Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: 9QkytWmocilIPPdFwZUZ4cxmSNTEwzFQ77VdDrNO61I=
Subject key identifier: BF:5A:82:FA:70:40:F8:54:23:5E:79:07:4F:E9:B3:5F:40:81:3A:FA
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 019DA3E6AB4E961B149E3423C5767B262714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0EA3
Signing time: Sun 19 Apr 2026 04:01:36 +0000
Manifest this update: Sun 19 Apr 2026 04:01:36 +0000
Manifest next update: Mon 20 Apr 2026 04:01:36 +0000
Files and hashes: 1: lUzKNBJg8UfPcme69tlyDaYrw7I.roa (hash: qrZuoQH6V4bS9GSWmYNEQuhGhYESYIo8galvFyCIozE=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: eF64LPpVHjNrFjxQZzbMPWLJuEdfjDcwBtrhUada3L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:ab:4e:96:1b:14:9e:34:23:c5:76:7b:26:27:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Apr 19 04:01:36 2026 GMT
Not After : Apr 20 04:01:36 2026 GMT
Subject: CN=bf5a82fa7040f854235e79074fe9b35f40813afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:27:b3:08:83:16:e6:6a:5f:dc:49:97:ab:
e8:0d:f5:7c:b3:ba:82:72:51:da:3e:6b:91:74:e9:
4d:de:7c:3a:aa:e5:db:c6:de:50:28:7c:3b:49:0f:
ba:37:e9:08:4c:d7:88:6d:a0:ed:2b:9e:71:f1:92:
1d:59:a8:40:7c:4b:14:13:90:7a:1e:e5:08:08:f7:
fb:86:37:03:98:bc:a2:6e:bb:33:26:9d:bc:f1:5d:
a7:d4:13:ce:d5:5b:18:d5:ea:0f:ff:5a:b3:e0:12:
f2:e4:f8:c9:01:8f:13:1b:c0:46:c4:5b:6b:d6:44:
aa:05:ac:a6:88:a5:55:c3:83:bb:89:1c:68:db:59:
9f:1b:12:8e:45:b9:a5:81:97:f9:98:d0:df:c2:6e:
f4:a8:9e:89:34:ba:da:78:62:b0:20:8e:c7:7b:63:
b3:a5:4a:a2:13:b4:6a:78:5e:5e:93:b5:bb:3c:a7:
d1:ca:38:bd:4b:45:58:93:b7:e7:05:44:0c:a3:95:
60:8d:30:39:f8:12:b7:e1:f5:b6:ec:3a:74:ec:fc:
c3:be:b9:01:1f:e0:23:7d:d3:7d:b6:10:6b:8e:94:
c1:17:7c:2c:fc:27:9c:56:03:f6:c3:aa:6d:ea:99:
e7:08:74:ca:ad:10:c6:5d:72:b3:02:15:12:fc:54:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:82:FA:70:40:F8:54:23:5E:79:07:4F:E9:B3:5F:40:81:3A:FA
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:17:55:e1:4a:3d:59:ae:82:61:94:6d:f5:e2:1e:3f:04:fc:
a2:19:e3:30:e9:26:5b:b6:ad:64:4e:7f:e3:ef:b8:3d:1c:70:
cc:30:cf:f0:54:5c:01:d3:5e:2a:1f:b5:73:f5:4d:89:d3:c1:
8d:c2:cf:db:19:ad:20:19:66:d6:cc:8c:00:8b:d8:b5:26:19:
f8:72:d0:8b:69:6b:29:91:92:2e:2b:6b:18:3e:06:d7:ee:90:
84:f9:76:55:5b:46:95:b1:78:87:04:83:d9:38:72:36:62:a8:
af:4d:81:f1:cf:ed:f6:81:1e:d1:5b:a3:ee:d3:0d:ce:b3:12:
86:d6:d3:5b:f8:e6:8f:c9:53:9f:45:d4:ca:1b:5b:d7:86:e4:
dc:82:47:5a:70:f7:25:ea:d7:e3:11:5a:3c:d4:c3:7c:3e:25:
35:d3:2c:ce:4f:fa:86:c6:4c:dc:4b:2c:7b:c0:d6:98:a7:db:
79:73:b1:3d:c8:45:f6:ae:29:1b:bb:93:4b:c0:31:ac:90:74:
a3:72:64:39:c0:4e:6b:ae:fc:d9:37:fd:ce:e5:7b:73:7e:c6:
15:df:f6:fb:ad:bd:53:c7:c0:c0:25:d7:07:66:d1:2e:7d:e4:
e3:2f:c7:4f:96:5d:95:2f:88:9d:09:eb:8b:ed:dd:40:a8:c2:
b6:40:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:24 2026 by rpki-client