Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
File: q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft (raw, json)
Hash identifier: Zld8NUx0P97Z+d12WCkJB8dBahNJ++oqkYG6skcIyek=
Subject key identifier: CF:65:46:8A:D4:E9:2A:78:4A:C4:EC:F0:DD:CB:99:4D:65:AF:69:D2
Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Certificate serial: 01A17BF24C7ABC4BA9F6DBA0964819447F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
Manifest number: 12B8
Signing time: Tue 27 Oct 2026 06:00:39 +0000
Manifest this update: Tue 27 Oct 2026 06:00:39 +0000
Manifest next update: Wed 28 Oct 2026 06:00:39 +0000
Files and hashes: 1: eutBwstQCFRzhm35XTnNphMWByQ.roa (hash: RdOW4ekiWsJoF7BZmUsggiXem+HWt5D8Hbfh8/B+px8=)
2: q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl (hash: uooxBKb/QuVkgP6nTLXKCudVFWNK5dNSu3U+Pgib5Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:4c:7a:bc:4b:a9:f6:db:a0:96:48:19:44:7f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Validity
Not Before: Oct 27 06:00:39 2026 GMT
Not After : Oct 28 06:00:39 2026 GMT
Subject: CN=cf65468ad4e92a784ac4ecf0ddcb994d65af69d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:3c:5b:84:bd:67:5d:9b:0a:ca:5a:a4:12:
7b:b1:4e:13:f7:de:3c:18:c6:5f:aa:08:e9:d4:bb:
9b:d4:13:13:f6:d8:34:98:79:f7:b4:47:b9:96:51:
00:8e:7c:14:ee:47:24:10:85:19:9f:85:a0:20:b6:
2d:f5:c8:9c:12:b8:24:55:61:5c:99:d7:4c:84:8b:
0d:28:7b:10:f8:c7:a4:84:72:1e:8b:d9:f0:83:38:
34:de:6d:a4:08:ba:f0:61:46:f4:bf:13:6b:a9:a8:
69:3e:d3:03:df:9e:7b:12:06:74:81:5b:5f:7d:05:
ff:1b:8e:36:ad:97:15:1e:e9:88:a2:28:3d:d0:f2:
33:e8:56:20:8b:f1:6a:67:74:e2:1c:46:08:f7:60:
eb:70:b4:51:92:15:72:58:cc:96:92:14:a5:61:77:
bd:bf:cf:7a:32:9d:7b:bd:ea:12:3d:6e:3a:12:91:
93:42:9e:76:f4:97:0f:99:de:12:72:31:1e:c6:10:
07:a2:b0:57:67:66:2b:fe:34:b3:34:14:59:31:d5:
19:29:b0:da:64:c1:b4:f6:3e:35:d3:fe:64:9a:63:
13:50:cb:82:1e:ae:0b:67:84:7e:ee:ec:e8:0d:33:
21:35:62:c4:1b:d7:28:71:ba:29:0c:df:6e:b9:8d:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:65:46:8A:D4:E9:2A:78:4A:C4:EC:F0:DD:CB:99:4D:65:AF:69:D2
X509v3 Authority Key Identifier:
keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:54:8e:05:0b:cb:8e:9b:93:49:5f:0b:29:51:d0:9d:d0:0f:
26:9b:fc:b4:b2:b5:87:77:e2:e5:76:6a:1e:7f:70:8e:0e:8b:
90:7d:ea:a3:5c:d6:e0:05:ea:ce:ab:b9:6b:80:9b:cf:3b:3a:
3e:d5:92:2d:57:38:56:f9:3f:d5:5d:af:bf:44:14:f7:a5:95:
8f:d8:6d:03:b2:eb:2a:51:e4:dd:a8:aa:c1:8d:fc:16:28:0d:
1b:7f:8a:3e:c8:42:05:0e:90:07:9e:b5:cd:6b:20:1a:6a:bd:
95:7d:27:d0:b7:16:87:fc:3d:ee:5c:2c:6c:ea:58:b6:6f:4b:
70:2d:07:6d:00:5f:9f:1b:e0:e9:f1:0b:4b:86:b6:33:ee:b6:
fa:35:ab:19:c4:36:30:96:60:c4:4d:02:fc:ea:d4:d4:4a:c2:
90:d6:12:85:67:ae:a2:d3:83:a7:4c:11:a0:c4:ef:c7:4e:9a:
35:16:e1:f2:78:af:f3:ab:d5:21:11:f2:c4:c2:f4:ef:a2:34:
55:9e:1b:a5:c5:b7:2c:a3:d7:51:32:30:25:7b:f9:f3:f6:d3:
90:a6:15:36:52:cd:58:b3:6c:de:1f:89:a3:4c:77:52:44:99:
65:75:f8:70:c2:c1:92:b5:fc:a5:95:98:32:28:aa:54:4a:32:
e8:13:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:22:11 2026 by rpki-client