Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: hF/ybGj7UdbnqA9hHN4VIluvMTz2MoPULFveQWySrUA=
Subject key identifier: D2:E3:14:62:28:67:C1:E1:B7:B1:88:99:46:11:C6:C0:41:05:70:2B
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 01A0CD48491E49060EC7D53E663FC865633B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0B01
Signing time: Wed 23 Sep 2026 08:01:01 +0000
Manifest this update: Wed 23 Sep 2026 08:01:01 +0000
Manifest next update: Thu 24 Sep 2026 08:01:01 +0000
Files and hashes: 1: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
2: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
3: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: tgmxNR4pdAhrW7uXdp4wJP5Wodjtfqn316OmURoX654=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:49:1e:49:06:0e:c7:d5:3e:66:3f:c8:65:63:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Sep 23 08:01:01 2026 GMT
Not After : Sep 24 08:01:01 2026 GMT
Subject: CN=d2e314622867c1e1b7b188994611c6c04105702b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:ef:2f:ef:f9:5c:a7:2c:88:2e:3f:0f:e1:
d0:7e:a2:b2:04:b2:37:c7:92:4a:bc:67:a2:76:23:
65:b6:af:a1:43:4d:a1:57:17:60:52:d0:b5:7d:5c:
b1:b5:48:62:78:d8:d6:40:e3:b5:dc:62:f9:59:27:
bf:ac:6e:c4:49:41:3f:2f:ef:c7:1c:af:cf:4f:74:
7f:52:6d:8b:75:90:c9:87:73:2d:49:3d:8e:41:3c:
df:39:c2:4a:c0:32:0d:27:75:39:b8:9d:d8:b5:2a:
1b:ff:4a:00:54:ce:ae:ba:89:78:fb:d8:4b:c7:e1:
40:a0:2a:c2:2e:fb:97:b4:36:2d:f4:76:ac:fb:ea:
ef:6e:33:82:3d:96:2c:46:c4:a5:e1:75:87:0f:e1:
00:0e:e8:00:e2:48:37:ba:c7:c9:99:7d:55:4c:ab:
de:ef:f3:e8:56:f8:6d:46:a7:fc:78:e2:55:1b:ac:
83:78:02:e1:a6:74:15:15:f5:25:d3:88:23:87:06:
a3:0e:32:36:f0:64:c6:37:54:78:ff:08:d6:a8:23:
0a:1d:c1:e5:f1:51:13:07:65:4e:30:d0:20:cb:1a:
20:d1:6f:86:f2:77:a6:16:43:2a:81:ff:c1:37:fb:
3f:3b:62:90:09:ee:0a:62:5f:8f:0e:4f:26:97:15:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:14:62:28:67:C1:E1:B7:B1:88:99:46:11:C6:C0:41:05:70:2B
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7f:9a:0e:73:bd:5f:9a:c9:75:4d:3b:a5:85:7c:9e:67:74:
6d:6f:5c:e6:48:e0:6f:64:e1:15:9f:e0:4d:d1:90:22:ca:8b:
6b:33:5b:06:7c:d5:07:35:fd:d3:e4:7b:30:b7:c5:52:dc:fa:
c4:e9:12:de:44:4f:c5:ba:e8:f7:26:b9:75:2a:1c:7b:7c:5b:
39:71:03:47:84:c4:f4:45:14:45:01:48:70:e6:ab:76:0c:bf:
b6:14:6b:50:72:66:e8:f5:76:6c:30:1b:20:02:1f:dc:12:59:
2e:30:da:95:a9:92:57:f7:bc:0c:91:4c:d5:92:fc:91:39:80:
c5:e5:7a:ab:71:56:c7:13:6d:cd:96:95:04:59:c3:41:79:36:
94:2f:26:df:1b:09:db:71:38:1f:3a:7b:e7:53:b6:86:f6:a8:
7e:58:93:1e:bc:40:41:a0:c4:b6:6d:12:af:e5:02:1f:56:d6:
0e:81:ef:02:af:20:88:c4:2c:6a:0b:62:09:b8:cf:08:41:c9:
b5:06:7a:d6:9f:f6:dc:08:d3:7d:4f:a4:d5:10:c6:7a:54:68:
ba:a0:ab:66:4c:65:ca:0e:01:84:1e:cc:8e:89:ba:1f:97:7e:
5d:84:ac:6a:fc:00:7f:09:b8:97:b7:82:45:18:ed:3d:21:8d:
5e:63:56:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:38:18 2026 by rpki-client