Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: PVgAGgVLMx9fn1HA5dhEqLlqVrYpSbiwGcPKmz88f60=
Subject key identifier: 0A:D0:F8:50:FB:82:22:B9:3F:BC:DA:95:6E:46:10:53:C9:E9:91:43
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 01A15AB063A80CD2C2E0949FC30EC217934D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 0E78
Signing time: Tue 20 Oct 2026 19:01:11 +0000
Manifest this update: Tue 20 Oct 2026 19:01:11 +0000
Manifest next update: Wed 21 Oct 2026 19:01:11 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: guh3/HfnGjNpPMaU4ctSqwVf4S1y10bgCrSbZ6t/sOI=)
2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:b0:63:a8:0c:d2:c2:e0:94:9f:c3:0e:c2:17:93:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Oct 20 19:01:11 2026 GMT
Not After : Oct 21 19:01:11 2026 GMT
Subject: CN=0ad0f850fb8222b93fbcda956e461053c9e99143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:0c:eb:b8:9c:7c:ba:99:42:37:31:18:63:
59:11:1c:e4:09:e3:bc:08:c4:41:8c:ac:4f:f6:6b:
3e:16:16:00:89:89:62:41:be:4a:e1:3d:06:8c:23:
39:68:c4:40:95:6b:6d:c4:01:e9:04:ba:6e:3b:5a:
6b:63:aa:3c:21:f7:3b:5e:8b:ca:81:9c:01:a1:0d:
b1:0a:4d:f5:4a:c7:e4:79:51:3d:9d:8f:16:91:42:
18:fc:16:bb:ef:7a:55:c4:d3:85:c8:6c:f6:74:85:
5f:48:53:97:3b:87:7c:1b:8d:82:62:be:8f:a6:92:
c7:12:7d:df:23:f1:d9:70:c5:45:06:68:49:08:8b:
00:d2:22:20:3e:ac:1d:e3:60:9b:ab:c4:10:a8:15:
79:74:d8:05:0b:7d:f5:c4:3a:d4:70:25:70:6c:91:
5a:90:e6:60:c2:2f:15:ae:17:66:2a:d9:52:02:2e:
c6:4f:23:4b:51:30:f7:20:ca:0c:be:21:f7:61:7e:
23:ec:31:46:88:9f:56:d3:60:6a:33:e0:48:97:09:
9f:17:00:bb:85:e2:44:8c:78:b5:3f:91:85:19:77:
06:9a:a4:44:05:ce:12:1f:81:33:49:bf:64:fb:25:
96:fa:6e:eb:d9:56:b8:18:73:62:94:2b:0c:9e:c0:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:F8:50:FB:82:22:B9:3F:BC:DA:95:6E:46:10:53:C9:E9:91:43
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a4:9e:c4:ec:0d:80:be:47:65:ba:4e:fc:77:49:c7:c5:11:
f0:40:31:24:e7:7b:29:23:dd:ee:f4:09:9a:05:19:99:68:d2:
d0:5a:0a:88:e3:d4:ea:ce:1b:6b:0f:b7:2c:60:3f:4b:f1:56:
e2:65:5c:c8:d1:d2:39:a9:d3:c4:5e:76:8e:d9:53:f4:d2:32:
8f:17:4b:09:e8:50:4b:01:5e:fa:35:7f:a1:50:f4:4e:1f:9f:
58:37:55:03:5c:07:a5:2e:8a:3b:ed:50:02:72:5a:c4:99:e3:
48:5e:37:97:0e:cf:3c:d0:d1:31:30:d2:b5:37:d9:c2:25:c6:
98:0f:34:b1:87:10:a9:ba:c0:52:e8:c9:bc:64:56:b2:aa:39:
56:6f:29:b5:65:4b:09:52:74:e5:ce:ac:1c:16:84:e5:4f:04:
b3:4c:89:84:be:36:93:4c:0f:8d:2d:d8:b9:fd:cb:4c:f7:1c:
af:5c:6e:41:41:ca:cb:a8:16:46:a6:a9:01:a6:65:40:99:ea:
a6:eb:b7:cf:7b:29:28:68:2b:88:5d:84:fd:93:d2:01:51:cc:
ce:64:40:09:16:e0:f7:d2:7e:8f:7f:94:2a:72:6e:d8:d2:eb:
41:14:c0:42:ea:06:9f:bf:6a:af:a6:ab:17:6e:4a:da:fc:4c:
e7:de:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:39:41 2026 by rpki-client