:04:e3:b0:70:23:44:2f:8e:38:02:99:7a:
fc:c1:a8:63:d1:2e:16:ed:6b:c3:b7:f3:b3:46:65:92:35:39:
0e:ed:ca:a6:65:9f:32:99:82:0b:f8:d6:2a:e1:21:77:72:ad:
d3:ab:5a:ac:a9:b4:32:49:6c:33:73:3d:1b:51:f5:82:c3:99:
28:bf:5b:29:6f:94:c9:5d:db:35:4b:b2:4a:0e:70:a6:4e:1b:
37:a4:18:11:e1:82:fd:28:20:80:5e:57:f2:a8:e8:ff:dc:26:
44:3c:00:aa:2a:7f:d5:ca:97:e0:f8:10:02:ee:35:17:5f:48:
f1:22:4f:9b:96:e3:b9:4b:6a:5d:57:a5:03:d1:b6:ae:89:86:
11:3d:3e:76:be:cb:0c:c5:6b:00:34:df:86:ea:37:10:25:ce:
71:72:cb:e1:13:5a:ef:e9:cc:b0:8f:42:6b:34:43:55:2c:52:
1e:c8:58:86:2a:f5:f0:20:97:f0:e9:67:d7:6e:0e:c3:37:53:
80:80:56:cc:97:04:a6:77:03:28:03:cb:5b:9d:85:6a:fd:5b:
bc:d4:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:10 2026 by rpki-client