Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: h+TKZ4IVPzS7/Arm21Bp9ZzRpw8NngMoghoAi8rhDpE=
Subject key identifier: F0:83:F8:08:B1:F0:F4:40:B1:37:E5:7D:D9:BA:AE:C0:87:FD:45:E9
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 019CD80C68AC85C29DF37574C12B08C67410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0DC6
Signing time: Tue 10 Mar 2026 14:00:17 +0000
Manifest this update: Tue 10 Mar 2026 14:00:17 +0000
Manifest next update: Wed 11 Mar 2026 14:00:17 +0000
Files and hashes: 1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
3: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
4: b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa (hash: AyGNKQTPsYrYHZ1HAXTaHMHz0cT3+QNKk6bga2VEm6U=)
5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: jLO9MVccCvY986UZo5tUUhIngs2sdklZ3y58BdtO4cE=)
7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:0c:68:ac:85:c2:9d:f3:75:74:c1:2b:08:c6:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Mar 10 14:00:17 2026 GMT
Not After : Mar 11 14:00:17 2026 GMT
Subject: CN=f083f808b1f0f440b137e57dd9baaec087fd45e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:f7:8a:0c:7d:f2:6e:96:8e:cc:83:6b:c3:
a8:b7:34:b5:3f:f0:05:ba:16:3f:25:a5:10:35:cd:
61:97:55:ba:da:26:cd:a7:12:8c:9f:ae:17:9f:9a:
de:8b:39:41:0f:82:30:93:fd:7e:19:3c:a6:e2:3b:
bd:e8:63:d6:8b:e3:3f:12:a9:08:43:0d:8e:bf:13:
85:90:c9:60:74:9e:c8:bc:e6:e6:bb:27:91:5a:38:
75:64:fa:1e:b5:a3:c7:7e:f6:bc:98:df:3f:23:26:
19:14:99:e5:c1:40:6f:62:17:f3:df:8f:63:b6:c3:
23:92:39:4f:c7:66:1e:14:e0:dc:a9:a2:b5:48:b2:
71:56:02:73:e5:f5:0d:a4:4c:95:28:1f:5b:5e:76:
06:26:ec:9f:5c:d3:00:ca:aa:c0:36:00:67:7b:12:
80:1f:98:13:78:7b:d6:f9:a3:c9:8b:1c:88:2d:99:
49:48:d0:94:42:37:f6:27:79:4f:42:65:d8:ed:fe:
64:81:0a:a6:5e:ce:55:c4:93:44:87:a3:c2:49:55:
d0:c5:52:a2:00:b1:1c:71:6d:e3:44:70:5d:e7:97:
52:ea:54:ba:c5:2a:e4:c4:60:33:1d:47:16:4a:6e:
88:99:ba:e6:26:c6:1e:d8:00:0b:03:03:07:a1:05:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:83:F8:08:B1:F0:F4:40:B1:37:E5:7D:D9:BA:AE:C0:87:FD:45:E9
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:42:11:1a:4c:cf:32:16:da:14:8b:2a:0f:3e:63:6f:61:63:
f8:92:cd:91:4f:a2:bc:09:d6:6a:ab:b6:b4:4d:f5:76:72:74:
c1:7c:9b:1f:ea:25:49:f7:d2:ec:cc:38:00:dc:2a:71:b9:cf:
81:67:33:73:39:8b:d4:63:7c:b0:be:ca:5e:a2:91:43:ba:51:
5a:e3:c6:71:9d:64:2a:ea:3d:f6:e1:96:ea:e9:ea:d1:07:12:
da:59:f3:cd:8d:69:b5:fb:cb:0c:40:67:7c:b1:be:d6:22:41:
14:07:95:62:e7:f3:54:97:dc:a0:7d:e4:71:fe:37:3d:7b:08:
a3:7a:23:41:c9:55:00:ec:70:ef:b7:49:ca:6b:36:1f:8b:42:
3c:5c:47:3d:ca:ee:7f:0d:7f:5c:60:f5:03:d5:ab:5f:12:f0:
0b:44:7b:05:a2:08:72:7e:30:ca:da:db:07:7e:da:fe:7c:43:
e5:95:32:9f:b7:30:ba:0f:90:78:f3:6a:71:20:64:e1:1d:89:
10:7c:25:8a:8b:61:5e:00:35:78:0f:17:ce:a8:3b:61:a3:66:
50:87:7c:fb:bd:65:8b:39:3d:47:1f:5f:e6:67:f4:e7:50:42:
b1:fa:81:c0:90:26:14:f3:ac:ff:26:79:0d:8f:68:96:7e:2f:
bc:9f:d4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 20:31:27 2026 by rpki-client