Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: LR6aa6Z6nSU+x5FZH8YE7qN9JEyOvU5LzuJeEHv0qgg=
Subject key identifier: 91:C3:97:20:E0:64:30:9A:AC:19:99:43:CD:C7:44:61:F0:37:59:B2
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019D3909B33C4F88E99A992A7F640753866B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 16C5
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: H2T8PA1785l6gX-iVp9IuPaA4Nc.roa (hash: 6faWeYIv5Ai9qI/fX55pW1xZn22WZewYCnXhS25+v6I=)
2: Xz4dqhqCzoZvF10IK-TkgPiAc5Q.roa (hash: ZFUgfRsBRCs1X5BDvrArX90/CdgfBgfrW7Rw9sq2N84=)
3: lyOH-P2_hH5Ugem7r8kpnkt99SI.roa (hash: GiPFjQfoJkQaMedHXbS4M3+BR9UAmP0J6PtJlsbWkGg=)
4: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: pI2RJetib7+6HW5iCwwOjCX1rJ0Meg1OroHvVSiBAeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b3:3c:4f:88:e9:9a:99:2a:7f:64:07:53:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=91c39720e064309aac199943cdc74461f03759b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:ce:71:af:60:4e:4b:c0:1f:ee:80:d4:73:
8c:c2:cb:5c:25:51:6f:f3:41:bf:8f:a3:37:45:14:
f5:ff:9a:cc:6e:21:bc:b1:06:5c:b8:96:fc:ef:3f:
f6:a8:5b:c0:f3:0c:8e:65:af:c7:14:63:c0:ba:57:
8f:8d:35:2d:5a:52:6d:75:68:d8:08:ef:9e:c6:00:
a4:1b:04:4a:e0:79:74:f1:7d:96:d8:4e:8c:a9:02:
46:14:f7:18:4a:88:74:11:8b:82:37:1c:a7:95:2f:
85:35:57:1d:ca:51:09:90:9f:d2:4f:dd:70:33:97:
a4:35:08:05:38:90:94:19:ff:d0:ab:ea:32:40:25:
b4:d3:56:9c:cf:bb:5e:ac:03:a8:4f:65:49:55:c6:
f0:cb:74:20:bd:9f:f4:bf:45:73:49:2b:09:a7:10:
f3:21:f4:97:33:78:2d:56:66:d5:c6:cb:69:82:f7:
e4:2e:4c:eb:e1:5e:4d:e2:1a:6c:ac:f2:50:b2:06:
00:c3:4f:ca:23:07:ff:87:16:7a:5e:2c:49:9a:cf:
0e:75:2c:cd:eb:a3:5d:23:bc:ef:ca:49:13:79:ee:
7d:95:7f:aa:b0:4b:11:47:18:0d:d7:7c:5e:7c:b1:
b6:92:25:b3:e3:ea:dc:bf:cc:38:e1:28:f8:8b:51:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:97:20:E0:64:30:9A:AC:19:99:43:CD:C7:44:61:F0:37:59:B2
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c4:c8:97:cc:05:59:58:e3:de:c5:72:be:4a:87:7f:d0:b7:
a4:07:f4:c7:39:24:3d:a5:a8:a1:64:ba:09:63:a0:27:28:00:
9c:d7:99:d4:bf:86:d7:50:36:56:43:53:4c:8e:48:c7:bd:7c:
22:e1:c5:5c:13:5d:e3:77:e1:43:cc:a0:60:68:5d:3e:ce:c4:
86:3c:2c:dd:02:60:ff:46:08:5c:c6:ba:b7:04:9b:22:df:93:
4f:80:fa:0f:de:98:7e:2a:b4:1f:64:6b:2c:0f:8f:42:c6:b4:
72:16:cc:17:7c:38:cf:a2:74:75:56:7e:20:b3:de:55:a2:a3:
9c:5b:4e:02:72:5b:95:f8:13:78:33:83:bc:72:1a:1d:63:31:
8e:85:91:1b:1a:4b:92:4b:26:14:d7:01:62:01:fb:00:c9:af:
ff:87:b5:49:d8:dc:6c:56:97:16:e5:32:fa:42:d0:1a:3f:0e:
3c:72:c4:bf:ac:3f:b6:db:33:35:0c:88:44:8e:80:2e:e2:f1:
53:94:ee:4e:7d:3d:58:39:e6:f7:5c:ca:0f:56:45:58:ec:d9:
d9:85:20:38:41:d5:c0:6e:7b:f4:aa:85:d6:f3:d8:9a:e7:5e:
c2:8e:16:0d:ec:0a:9d:56:72:15:4b:05:0a:52:88:4b:2d:64:
b9:98:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:48 2026 by rpki-client