Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
File: Q8xOC1bEDO4y1RXxPprXJSahBr4.mft (raw, json)
Hash identifier: Mh1eG6LN8xIb6Vz4sEMdoklK0/hJWgzT3/0S801uWVM=
Subject key identifier: 00:4F:88:A2:2D:85:8F:59:82:14:D4:56:5D:18:16:F0:1D:B8:2C:A0
Authority key identifier: 43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
Certificate issuer: /CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Certificate serial: 019FF56C1A5F84734F7353A304589A540351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
Manifest number: 17
Signing time: Wed 12 Aug 2026 10:02:10 +0000
Manifest this update: Wed 12 Aug 2026 10:02:10 +0000
Manifest next update: Thu 13 Aug 2026 10:02:10 +0000
Files and hashes: 1: 1-avwUbYkGWAbngQUmLKtkGb0vQk.asa (hash: gdrOpGIWUMbLTjKVbOlssgFFN+ZM/6btb14hBTqgj4E=)
2: Q8xOC1bEDO4y1RXxPprXJSahBr4.crl (hash: RcV9ob3UAYcFZXB1/hhKoOuW/QS2BIvNV+OcKpSr0R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:6c:1a:5f:84:73:4f:73:53:a3:04:58:9a:54:03:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Validity
Not Before: Aug 12 10:02:10 2026 GMT
Not After : Aug 13 10:02:10 2026 GMT
Subject: CN=004f88a22d858f598214d4565d1816f01db82ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:c5:a0:8c:c9:1a:bf:b1:d1:66:f9:c2:58:
07:13:9a:f6:17:07:b3:57:4f:e7:1c:da:df:dc:ec:
15:78:8b:63:39:67:76:8c:42:64:7f:3b:7e:95:64:
61:db:58:57:41:f3:60:37:8c:78:3a:b1:5f:58:7e:
5a:71:bd:4b:ce:ee:11:f2:51:7f:c9:35:72:00:05:
21:7d:a1:56:68:e5:c7:8c:d1:ec:2f:7a:c4:fe:41:
67:18:c7:03:57:80:1e:36:60:b5:52:fc:93:a6:4f:
4c:bb:f8:27:a8:36:fe:18:0d:ba:b1:86:86:28:a6:
d1:c6:43:d5:28:80:77:0b:d4:cd:bb:18:fe:43:4d:
92:3a:6a:86:15:ed:af:04:7e:6b:88:8c:a9:03:55:
e0:02:51:c4:1e:d3:57:ea:7e:96:46:6c:8e:97:71:
66:b4:15:29:04:ae:b4:66:dd:e6:37:eb:09:fb:3c:
bf:e4:4d:15:ea:36:c9:29:57:e6:ea:1d:cb:7b:67:
4c:86:d9:ce:c5:18:8e:26:04:90:c5:b9:80:25:47:
6d:b9:9f:b2:3f:f7:69:0d:de:1a:6e:73:bf:27:cb:
8e:29:f6:d1:f3:cd:43:57:cd:f4:23:a9:3e:25:7a:
e7:4a:cf:70:07:11:34:46:8a:6c:10:ba:91:d2:b0:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:88:A2:2D:85:8F:59:82:14:D4:56:5D:18:16:F0:1D:B8:2C:A0
X509v3 Authority Key Identifier:
keyid:43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:41:99:05:e4:17:f3:b8:0d:af:d1:b5:8d:53:1a:3e:bb:3f:
8b:7b:61:a9:b3:36:d4:7b:68:b9:54:d8:ab:4f:b5:a5:71:d6:
61:cc:a1:c3:b1:e1:fb:0a:45:56:a0:b2:7c:62:51:8d:56:47:
b9:da:06:ef:1b:d7:8f:9d:27:ca:f4:31:88:df:01:54:37:0c:
bb:ac:ee:58:56:ef:c7:0d:55:12:67:db:c8:fe:ed:ea:dc:6b:
d5:46:5b:4a:e4:61:9a:fd:01:ff:0d:2e:0b:20:06:18:1e:bb:
b4:a3:a8:50:85:6e:78:3d:5e:30:39:6a:bb:62:2f:71:75:57:
93:ff:44:8f:6e:f5:c8:3a:e8:4b:dd:3b:06:9f:22:8c:80:71:
c5:e1:87:bd:b0:78:d8:2b:94:0b:13:17:79:7a:0c:5d:4d:6b:
47:e6:73:4a:21:1f:09:d2:14:d9:8c:20:14:9b:34:d5:62:91:
e7:bb:e5:3c:cf:db:02:57:65:85:ce:de:34:6f:83:cf:0e:54:
f0:03:e5:aa:8c:d6:4c:ab:72:77:f7:7f:93:41:05:38:2a:4a:
ca:16:55:cc:ed:a1:87:87:e9:55:90:1a:24:61:2c:b4:73:cf:
37:d9:7d:c6:5b:7f:ef:ce:a0:f3:22:f5:8e:8f:dc:7f:10:17:
47:41:19:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:29:18 2026 by rpki-client