Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: 5oZVSl64Y/c0wpYJwjy2xN39wLFT5It68HWbqWOuKWM=
Subject key identifier: 8C:36:93:13:88:2B:11:AC:89:33:1B:08:30:FE:A2:82:E1:4A:F7:2D
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 019DCF3E0D7EE350E0943708239DCF67EDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0FBE
Signing time: Mon 27 Apr 2026 14:00:43 +0000
Manifest this update: Mon 27 Apr 2026 14:00:43 +0000
Manifest next update: Tue 28 Apr 2026 14:00:43 +0000
Files and hashes: 1: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: D9LlzqOE8HvsvyrxaA4iCwulIRTj7PtgnXG+fsij4RE=)
2: sXlHt8dVvMvRDk-z4mx7yfN18pA.roa (hash: JcovqlIDNXFTAcILNhi0OUki1VVI3DETXQCJ5bTmzq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:0d:7e:e3:50:e0:94:37:08:23:9d:cf:67:ed:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Apr 27 14:00:43 2026 GMT
Not After : Apr 28 14:00:43 2026 GMT
Subject: CN=8c369313882b11ac89331b0830fea282e14af72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:87:b1:57:9d:a4:e0:a7:61:7d:ac:ef:1a:
62:d2:03:b2:1d:2a:0b:d9:b2:78:45:91:b3:9c:79:
15:c4:09:29:07:a3:54:fd:1f:44:73:f4:4c:43:bb:
e5:75:84:27:9c:e8:66:8e:69:5e:19:61:a5:6c:65:
1b:0d:30:34:3c:20:a3:13:5c:33:5b:75:12:16:eb:
bb:95:88:29:e6:fa:58:33:e1:a2:48:a0:42:12:d0:
ec:33:e1:86:cd:05:af:bc:9e:7d:5e:cb:e0:da:4b:
66:74:94:f8:5b:08:a7:58:82:99:05:28:89:a8:df:
c7:d3:bc:a5:0a:f1:bf:cd:b4:19:bd:38:de:a7:1c:
a6:40:5d:ab:b6:e0:53:db:33:42:b4:0f:fd:f2:07:
92:1b:82:e8:2a:a6:16:1c:42:88:9e:8a:3b:d1:d8:
2c:09:20:3d:c8:d1:e3:0d:b2:38:78:9a:e3:33:22:
d4:15:4a:31:b7:3d:c2:24:55:fa:b7:2a:15:2a:3e:
e0:8d:8b:24:e4:7f:7e:23:10:b1:0a:95:60:5f:80:
f1:5e:9b:26:48:65:56:9f:22:22:bc:cc:13:d0:13:
46:b1:05:88:79:55:96:0e:02:d0:a6:6e:06:e2:2e:
f6:40:d1:86:7d:76:91:a3:b6:8c:81:f6:21:87:be:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:93:13:88:2B:11:AC:89:33:1B:08:30:FE:A2:82:E1:4A:F7:2D
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:72:58:02:bd:58:87:b0:99:fb:2c:30:29:35:97:93:7d:1b:
20:62:3e:5d:20:4b:19:33:d6:1c:3b:00:02:0d:f0:b9:ee:e3:
3d:2c:01:b8:01:d7:f7:44:5c:8b:db:b9:15:f5:bb:4c:aa:89:
b4:77:0a:bd:b4:f9:a9:5e:14:e7:ab:76:9c:9e:e2:e0:3d:5d:
cc:9b:a6:28:fb:80:02:94:95:67:df:71:2e:87:f0:32:93:8a:
78:dd:5b:7c:90:ce:36:e2:c2:40:0c:56:bb:06:91:a3:34:12:
63:2c:8d:d3:25:c2:fa:06:e2:82:53:f9:16:18:2a:f9:13:bf:
67:bc:70:6f:9e:3a:8c:e7:4a:77:d7:95:bb:9a:19:0c:09:a6:
7d:86:48:11:37:27:4e:a3:8d:17:c8:f2:9c:ff:15:5a:54:78:
89:37:a3:a9:2d:a5:e5:29:de:9c:8b:37:89:f8:54:46:d0:d3:
6c:47:45:67:0c:78:94:4f:e4:6c:1f:7f:9d:ee:c1:af:e9:6d:
a9:94:42:a2:cd:a6:dd:ca:83:e8:29:f8:0e:34:75:94:98:78:
22:92:8e:4e:be:95:57:e9:95:aa:07:ff:27:45:c4:36:c1:68:
0c:dc:7f:f7:34:04:f5:89:5f:4f:9e:0f:c5:ec:82:a5:88:05:
bd:5d:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:42 2026 by rpki-client