Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
File: 0Q44sLejPvOhbhVDNAKYfW1njaE.mft (raw, json)
Hash identifier: 8A+R9BgUjsepwgx+xxS2wotQNLgaPw46jfDc5/T9Iis=
Subject key identifier: DF:F5:C3:CE:75:E3:39:AD:35:F7:B8:44:42:23:15:EB:7B:E5:4F:89
Authority key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Certificate issuer: /CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Certificate serial: 01A001A669128CC8E4E86EE0505419991DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
Manifest number: 16AB
Signing time: Fri 14 Aug 2026 19:01:18 +0000
Manifest this update: Fri 14 Aug 2026 19:01:18 +0000
Manifest next update: Sat 15 Aug 2026 19:01:18 +0000
Files and hashes: 1: 0Q44sLejPvOhbhVDNAKYfW1njaE.crl (hash: VtSZ3fQ82heCgivsXAbQUYpY2LAr7MNfW7cXmsHQ570=)
2: phJ6M8N_zrI_IBZJHi5JECkFqfg.roa (hash: uo9pYnUB/RDMAdAyJLZVD99p6FFm8bpqEEb9g4ygjVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:69:12:8c:c8:e4:e8:6e:e0:50:54:19:99:1d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Validity
Not Before: Aug 14 19:01:18 2026 GMT
Not After : Aug 15 19:01:18 2026 GMT
Subject: CN=dff5c3ce75e339ad35f7b844422315eb7be54f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:af:fb:ff:f6:49:c6:47:d5:7b:75:79:eb:
ad:ed:4f:c4:af:60:9c:dd:b3:dc:26:36:b6:4f:10:
a9:b4:01:7f:1d:44:07:29:8c:ce:9b:4f:00:5b:8a:
bc:a0:b5:8e:a2:e1:97:18:a6:a6:56:9f:e1:3e:d3:
c1:72:ba:38:d9:c9:5c:28:7e:c9:31:8a:21:34:ad:
7f:cd:da:d1:4a:1c:85:55:a3:fa:40:f1:21:1f:11:
b2:2b:4e:0d:83:32:1d:83:ea:2d:f3:f6:9c:67:0b:
6a:43:7f:30:26:a2:61:d3:55:22:00:db:31:31:8e:
66:87:e9:ad:c4:2e:d6:24:ef:5f:c0:79:45:46:88:
05:16:8c:a2:25:7a:d6:03:e9:09:d7:b8:ea:be:a0:
4c:56:2a:d6:e7:38:37:55:68:9d:9f:12:bf:ae:20:
ee:84:f0:04:07:0e:10:e4:f2:aa:ce:b9:88:c6:02:
ae:c6:02:8e:18:db:26:22:59:27:af:48:d4:bb:d3:
3c:35:38:ca:36:83:01:0e:21:f5:48:be:f4:c8:23:
ed:17:4c:11:f6:b1:28:6c:45:d2:27:b4:1f:f1:f2:
09:e9:d3:dd:48:b0:14:27:ce:de:5f:7c:84:fc:10:
11:0c:2d:1b:1c:50:42:aa:08:23:fa:cc:0b:36:fb:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:C3:CE:75:E3:39:AD:35:F7:B8:44:42:23:15:EB:7B:E5:4F:89
X509v3 Authority Key Identifier:
keyid:D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7a:e2:8f:b8:b5:ea:cb:ee:20:1d:25:e3:4c:bf:d3:8b:be:
4a:1d:74:2b:cd:94:59:14:92:ee:c4:f6:96:c9:ae:36:c1:4f:
db:6a:aa:11:5e:d5:42:8f:9b:99:02:00:68:8b:f9:20:47:d1:
e8:d9:59:e1:ce:ba:fe:59:17:d8:e1:b3:03:10:a4:f0:f6:6d:
d2:7b:7c:86:17:97:c0:a3:70:5e:ec:ec:05:86:c4:6b:75:8c:
97:46:da:c9:41:df:be:88:11:c2:a1:72:25:f8:55:e8:4e:cc:
c4:78:70:b5:dd:32:9b:52:22:6b:33:03:c6:52:2b:00:b9:f9:
32:d8:23:24:e6:91:cd:f8:42:e5:f5:cb:87:a1:5c:c7:13:08:
49:3c:4c:f3:c6:ef:3d:3e:f2:7e:95:67:d6:02:e6:2a:92:0d:
e4:da:e1:76:ce:f9:b3:45:38:81:1e:5b:fb:82:18:d0:72:75:
13:ca:62:07:1f:c7:07:6a:7b:f2:4a:47:67:02:75:2f:e9:8d:
1e:3b:2a:8d:02:f9:81:f0:50:8c:ed:f3:9d:af:27:71:07:bb:
e1:df:1a:9d:c2:7e:bd:62:ae:23:cd:21:0e:b4:b3:1a:85:eb:
5b:1b:06:98:6c:e1:d0:06:c8:81:97:08:2a:c2:e5:f8:b4:b0:
93:51:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:36 2026 by rpki-client