Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: YGIbeX50eo8DtoZVMopa7hlphhAlu0Z+bZ0iO+hAUJc=
Subject key identifier: 4F:36:7F:0C:22:D1:B4:43:BC:72:F5:A9:86:CD:21:51:7D:90:03:71
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 019D389BF8B660DA6AE8BC5FF56FF71A3F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 091D
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: 1--6A0fn2NhA1NZd62Q5I9zcdB1E.roa (hash: EH25i1o06YPHiAuJedj6ere5DhO1CqohFt6zhHaGS9w=)
2: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
3: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: Sg5kE2qmBPrQwTVWEdtkQmvio6DeIOybky0Pek1PJLo=)
5: sef3oIWVUvY_zvFY7Q-dmEYwMeM.roa (hash: KUYDRoZPtUS/Sglg5oZKEXcSGG037brQKOBSD2zs9MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f8:b6:60:da:6a:e8:bc:5f:f5:6f:f7:1a:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=4f367f0c22d1b443bc72f5a986cd21517d900371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:a6:07:2e:ea:cb:33:89:7f:89:fa:a8:27:
f6:f6:a8:08:7a:0e:ed:17:7c:55:4a:fe:b9:34:66:
6c:5b:8d:b3:c4:75:36:8e:a0:0f:fa:51:82:61:ef:
2f:12:50:2d:8b:f1:67:d9:53:2e:a7:11:17:ff:94:
e4:10:2a:f2:c2:b7:57:59:a9:d1:02:65:08:0d:cf:
22:45:a0:5e:59:1f:a5:90:e1:7d:90:0c:97:70:17:
79:97:8a:30:cb:d6:be:34:a0:5a:94:d9:c9:2d:60:
4f:2b:bf:c3:b9:eb:0d:ca:fa:89:3a:0e:2e:eb:da:
bf:97:f5:ea:1d:ed:79:bf:1c:fe:a8:8f:7b:68:69:
66:d0:67:53:a8:f6:5d:27:8e:83:63:fc:35:b7:57:
63:fb:78:ff:ad:f8:f0:c3:17:7c:44:fc:9f:f7:27:
f3:5a:17:df:b3:71:c3:ea:42:0b:65:a2:fd:5e:df:
92:04:9e:5b:2e:ab:9b:f7:e9:26:93:e0:11:60:87:
ee:16:d7:5e:55:79:06:ef:96:8c:96:81:f0:e3:9f:
f6:f6:d7:8d:aa:50:e3:6e:f6:44:94:1e:8c:0a:fa:
de:1b:dd:05:bb:93:21:ea:0f:23:93:72:55:9e:2c:
73:af:0f:a2:6f:b9:1c:d5:b3:ad:c0:3c:f7:a7:cf:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:36:7F:0C:22:D1:B4:43:BC:72:F5:A9:86:CD:21:51:7D:90:03:71
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d8:2c:e3:fc:1f:d7:27:2a:95:37:65:77:49:dd:e7:d4:42:
42:b3:57:bd:c3:87:45:92:a5:fe:f0:07:c5:5a:78:ee:16:74:
49:19:76:47:91:c4:07:98:a2:77:fd:93:45:32:a2:cb:bd:e4:
10:04:6f:2f:91:19:08:86:85:ed:21:75:1e:9c:dc:10:5b:f5:
01:8a:b6:e7:3c:65:1b:af:c0:8c:35:da:9d:a9:c9:94:04:ea:
da:a9:ff:c9:9b:59:59:91:66:6b:9e:de:0f:ed:29:b9:29:0e:
c2:35:66:8b:7f:11:09:fe:5d:58:bb:d8:d5:20:91:b5:d6:44:
0b:d0:fa:fd:e0:c2:0e:01:f3:ad:9a:49:96:05:e2:09:3b:03:
66:78:36:a8:bd:08:a8:88:8b:6b:b8:01:e2:93:e5:f9:b5:0c:
9a:c4:cf:f1:e5:54:42:80:12:76:0f:6a:86:cb:6f:6e:f7:19:
80:a6:89:ec:8b:21:69:91:09:bd:75:d9:f3:5e:ba:15:2c:dc:
33:b7:40:8b:25:15:03:cf:ae:eb:71:b5:7c:a7:eb:62:4e:5b:
86:32:b8:64:5f:c0:fb:25:bb:bd:18:88:2e:bd:45:9b:6d:3e:
96:17:f0:f5:cf:88:4e:c0:93:26:12:b7:ed:cc:29:b8:e5:e0:
63:f1:9f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:25 2026 by rpki-client