Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: 48wQN69PxceF8J+/EfzRkdYH+lyK5gJ4s5rk9/y2WnI=
Subject key identifier: E6:C9:77:FF:7F:43:74:74:C2:FA:2B:00:A5:3E:93:FF:07:7F:A9:3F
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019DEE24CAF51848626FFCD51F1DD08F2E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0F20
Signing time: Sun 03 May 2026 14:01:21 +0000
Manifest this update: Sun 03 May 2026 14:01:21 +0000
Manifest next update: Mon 04 May 2026 14:01:21 +0000
Files and hashes: 1: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (hash: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM=)
2: ZGp0FDP8qvB8cgr-1S3_xdm1jys.roa (hash: 9rCAt6z+0Tts+8L8PuhpJuck/ju+E8/tnJZUEMT7+6Y=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: i/h0ElxW6GIA9TO4viSsTfxIQDSSfEDckYiZpjt9a1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:24:ca:f5:18:48:62:6f:fc:d5:1f:1d:d0:8f:2e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: May 3 14:01:21 2026 GMT
Not After : May 4 14:01:21 2026 GMT
Subject: CN=e6c977ff7f437474c2fa2b00a53e93ff077fa93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1b:4e:43:c6:da:32:7b:59:e9:02:81:82:86:
9c:b1:10:07:81:99:54:8d:12:ab:8c:d0:41:e0:4f:
86:a2:30:b1:ea:04:6b:60:06:d2:ab:98:96:be:67:
74:8a:a5:9c:9d:30:7c:12:be:d9:f3:b9:eb:eb:55:
db:1d:df:e6:b6:a1:31:f8:f8:e2:dd:9d:1c:c8:ac:
61:90:e8:b6:5f:82:81:cc:f1:c3:e5:30:cb:1c:e2:
01:6d:d4:c0:cc:2d:c6:a2:67:0c:51:70:c8:80:b5:
72:00:5b:aa:6b:b5:21:db:9c:73:e8:9a:c7:62:e8:
79:0f:08:ad:62:ab:2a:38:a1:bf:9b:50:a9:44:54:
75:d8:d1:c6:59:dc:be:59:c0:19:b4:94:aa:03:25:
a3:b9:c7:b5:0b:85:5a:3e:5c:48:ca:03:17:51:9d:
e6:d3:ac:03:9d:cd:b3:7e:3e:41:f9:55:90:fc:76:
5f:46:e3:04:d9:de:c8:75:b7:25:fd:a4:35:37:dc:
77:d7:ab:5a:10:2e:39:b0:e9:c4:29:f6:2e:28:bf:
d7:3d:64:c2:84:eb:05:38:f2:c1:80:0b:ad:92:a3:
03:a4:f2:5d:52:44:87:8a:e6:71:04:1e:2a:d1:13:
2a:74:f4:1c:5f:ea:7b:74:07:97:da:fa:eb:57:1b:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:77:FF:7F:43:74:74:C2:FA:2B:00:A5:3E:93:FF:07:7F:A9:3F
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fb:9e:77:77:fd:f7:fc:77:74:d9:d5:0f:61:ea:11:ec:eb:
50:7d:62:26:91:0e:2c:2e:f5:7a:6c:11:1b:58:bb:7d:46:af:
ce:e1:c5:a2:9d:40:10:0c:d7:1c:3b:0a:1f:c8:ea:86:91:19:
da:e5:51:0f:0d:28:21:5a:1f:e3:6f:20:c6:ac:ca:dc:33:30:
d4:69:a5:25:d8:08:66:52:c5:29:d4:3f:39:f9:3e:bc:48:8b:
f2:0d:83:92:ff:f3:ba:98:6b:20:0d:23:84:09:fb:30:b6:e8:
1f:dc:60:d8:a9:e6:fd:ae:10:a4:50:a8:e5:f2:f6:fe:f2:93:
2d:14:33:eb:26:d9:ac:dc:37:d7:26:de:9a:59:b7:71:fd:25:
84:31:45:21:b2:d5:c9:79:8c:74:37:c2:1c:ef:9d:53:22:2b:
a3:de:87:eb:20:8b:40:8d:df:19:53:5b:76:6b:46:87:8a:9e:
b0:64:67:d4:25:ac:69:2e:7d:b0:99:50:3a:1e:43:21:d3:d1:
3b:70:5c:80:c5:db:34:94:5d:bd:13:2f:ba:18:35:b2:84:c9:
a0:45:dc:7b:81:98:19:46:82:74:cc:2b:55:78:b9:01:0e:43:
1b:97:eb:b1:9b:6d:2c:7a:de:5f:9c:eb:a8:18:3e:a6:6c:7a:
05:e2:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:59 2026 by rpki-client