Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: AOpNu0ioW6AeXy1YWit3W+Fak2JnYdHxlhK0MoqrxQY=
Subject key identifier: 93:35:3A:F3:50:78:A9:BF:DF:1D:C5:75:50:2D:F8:E6:C3:67:46:74
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 01A1347ECA9ACF6A503C7769EBEFFC5BE8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 046D
Signing time: Tue 13 Oct 2026 09:01:26 +0000
Manifest this update: Tue 13 Oct 2026 09:01:26 +0000
Manifest next update: Wed 14 Oct 2026 09:01:26 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: uue8V7wB96P3SSx/9dpK0TTAg5KcUs3ZN/En5NpxH9w=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:ca:9a:cf:6a:50:3c:77:69:eb:ef:fc:5b:e8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Oct 13 09:01:26 2026 GMT
Not After : Oct 14 09:01:26 2026 GMT
Subject: CN=93353af35078a9bfdf1dc575502df8e6c3674674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:ce:99:38:b9:6e:7f:62:7d:4c:40:01:66:
12:28:3b:75:78:2d:aa:8d:08:93:6b:73:9c:3f:5b:
45:6b:a3:e7:0e:aa:c5:54:f8:e3:a8:91:89:cb:a9:
27:7d:9e:ce:88:89:22:4e:82:7d:5a:a9:ca:9b:14:
48:2e:72:1e:73:17:a3:ba:2c:29:1d:4a:55:d3:56:
59:7f:b8:d2:84:63:9b:2f:70:3f:4f:0d:cb:e4:e2:
5e:ef:ed:dd:1b:fa:1a:af:00:6f:76:30:cf:83:c0:
10:c0:43:39:54:0d:68:ba:d1:25:81:86:31:a3:45:
c1:f6:cf:fb:25:0e:c1:86:0d:5b:86:a5:33:61:50:
fd:9a:03:fa:1e:92:38:a6:4e:de:9b:71:cf:4e:95:
f9:f8:86:0f:38:84:57:60:16:c9:fa:19:a4:8f:de:
b3:0a:3c:25:7a:7c:7d:4c:1c:06:7e:ad:35:ef:3f:
2f:b2:5e:e6:e6:cd:75:aa:81:79:bb:55:59:8a:68:
bd:43:89:4e:eb:7e:03:5f:4b:62:56:af:9b:66:30:
b9:02:b2:e5:d1:3c:c0:1d:b8:c2:9a:98:82:eb:e4:
dd:ab:56:da:ee:0b:56:85:3f:2a:80:bd:b4:f4:78:
25:6b:15:6d:a4:c2:11:d8:19:f5:0b:af:de:b9:76:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:35:3A:F3:50:78:A9:BF:DF:1D:C5:75:50:2D:F8:E6:C3:67:46:74
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:93:29:0a:79:82:b9:ac:51:74:98:16:e2:29:4a:d4:98:67:
fd:57:b4:20:01:be:b6:fd:70:d6:82:39:ac:cd:c3:ca:44:a1:
ab:cf:74:36:26:9f:98:e9:f5:5f:7f:c3:07:35:9d:5a:99:6c:
d6:52:f1:8c:5f:9e:2b:42:6a:0f:13:46:0b:05:77:5f:b9:9e:
e7:28:61:d7:ed:fa:5e:dd:0a:52:b1:20:2c:92:27:55:1b:c9:
39:a3:76:d1:39:3e:aa:ea:76:db:3e:30:f7:8d:2e:32:76:6a:
b3:37:48:c1:98:aa:27:cf:70:9d:bf:ca:e7:78:02:43:76:da:
10:27:2e:e7:0b:11:0b:d8:c1:c3:b9:0d:75:b7:d0:f9:f9:3f:
04:0e:3b:4a:a4:ff:98:6b:c6:6d:d2:8c:0f:85:d4:ad:e1:90:
3b:b0:1d:f7:5f:a3:c5:6c:8c:03:a7:a9:1a:89:af:f0:58:f8:
49:f3:45:d2:4b:79:b8:9d:17:09:00:f6:bc:b6:c1:f6:73:50:
79:53:33:7c:88:d2:8e:14:88:68:97:ca:19:9a:af:95:9c:53:
48:21:67:f5:b4:e6:2d:b6:27:71:ff:17:d3:ef:13:96:f3:c3:
1a:cc:9a:46:fe:cf:26:33:7d:4c:cf:77:50:ce:a3:86:df:1a:
c9:d3:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:31:43 2026 by rpki-client