Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: IAS/R17/r18C2AdYZrOQB32nPGV3qR9VpyHE4/p7NRE=
Subject key identifier: 84:7F:8A:AC:FC:A0:E1:D2:51:76:D9:53:C3:C9:0E:D0:28:D8:13:60
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 01A043199A0C9509A6C2504D6E2DAD0DE914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 03F0
Signing time: Thu 27 Aug 2026 12:02:26 +0000
Manifest this update: Thu 27 Aug 2026 12:02:26 +0000
Manifest next update: Fri 28 Aug 2026 12:02:26 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: ND22xgv1H4W2O047wYFzYvAxZWAsRgMsuhHTjO79x3k=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 12:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:19:9a:0c:95:09:a6:c2:50:4d:6e:2d:ad:0d:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Aug 27 12:02:26 2026 GMT
Not After : Aug 28 12:02:26 2026 GMT
Subject: CN=847f8aacfca0e1d25176d953c3c90ed028d81360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:b6:be:8c:91:50:7a:c4:81:5f:fa:45:cd:
8a:09:40:4d:90:29:bd:6b:d7:12:3f:69:f5:c9:a0:
2a:d2:c9:0d:37:ba:f7:39:66:c9:14:cf:57:fa:bc:
f7:fb:87:e8:a2:ac:dd:3a:41:11:72:f4:51:73:c0:
2b:d6:da:a9:64:7e:9a:d6:02:70:13:71:87:19:e8:
cb:4b:c0:4e:83:aa:08:c2:b0:a4:4f:79:57:06:9e:
8f:5e:fe:77:de:0f:12:89:d1:91:27:06:b4:5b:80:
f4:c7:51:3a:87:1a:50:80:99:55:9d:2d:df:af:92:
2d:e4:70:6c:de:e2:f0:53:f9:43:33:c4:51:79:0e:
c5:7d:50:42:a4:56:14:8e:b0:a8:ab:7d:41:40:63:
78:ee:e1:39:1a:24:88:66:e2:4a:05:f7:53:df:27:
70:d9:d4:93:f8:39:6c:7b:bc:7c:6a:c0:70:59:26:
7f:18:5a:e6:d1:0d:d4:b8:c4:43:3e:c7:7e:56:72:
f4:37:17:ad:12:7b:a3:0e:83:2f:8f:af:50:bc:4e:
bd:61:65:3e:44:fa:40:e5:60:88:49:d5:a1:8f:a2:
8f:e3:83:a6:9b:07:12:3b:e4:f9:fe:5d:0b:0a:dc:
d7:36:94:07:cc:d8:a3:b7:6a:8c:77:a9:26:98:52:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:8A:AC:FC:A0:E1:D2:51:76:D9:53:C3:C9:0E:D0:28:D8:13:60
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:0e:cd:1a:f0:a4:3d:69:96:c4:52:58:97:1e:0c:be:c5:12:
64:60:18:72:07:c5:f3:fd:ed:34:66:44:e7:b4:2c:00:cb:21:
72:a4:15:de:0c:88:a9:cd:39:c8:e0:d0:01:b9:47:9f:6e:0e:
6c:f9:3c:17:68:70:87:d2:01:40:06:2d:39:c0:ba:96:0f:35:
cc:5d:d5:13:f7:3b:78:78:ba:90:68:50:d0:5e:65:e5:d6:2a:
d7:1b:fe:fc:f3:9a:01:ff:06:4b:72:81:11:ed:10:f5:0c:15:
d4:d5:c7:b6:a0:cc:d7:7e:03:25:58:8f:d0:42:ef:7d:93:55:
0e:74:a4:e9:40:c0:83:c5:63:08:01:eb:47:49:a3:10:76:a9:
ab:c5:3a:53:3b:66:d0:7f:24:47:3e:91:15:36:b9:14:62:09:
0a:88:c1:d5:84:bb:7f:c8:9a:e3:6e:7d:2a:1c:da:94:46:af:
76:45:a9:88:19:43:b7:ab:de:40:fb:6a:5a:68:6f:ae:10:55:
4d:ae:a4:69:7f:13:50:7a:a3:74:d2:fb:7b:89:ee:3c:6d:09:
d9:7c:cf:03:2e:24:b7:fa:92:e8:22:07:4f:7d:62:8e:a3:6a:
2d:45:51:12:21:12:7f:88:96:63:12:d5:e1:33:31:9a:e8:30:
86:c1:25:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBDGZoMlQmmwlBNbi2tDekUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjQ2Yjg4YjgyOWI0YTNhYWRjMjgwZGExNDViNjNlOTll
OTJhMGUwHhcNMjYwODI3MTIwMjI2WhcNMjYwODI4MTIwMjI2WjAzMTEwLwYDVQQD
Eyg4NDdmOGFhY2ZjYTBlMWQyNTE3NmQ5NTNjM2M5MGVkMDI4ZDgxMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWS2voyRUHrEgV/6Rc2KCUBNkCm9
a9cSP2n1yaAq0skNN7r3OWbJFM9X+rz3+4fooqzdOkERcvRRc8Ar1tqpZH6a1gJw
E3GHGejLS8BOg6oIwrCkT3lXBp6PXv533g8SidGRJwa0W4D0x1E6hxpQgJlVnS3f
r5It5HBs3uLwU/lDM8RReQ7FfVBCpFYUjrCoq31BQGN47uE5GiSIZuJKBfdT3ydw
2dST+Dlse7x8asBwWSZ/GFrm0Q3UuMRDPsd+VnL0NxetEnujDoMvj69QvE69YWU+
RPpA5WCISdWhj6KP44OmmwcSO+T5/l0LCtzXNpQHzNijt2qMd6kmmFKDlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR/iqz8oOHSUXbZU8PJDtAo2BNgMB8GA1UdIwQY
MBaAFKgka4i4KbSjqtwoDaFFtj6Z6SoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEt
NDkwYzg4MzAxZmNlLzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEtNDkwYzg4MzAxZmNl
LzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyw7NGvCk
PWmWxFJYlx4MvsUSZGAYcgfF8/3tNGZE57QsAMshcqQV3gyIqc05yODQAblHn24O
bPk8F2hwh9IBQAYtOcC6lg81zF3VE/c7eHi6kGhQ0F5l5dYq1xv+/POaAf8GS3KB
Ee0Q9QwV1NXHtqDM134DJViP0ELvfZNVDnSk6UDAg8VjCAHrR0mjEHapq8U6Uztm
0H8kRz6RFTa5FGIJCojB1YS7f8ia4259KhzalEavdkWpiBlDt6veQPtqWmhvrhBV
Ta6kaX8TUHqjdNL7e4nuPG0J2XzPAy4kt/qS6CIHT31ijqNqLUVREiESf4iWYxLV
4TMxmugwhsElNg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 21:41:46 2026 by rpki-client