Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: BsPE1rXpHLIjD1pfT0BQr1sXJBPq4p5dgmOa02BMoWE=
Subject key identifier: 9F:77:68:C3:86:F0:FC:3F:53:C3:D5:FB:A2:BA:BC:6B:5E:04:EF:E8
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 01A15A4272913A22B5B7FD74CA86C2A5546B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0B4A
Signing time: Tue 20 Oct 2026 17:01:06 +0000
Manifest this update: Tue 20 Oct 2026 17:01:06 +0000
Manifest next update: Wed 21 Oct 2026 17:01:06 +0000
Files and hashes: 1: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
2: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
3: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: HMYMHi0+PBOBdh3lPX4uE+QBgw565eopZ5kmMgM1q3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:42:72:91:3a:22:b5:b7:fd:74:ca:86:c2:a5:54:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Oct 20 17:01:06 2026 GMT
Not After : Oct 21 17:01:06 2026 GMT
Subject: CN=9f7768c386f0fc3f53c3d5fba2babc6b5e04efe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:fc:16:b0:f2:3c:60:7a:97:d4:73:57:14:
a3:df:56:d4:7e:ee:c6:9c:56:71:18:94:eb:2c:41:
23:df:bd:85:8c:d8:44:4d:34:e8:ae:c1:2c:aa:b3:
f5:36:b3:9b:37:d6:52:1f:bd:5c:40:e9:f2:e7:eb:
b8:41:b8:85:94:c4:7e:02:90:71:11:e9:da:89:df:
71:fd:fc:a1:61:0a:43:f4:e3:ee:91:e2:12:a5:d9:
0e:3e:99:65:77:fb:fb:52:60:b6:3a:f4:de:ef:f4:
09:8d:24:f9:15:a4:20:19:f2:47:e4:34:56:33:1d:
a0:50:ba:4d:b8:af:21:1c:c5:ad:43:8e:3d:86:36:
1d:40:97:77:75:c7:00:6c:c0:78:5d:48:fa:76:74:
71:6b:8a:fe:be:fa:8c:9b:f5:34:09:87:3a:ef:de:
84:fc:0a:b5:1b:5d:d6:11:9d:a8:f2:b3:c2:98:56:
f3:ef:c0:c3:e2:48:b3:bf:90:72:62:ea:c9:2d:4f:
77:81:24:3f:c2:02:13:80:62:13:64:8c:08:c5:2e:
9a:2f:88:7f:a3:93:b6:2f:af:6c:1f:ca:c0:b2:62:
fd:47:e0:76:58:47:15:78:78:c6:b5:f9:48:28:fe:
b3:0b:3e:b8:f2:e2:f8:11:fb:43:44:3e:1b:0d:10:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:77:68:C3:86:F0:FC:3F:53:C3:D5:FB:A2:BA:BC:6B:5E:04:EF:E8
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:02:c8:85:9e:a3:41:d6:67:c2:98:66:69:86:45:70:ea:10:
b9:cf:20:9a:85:79:2c:57:21:af:94:bc:9f:ea:99:0b:12:24:
f1:02:16:bd:ff:f9:d4:6f:38:8e:1b:d7:a6:ff:19:3c:27:d9:
be:bd:9a:bc:eb:af:d5:b9:63:d3:78:4c:a8:b4:dd:fe:d8:92:
68:a2:12:84:46:83:68:88:cc:78:7d:ab:d0:58:1c:e5:d7:90:
36:51:bf:3f:b7:f8:07:dd:c2:28:c2:dd:4e:30:33:a3:cf:90:
a4:3d:b0:75:ee:2b:ca:f1:33:9c:23:b4:8a:49:71:3d:c7:a1:
c2:cf:ea:4a:bf:54:4e:45:9c:9d:7a:71:39:b3:95:91:23:b5:
8d:2b:64:ac:d0:71:28:2c:9a:23:4a:e5:d8:98:34:8a:e5:0f:
0c:0c:66:bf:12:55:b8:c3:18:7b:86:5d:18:29:36:03:a6:56:
02:e6:91:a3:c1:c9:cd:1f:0d:0c:51:3f:67:58:5c:a1:a3:c8:
c3:01:e0:bf:7a:12:6f:4b:97:6a:bc:9c:a0:99:3d:4d:2e:3f:
37:78:e9:98:09:df:0d:1d:d7:0f:57:ec:ef:22:28:b7:bd:26:
2a:f6:fa:2d:ed:38:2b:b7:1f:bd:1f:9c:0f:68:a8:e8:15:3c:
66:9c:66:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:51:08 2026 by rpki-client