Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: vElP24ODttF9UN73VD6dgY1yH2FqVFa34hZUmITmPBY=
Subject key identifier: EB:7F:18:3C:41:0A:48:69:A1:D8:C4:70:AE:55:4F:DE:4B:20:DF:8B
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 01A16345E0AACFEA94F757E667F68E72666E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 1803
Signing time: Thu 22 Oct 2026 11:01:26 +0000
Manifest this update: Thu 22 Oct 2026 11:01:26 +0000
Manifest next update: Fri 23 Oct 2026 11:01:26 +0000
Files and hashes: 1: YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa (hash: qv62jghVn/xc1zYuKekCyiDZQVZ2Kui3yZ/JmsGwwSk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: 5URl+D+VcTvKNEwdCjtzQBxdekzZdnsOd/IVX2JqM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:45:e0:aa:cf:ea:94:f7:57:e6:67:f6:8e:72:66:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Oct 22 11:01:26 2026 GMT
Not After : Oct 23 11:01:26 2026 GMT
Subject: CN=eb7f183c410a4869a1d8c470ae554fde4b20df8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:ca:38:69:7c:5d:b5:e2:95:24:74:ea:6c:
35:6d:90:8c:ce:b0:ed:07:9d:88:26:89:ae:9b:c2:
4a:ca:4f:41:17:ed:2e:8c:f5:9b:05:e3:89:62:ff:
73:25:2c:38:e0:75:ae:a0:e6:1a:fb:8f:5d:bd:18:
4c:78:92:a3:22:ec:20:d7:53:28:40:c8:73:1f:c8:
ea:54:76:e1:1b:35:75:57:47:b6:ec:cc:b0:1a:4a:
66:6f:0c:d1:ba:3f:03:c6:8d:3f:d5:fc:42:0e:a3:
fb:51:4b:36:fd:3f:5d:b0:05:ba:e5:f1:2f:e6:ee:
50:86:54:74:34:72:f5:74:c7:ef:65:a0:b8:c0:27:
5b:8c:7c:99:d0:b8:af:38:61:3e:c3:5f:ca:bd:55:
94:35:5a:20:55:87:17:71:00:e1:73:db:8e:ce:1c:
f5:8f:ad:dc:2f:73:23:80:6c:27:cc:3a:e7:3e:c8:
04:93:3c:5e:2a:1e:05:4d:7d:64:2f:07:3b:5a:c7:
9b:1a:f6:78:68:64:62:85:2f:c0:f8:f8:64:6a:06:
4f:cb:09:39:58:9d:2a:8b:52:e8:8b:e4:cc:f3:65:
d4:f2:63:ef:57:ff:1c:24:19:fb:ac:0a:81:b5:17:
08:33:d4:d4:19:d9:11:07:00:27:c9:ef:8f:d3:c9:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:18:3C:41:0A:48:69:A1:D8:C4:70:AE:55:4F:DE:4B:20:DF:8B
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7a:d7:da:d8:c8:9d:e8:2e:fe:5b:ed:85:89:fb:f9:fd:f7:
13:0b:e2:20:cc:9e:81:e1:60:6f:c2:06:27:33:7d:1f:b1:1b:
17:f4:a3:7a:dd:2f:38:d6:2c:d3:28:5f:7b:3f:fb:9c:01:24:
9f:8a:d8:64:76:fa:65:2f:ff:eb:39:d4:59:4c:44:d4:19:4c:
7e:a0:03:41:4e:07:eb:2d:23:42:fa:13:34:20:bf:93:c0:95:
c0:41:eb:35:c9:36:97:8a:7c:dd:11:1a:85:39:70:2d:6a:3a:
b7:dc:d7:ae:e4:4a:45:9c:1d:06:43:78:3e:ce:4e:c6:e2:d1:
01:56:77:0a:7a:51:c8:a4:29:4c:b3:7f:e6:46:9f:1e:1a:d5:
80:2f:b7:91:59:14:25:67:8b:05:62:3f:f6:06:3c:16:7c:43:
c8:ef:e3:2e:23:0d:70:43:9a:02:4e:d9:92:47:53:07:10:f9:
6b:6f:b6:c7:4b:58:cc:a5:f3:e8:76:09:38:5e:92:dd:74:aa:
87:f0:2e:48:29:48:47:06:d8:30:07:44:d1:5c:01:0a:c2:10:
3e:b4:1f:0a:a4:27:9b:f1:19:39:c6:62:77:ff:79:7f:29:b6:
3f:5a:15:61:ba:53:c1:c1:18:cc:13:f9:2f:33:ce:eb:be:06:
21:50:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:49:12 2026 by rpki-client