Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: 5PUtAg/UtEJ97jOXtT460gcbFgxXX75xXhXEzbuzD3E=
Subject key identifier: A0:C9:38:00:E1:E2:D7:3D:D0:45:7F:88:D1:6D:3F:DA:B4:54:90:3F
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 01A17D73D8AFCEBE216CFDAE27581AEB5891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 13:01:46 +0000
Manifest this update: Tue 27 Oct 2026 13:01:46 +0000
Manifest next update: Wed 28 Oct 2026 13:01:46 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: eBsQ0Zzuv1Z5Ty6CEst0BN6aJAGW4Ec6hzIddYdaPww=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:d8:af:ce:be:21:6c:fd:ae:27:58:1a:eb:58:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Oct 27 13:01:46 2026 GMT
Not After : Oct 28 13:01:46 2026 GMT
Subject: CN=a0c93800e1e2d73dd0457f88d16d3fdab454903f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:7e:04:bb:2d:d0:8b:4a:ea:db:8a:52:a1:
71:b2:48:2e:bd:3b:7b:7b:72:8c:de:42:f4:9d:9c:
53:e8:c0:ef:30:b2:ee:a3:89:13:eb:2a:b2:09:cb:
ed:25:22:b5:44:f8:95:e4:c8:3d:c8:55:45:ef:64:
0f:0b:1b:6a:67:62:a3:6b:84:59:91:bb:e9:f9:05:
53:26:85:40:07:5e:cc:45:9e:de:c8:ee:7e:72:8b:
68:0a:3a:fa:28:80:e6:d0:26:d0:db:66:1d:20:da:
3e:ee:29:e9:78:a8:99:63:37:ae:03:56:f6:ad:6f:
7d:c9:c8:05:8c:44:d2:ae:af:4d:2c:58:08:6e:68:
cc:41:e7:5b:ed:84:0f:71:2b:e5:02:c9:af:cb:6d:
99:3f:8d:e7:69:41:81:2a:2a:45:55:6a:55:19:76:
ee:70:aa:d9:c6:64:dd:1b:df:2f:2f:55:92:de:a6:
1d:4a:e5:c7:ab:81:ff:30:77:fc:48:45:e2:45:10:
17:19:f7:f2:7a:e3:70:db:fd:cf:85:a9:d0:6d:ba:
ec:d2:cf:fb:87:8a:5d:47:14:8e:4b:5f:49:73:dc:
7c:81:e2:8a:72:12:da:c4:fd:78:db:f5:fa:fb:ff:
5f:96:8a:dd:7e:7c:47:10:27:6a:f2:11:62:47:be:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:38:00:E1:E2:D7:3D:D0:45:7F:88:D1:6D:3F:DA:B4:54:90:3F
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7c:88:4e:1e:0c:8e:b8:a6:5d:e4:81:6c:05:d5:36:4a:77:
8c:30:d3:c6:a1:ee:d5:cc:eb:37:8c:89:76:c6:7a:b0:2c:de:
04:ab:81:c3:24:88:5d:15:49:d8:22:d3:75:ef:16:4c:d0:cf:
80:59:fa:f7:41:4d:df:d7:56:bd:31:cd:e0:91:34:ea:51:8e:
48:1c:7d:c6:54:60:1a:22:69:9c:61:22:fa:a2:75:61:32:50:
c8:fe:18:a1:b6:5a:2e:66:3a:80:50:65:1a:fc:46:c7:c2:09:
86:d4:a0:26:31:94:a1:2b:a7:9a:7a:3a:37:cf:68:c0:bd:32:
88:1a:f0:9d:1b:3f:70:71:e8:7d:d1:4e:88:77:c2:a1:95:c8:
45:a1:8e:b5:cd:27:40:5d:20:a8:45:01:84:6c:aa:6e:ea:00:
d0:61:a0:40:e5:f8:c3:5f:eb:a9:27:28:57:56:b5:c4:2f:81:
04:5e:30:50:d9:31:85:bc:71:eb:06:be:72:7e:80:1f:73:b8:
46:28:88:4f:6b:77:8c:ff:49:1a:01:2d:2e:2c:06:85:b6:ec:
87:24:79:04:72:66:cd:9f:7e:b2:ee:66:04:42:5d:d6:06:8c:
6b:d6:76:a5:01:17:ee:84:33:5a:8b:4e:3f:54:63:47:eb:b6:
6a:c4:41:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:45 2026 by rpki-client