Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: SDo6WzQEJ6cNZUrVsKIbB5CEjaCyZuU1hh3rLmWTsZE=
Subject key identifier: AE:46:6A:8B:6D:D2:DF:6E:6F:FB:BA:98:89:C8:26:6E:02:9B:53:0B
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 01A002EFC15EFFD24DE9C4A867DBB57E6A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 117C
Signing time: Sat 15 Aug 2026 01:01:01 +0000
Manifest this update: Sat 15 Aug 2026 01:01:01 +0000
Manifest next update: Sun 16 Aug 2026 01:01:01 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: CWlARKRDNW82JblNkEIZkCpFavS7fKKJ6IZGE3HBlmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:c1:5e:ff:d2:4d:e9:c4:a8:67:db:b5:7e:6a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Aug 15 01:01:01 2026 GMT
Not After : Aug 16 01:01:01 2026 GMT
Subject: CN=ae466a8b6dd2df6e6ffbba9889c8266e029b530b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:67:90:d1:7f:2c:cb:67:46:18:15:3a:69:
bb:89:fa:b3:8c:7f:6b:4a:5d:75:c3:c1:16:9e:4b:
4a:18:89:bb:ea:3c:72:99:10:8b:71:44:d2:d2:be:
6d:c4:d4:f7:ba:10:b4:e8:93:62:3b:68:8e:36:35:
45:2c:1f:8b:85:08:d4:2e:a8:4d:c5:02:21:ac:ac:
01:57:38:2f:c6:b2:6c:55:ab:01:4b:25:3c:78:f9:
1e:40:3d:8a:48:bd:7b:e7:1c:41:6e:79:b5:06:5c:
eb:16:d6:dd:9a:91:42:6b:73:42:11:9b:d7:1b:cc:
f2:49:c0:fc:72:3e:ab:71:a7:47:9b:eb:eb:f8:e3:
95:d4:c3:01:0f:49:72:01:e9:85:c4:38:bf:72:df:
d8:70:7b:24:44:8f:7c:06:ff:ee:19:a4:d9:26:7d:
dc:38:4b:48:c2:c5:2a:ff:5b:21:fc:72:3c:ca:27:
a5:32:af:04:03:9c:1e:11:86:9c:50:38:c9:66:86:
2a:f1:c9:73:41:d8:1c:ac:1d:8e:9c:10:c9:6a:4d:
06:b2:cf:29:b9:82:9a:d1:31:aa:76:2f:50:69:69:
b0:c3:5d:9e:b8:c2:5f:01:ce:c1:1a:b3:fa:5c:df:
28:69:39:28:6d:bd:27:5f:3a:28:a1:a7:41:f2:12:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:6A:8B:6D:D2:DF:6E:6F:FB:BA:98:89:C8:26:6E:02:9B:53:0B
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f6:1a:5c:d1:78:af:b1:1a:e2:d1:1a:8b:cd:93:9f:9f:c5:
3e:f4:ea:f2:6a:54:91:5e:e6:ce:98:8d:5a:a1:c3:e7:c4:ef:
08:31:e6:7c:ca:a8:38:1d:4d:43:9c:b1:20:5c:b2:77:35:76:
f8:e0:3a:5c:c3:15:4f:62:40:a9:07:c1:0c:c1:a9:b8:9a:fd:
87:34:0f:cd:23:2e:9f:22:ad:e5:45:6b:0d:2a:24:e6:75:74:
cc:38:81:ac:08:26:3e:36:b1:a9:0f:cb:02:c7:92:1e:bd:34:
87:44:ce:87:97:6f:f3:fc:50:cb:36:98:f3:57:50:e7:b5:41:
02:27:2e:ce:2e:ea:13:db:a6:f3:61:ca:d5:16:93:59:61:d5:
60:df:54:c6:dc:7c:56:ad:64:c7:d2:85:44:be:b7:0b:bf:32:
10:e9:ad:6d:35:d6:08:dc:0e:2b:27:15:19:79:eb:f6:57:5a:
9e:2f:c7:e4:91:f3:e5:10:e1:a4:92:d8:df:6f:67:9c:9b:37:
ef:5d:d9:a6:d1:9a:58:ee:a2:9f:b7:e7:b2:da:2a:0e:69:4b:
0b:53:63:72:e8:56:bc:27:31:dc:79:7c:a1:0e:98:3a:41:f3:
8a:f2:c2:33:89:ab:e1:ea:bb:af:64:a3:9e:d1:e9:8f:5f:65:
8d:5b:ee:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:16 2026 by rpki-client