
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: Ar/NU8FCkPQPhRKcqK+e3BaXYZoSpFOGujnjUq2hOfk=
Subject key identifier: 60:09:3E:B0:C2:17:92:A1:71:98:62:0D:D0:7D:33:0B:88:7D:70:3F
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 01A024A0133AD9469D143FEEDD5C2A0D8735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 16B2
Signing time: Fri 21 Aug 2026 14:01:05 +0000
Manifest this update: Fri 21 Aug 2026 14:01:05 +0000
Manifest next update: Sat 22 Aug 2026 14:01:05 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: EfoO7fPTO7pGtBF07YWtAOjS75qWUdQxaU41nCyzWFs=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:a0:13:3a:d9:46:9d:14:3f:ee:dd:5c:2a:0d:87:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Aug 21 14:01:05 2026 GMT
Not After : Aug 22 14:01:05 2026 GMT
Subject: CN=60093eb0c21792a17198620dd07d330b887d703f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:f8:df:65:e1:d4:71:ea:00:72:d5:a7:74:
49:63:26:e1:c0:59:d9:93:11:22:66:7f:b8:99:4d:
5c:32:a5:0c:1d:91:aa:6a:b2:fc:86:0b:6c:6d:1b:
f5:24:8d:e0:00:bb:51:31:3b:aa:db:9c:5d:14:5f:
97:db:b1:3c:8f:e1:78:0c:5d:05:61:1e:5e:df:04:
b3:91:14:d8:61:43:84:ee:b5:6d:28:95:ea:10:0e:
77:4c:9f:51:3d:29:31:cc:d3:b2:f7:e6:ad:c1:7a:
bf:1e:28:5d:3a:8e:f3:c7:1e:18:e4:ad:e6:19:b8:
2f:e0:0c:5a:ee:9b:68:c5:d6:03:e9:cf:45:2c:4f:
da:dd:ed:e7:ca:7b:ba:09:53:b8:04:69:82:35:5b:
09:ab:fd:0d:bd:2c:7e:7a:f2:55:32:51:d5:7e:0d:
c2:15:74:ad:25:3d:ee:9f:9b:8d:0b:81:37:b9:a8:
a5:39:1d:f2:f3:59:5f:e9:21:7d:43:51:bb:cb:02:
37:34:42:84:40:32:ea:7a:c4:66:72:30:ca:45:64:
7c:30:c8:01:d3:dc:bc:3a:d8:e3:56:7d:d1:f0:7f:
89:95:1c:54:33:80:09:81:de:25:32:a3:13:ca:c2:
80:21:ca:18:6d:b1:07:af:a5:86:77:6f:07:70:56:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:09:3E:B0:C2:17:92:A1:71:98:62:0D:D0:7D:33:0B:88:7D:70:3F
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b4:48:1d:b9:fc:f5:00:99:f0:90:f5:ce:fe:1a:03:39:bd:
17:51:b0:34:d0:71:e6:b6:4d:95:ee:51:87:df:74:91:cd:7e:
2f:a9:69:31:d6:b8:93:3e:6a:5b:56:7b:5b:c7:a9:b3:aa:8f:
ff:e7:de:ca:0d:fb:b4:e6:ea:1f:89:51:3c:27:d8:db:ab:a8:
87:db:98:4b:34:7d:a3:24:df:8b:f9:6a:d3:8c:0e:12:a1:1e:
e7:c0:22:11:c7:7c:2c:45:fa:72:45:96:95:a1:c1:5a:42:5a:
57:a7:b4:c9:9e:bf:03:41:42:fd:1c:a1:2a:70:77:bd:4e:3e:
48:29:0c:99:95:56:ad:42:3c:14:69:94:df:aa:9f:69:dd:0c:
d0:ea:be:8b:e6:3d:88:ff:d0:c6:d2:0f:27:3f:f6:f3:42:12:
f2:ad:9b:2f:73:80:96:f9:d5:a4:b2:6d:73:32:54:b5:1a:2b:
d6:dd:d4:d1:a8:97:6a:41:66:5d:7b:25:4e:bb:92:be:22:e1:
09:04:fc:67:f6:2d:05:c9:b0:be:de:24:55:54:3c:c4:b1:ef:
6c:22:88:6e:57:85:2a:c4:23:94:9b:89:3d:82:32:5e:59:0a:
8b:cc:c0:92:cd:dd:2c:4f:fd:fb:3f:9a:08:3b:f9:d6:25:59:
b3:ed:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:56:23 2026 by rpki-client