Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: NxMd0zZd5pXCPcjZY44Cm0cQWykaOJo4ARAMUrYCXrI=
Subject key identifier: 48:10:03:7A:C8:0E:9C:C9:1B:EF:93:3B:BD:5E:5D:97:4E:68:F4:A0
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019D386624A029419D0AC1CAFAED7753D960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 100A
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: hvZAnjBtrAGo6g+oLFx7jMwW0sHWx/mFAGbIvg2EbEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:24:a0:29:41:9d:0a:c1:ca:fa:ed:77:53:d9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=4810037ac80e9cc91bef933bbd5e5d974e68f4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:a9:26:a4:51:43:07:77:65:1b:04:39:00:
bc:8b:5e:86:bf:6d:a2:b7:7d:3a:0b:66:f8:52:57:
12:62:df:32:81:a6:d1:0c:02:9f:23:ea:51:fb:59:
60:2b:c6:de:72:34:8f:c9:44:c8:ab:0e:49:8c:1f:
a0:88:28:ce:da:3f:22:1e:12:9f:64:3d:f2:18:4a:
46:86:45:5e:bd:90:a7:e1:d6:56:78:32:1e:80:13:
71:a0:3f:1c:b5:85:cf:09:97:fe:ce:50:b1:ff:3e:
97:12:f9:c5:61:f4:7c:b2:91:5a:66:7f:9b:41:a3:
2c:8b:af:94:7a:50:57:8a:3b:b1:9a:07:43:95:d2:
e6:22:69:17:3a:ca:f5:7c:59:9d:79:e4:e4:b0:99:
e5:a2:2b:91:98:f8:1c:67:48:63:b0:70:68:75:b3:
95:93:a9:9a:4b:a8:0e:f8:e3:b4:d9:22:71:1b:49:
ad:c9:cd:3a:33:f3:c4:5f:d9:17:9a:5e:a0:dc:b0:
87:9a:cc:35:2a:87:3f:d3:c7:14:4b:ad:5e:26:2b:
d1:92:d6:03:2f:f7:c5:b0:1a:8a:93:ca:51:29:d9:
ec:d7:b4:69:36:63:6e:4b:34:c1:69:40:40:53:f6:
63:a8:33:fa:c2:6c:70:1c:9c:5c:83:17:23:ad:94:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:10:03:7A:C8:0E:9C:C9:1B:EF:93:3B:BD:5E:5D:97:4E:68:F4:A0
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dd:89:c8:da:7b:3f:b2:43:b4:71:1b:10:1c:8c:44:c7:9b:
e0:82:59:c3:fb:0f:ff:a7:6e:ec:fd:6c:6c:4f:cf:69:5b:64:
b7:85:32:81:88:c7:98:f7:32:ba:02:0a:93:7f:2c:66:41:bc:
59:c8:4d:c1:d5:7b:43:bd:b9:75:d9:e4:76:fd:1b:6d:e1:99:
d1:e8:00:4b:84:7c:9f:90:5f:76:ad:43:4f:ca:e7:f7:87:0c:
60:fe:ee:b1:58:8f:9a:09:87:36:59:53:20:b6:71:d0:b5:0e:
69:37:0c:a5:84:c1:2d:c5:26:4b:ba:82:81:4a:8e:a0:6c:dc:
c5:4d:06:12:5b:20:04:43:03:32:5d:9a:03:f9:d6:80:e3:70:
83:d2:92:0b:ac:42:69:df:7a:5d:99:ae:4f:a6:0b:1e:6a:47:
dd:a1:89:a9:6b:13:55:11:55:6d:14:10:82:83:e4:47:38:7b:
35:e4:13:91:67:12:3c:71:f5:52:0b:91:12:a6:d0:f2:4a:d1:
d9:71:ed:27:78:38:12:ea:51:bf:aa:91:cc:6b:60:51:a5:53:
4f:51:2b:29:8e:49:ae:60:ad:a7:60:5e:7e:1a:9d:a1:93:04:
45:86:f0:59:1f:ee:20:4d:ea:36:46:1b:b2:70:f0:cf:4f:c4:
cc:88:d4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:31 2026 by rpki-client