Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: 8OoLB5FVUVyzBvSYxz4/lPVNGyRNeIJehCVQXDSRemg=
Subject key identifier: 6B:E4:F2:7A:0B:3B:3A:46:1A:67:47:37:AD:6D:47:0E:44:19:DE:18
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 01A06D94CA5AE9BBADBF2CB9E598620F16E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 03EC
Signing time: Fri 04 Sep 2026 18:01:02 +0000
Manifest this update: Fri 04 Sep 2026 18:01:02 +0000
Manifest next update: Sat 05 Sep 2026 18:01:02 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: fRGv8EZ8n92Y3TVkip+45Dv48koxJGJTMh6+OLnIgkk=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:ca:5a:e9:bb:ad:bf:2c:b9:e5:98:62:0f:16:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Sep 4 18:01:02 2026 GMT
Not After : Sep 5 18:01:02 2026 GMT
Subject: CN=6be4f27a0b3b3a461a674737ad6d470e4419de18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:95:f6:26:60:0d:e5:fd:b3:18:92:76:a9:
ad:6c:b0:30:a2:38:b4:20:a2:93:3d:4b:93:e3:4a:
e8:9d:49:f8:01:81:75:b2:6b:91:4c:88:67:77:a8:
ad:f8:30:7e:cd:3e:55:c2:d9:ba:5d:c5:db:d3:91:
03:3f:56:ae:c9:79:5e:5b:55:1f:b8:be:b1:8a:f2:
3f:3f:95:16:6e:5a:49:d5:2c:ad:a4:46:3b:c3:d6:
9a:52:e8:63:fe:ee:94:15:fb:ca:4b:aa:61:ab:b4:
14:dc:2f:0d:0d:f4:19:77:52:04:c8:f0:54:4b:e8:
63:f1:ca:47:83:fd:d8:7d:ba:bd:76:0d:6e:a3:0a:
42:62:a2:c7:8f:31:8c:ad:b8:05:6b:4a:7a:b6:a2:
33:71:67:df:b3:c2:99:05:43:b2:65:2b:7e:99:9d:
47:6d:16:de:de:44:6f:70:07:66:78:7f:55:27:7e:
37:cc:54:1e:94:47:96:db:80:1c:52:e2:05:d1:d8:
fb:27:0a:59:5b:bf:b1:47:ec:64:d4:27:ef:04:c1:
e0:d3:2d:80:81:c7:df:66:68:94:64:84:f8:dc:a1:
02:6d:4f:43:3a:fb:f9:1c:4b:30:86:4b:5b:6e:80:
23:89:41:35:3d:95:a4:c8:c3:2b:e7:1e:a0:f4:9c:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E4:F2:7A:0B:3B:3A:46:1A:67:47:37:AD:6D:47:0E:44:19:DE:18
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f6:34:9a:65:ab:d7:21:bf:65:55:ce:3c:4e:05:04:13:97:
b0:a2:70:bb:d5:85:cd:e7:a2:7c:9b:20:81:73:38:55:9c:7e:
d3:f2:00:96:36:dd:fe:5c:15:1a:41:7d:18:e3:a2:52:80:7c:
7f:6e:87:f9:77:1c:4f:02:43:cd:6b:d3:7f:ef:15:00:a6:af:
19:23:b9:0c:20:28:35:10:04:62:4a:cc:e7:75:cd:39:74:05:
26:8d:64:76:96:ef:53:a2:4e:2a:d1:b5:df:45:26:a7:05:0d:
b0:4a:cc:dc:82:4a:01:2f:20:a8:4a:a6:5f:b6:85:78:a7:ed:
22:76:da:24:8e:e9:54:bb:5a:30:92:e3:dc:f7:89:e9:f7:6f:
aa:7f:55:fc:ef:3c:41:ec:5b:c4:30:23:bd:da:70:b9:9e:d4:
df:6a:2c:97:55:a5:08:da:03:ec:e9:26:da:78:90:1b:98:d2:
58:22:e6:f0:fa:51:e4:4f:9c:22:6c:ef:fe:07:a4:60:e2:79:
f5:23:dc:c4:68:47:76:65:7b:04:b9:e0:e1:64:c3:e6:ef:45:
cb:aa:f6:24:77:07:e2:a6:cb:0b:fd:fd:59:69:9e:6a:8c:f0:
f6:db:51:7f:e9:81:0f:42:02:88:e6:89:df:23:1c:c9:68:de:
e5:c9:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:04:10 2026 by rpki-client