Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: oiCMFxEfZwC9S1w3/rEpv9gYxdYvOzpVN4c/ufNJ4eI=
Subject key identifier: E6:56:12:21:F8:BD:9E:90:0D:37:05:0D:89:80:08:40:EC:AA:FA:D7
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 019D39E5F17DD50817F9BB146694846DA387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 14D2
Signing time: Sun 29 Mar 2026 14:01:03 +0000
Manifest this update: Sun 29 Mar 2026 14:01:03 +0000
Manifest next update: Mon 30 Mar 2026 14:01:03 +0000
Files and hashes: 1: 7GQ9Go4t-nftndZjqWcwpqT2cyA.roa (hash: 6D6ISAC07Xvz4amnsg7PkhtQR5UqUKKR6P12gP68O4o=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: QYB26CIMU3xzKzg8M7IQ3joeMCqZ2og+kLs6FucmmaU=)
3: rU-plC-KTVhiYyslURMS4u3CzE0.roa (hash: pWfwbsWcRp37n3w6oGbkZG6T9NfFQSapOlKhQcIYE1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:f1:7d:d5:08:17:f9:bb:14:66:94:84:6d:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Mar 29 14:01:03 2026 GMT
Not After : Mar 30 14:01:03 2026 GMT
Subject: CN=e6561221f8bd9e900d37050d89800840ecaafad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b8:b4:45:16:2e:53:33:83:24:7f:84:06:3d:
2e:88:bc:90:55:60:00:23:01:d5:75:13:af:03:5f:
4f:e5:94:78:5d:1c:55:19:f1:b1:59:6c:7b:00:50:
84:a9:17:48:20:d3:72:b6:c2:a8:61:ac:be:7c:f5:
b5:ee:9d:78:64:f1:35:f3:18:44:90:83:02:b3:cf:
3f:dc:dd:ef:3a:f7:79:d8:20:0a:02:73:35:99:36:
e8:83:81:ef:38:5e:a1:fc:1d:b9:98:90:04:e9:a2:
2b:d1:63:68:d9:82:9e:65:dc:c3:cb:f3:e3:af:b4:
98:3a:67:f7:47:c4:d7:48:77:55:b2:a9:99:ad:35:
96:f4:cd:b3:de:12:e0:70:e6:e6:6e:89:2f:29:4d:
55:dc:4f:14:bf:3c:f5:27:1b:3a:0e:92:95:de:ca:
ec:04:57:ca:54:ac:ea:ac:92:bb:25:35:0c:d8:45:
ae:25:35:50:e1:f9:29:a9:ae:4b:d5:09:0c:3f:18:
53:a3:15:fb:ea:c1:04:e3:3c:ec:ab:fb:9e:92:98:
0e:01:bd:1d:be:61:29:3d:12:df:d2:e5:0e:1d:66:
92:9f:91:92:9a:e3:a5:73:23:64:fc:69:85:90:6f:
97:ab:4c:f0:1c:9f:41:c5:27:c0:3e:7f:bd:b4:04:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:56:12:21:F8:BD:9E:90:0D:37:05:0D:89:80:08:40:EC:AA:FA:D7
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f8:73:ab:4a:e7:c8:11:39:a8:82:2d:ec:fc:72:3c:0c:11:
7b:3e:2c:c0:0a:b3:1d:95:56:0b:a3:03:ef:90:c3:be:c7:5d:
bb:8a:32:d4:72:2f:68:db:bc:76:7c:7b:7d:6b:bd:b6:d5:00:
68:92:91:eb:e0:30:20:33:19:51:07:a1:e5:d5:e3:76:6a:bb:
cc:b3:86:0a:8f:3c:2e:b5:db:ff:a0:f0:4c:4f:9e:6b:33:05:
1b:75:f5:d0:fc:dd:20:a4:34:19:82:5c:21:93:79:5d:f3:88:
26:13:07:0e:81:ae:56:22:8e:fb:a6:b8:54:59:4b:ce:cf:12:
d4:a5:55:c9:9b:4d:01:35:b3:17:de:91:2a:99:f9:8b:7d:5d:
0a:ad:bc:04:88:c7:33:d5:a1:00:6c:dc:2f:27:ca:e1:b2:c6:
e5:0f:86:b6:53:17:40:6d:f2:c5:93:da:40:09:0a:4a:ed:69:
79:6d:e9:77:22:d0:92:35:ef:a6:b4:84:46:75:f4:f2:46:f2:
ab:c4:6c:ad:a7:27:ab:ef:7b:75:05:c2:b8:a6:38:7c:59:15:
36:8b:cf:84:03:17:e1:e0:8d:04:70:6d:34:43:3a:1b:82:b1:
d8:a8:8d:70:d7:b9:ac:7d:e9:65:0e:96:01:24:91:17:0e:48:
18:e6:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:00 2026 by rpki-client