Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: G2I51uN1gMtpHE56JHsdbTKczvRSs7hH1T6GhxDHRCo=
Subject key identifier: 23:90:44:41:A7:DA:B7:C7:19:F6:4D:DB:81:F0:07:DE:61:C8:0C:BD
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 01A0C7EB240A913D2CBB291EC5CDBBB352DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0F4F
Signing time: Tue 22 Sep 2026 07:01:10 +0000
Manifest this update: Tue 22 Sep 2026 07:01:10 +0000
Manifest next update: Wed 23 Sep 2026 07:01:10 +0000
Files and hashes: 1: ICnXf_-P4YXpOb6ZjyXTZ_msN-k.roa (hash: 3D4zEGy/FsPIqxHMTFOVIKU0MUectvNEvVPQNjn9vUM=)
2: N--Iz9tMy9gj-ddlZFLeQtSAkl4.roa (hash: eRQlu4WX3xV77iXU1Ih0oYvgX/ebwSlxVmcJ8psGbBE=)
3: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: gnjEcDl4pHWjL/C01KyWcmxY9CbCbgR9Xug8mc41zWA=)
4: uIHF2AQ7vp5Pre5Cme0Crtl9d0U.roa (hash: ubz0GfoUcPQy67DfcRHCrIrq2GX41LDxGEaEZ6xFYHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:eb:24:0a:91:3d:2c:bb:29:1e:c5:cd:bb:b3:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Sep 22 07:01:10 2026 GMT
Not After : Sep 23 07:01:10 2026 GMT
Subject: CN=23904441a7dab7c719f64ddb81f007de61c80cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:4e:a4:53:41:3b:07:4d:58:87:c2:9b:f6:
00:59:a0:e9:73:10:41:4a:fa:2b:7d:ff:3f:d6:1d:
06:8f:1a:b1:35:8d:44:3f:4d:d0:c5:e2:a7:74:12:
11:49:ff:ed:a9:e9:a7:b9:6b:12:ab:73:16:57:be:
40:f4:6c:5b:34:a3:98:fb:5f:b1:78:37:83:f0:02:
1e:c4:54:a1:55:3f:d5:aa:7a:05:e4:44:fb:a2:df:
e6:7c:31:d6:d3:ef:45:09:17:98:95:8f:0c:ca:fa:
97:c8:a9:21:a5:cc:cd:c1:41:40:80:d3:5c:c0:42:
05:52:23:fc:22:5a:ee:4d:b7:23:51:77:89:cc:56:
e4:ac:6d:d8:c0:36:5a:cb:80:8a:d5:a2:7c:aa:e9:
bb:47:22:ca:3c:2b:ef:db:1b:cc:be:ec:18:59:fe:
28:a9:91:85:2d:38:e2:a4:4d:13:7d:ed:d1:65:85:
c9:64:5c:f8:90:9c:16:18:a0:13:59:9c:41:dc:fe:
48:66:74:69:68:d0:32:0a:25:af:a4:85:3b:f8:56:
da:fd:41:a2:db:85:6f:cf:e4:6d:b8:90:99:cb:6f:
e0:21:53:52:0f:11:e6:64:9e:90:e3:33:a6:e5:9d:
d1:0d:ce:34:2d:bf:9b:26:2c:81:49:de:0e:f3:89:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:44:41:A7:DA:B7:C7:19:F6:4D:DB:81:F0:07:DE:61:C8:0C:BD
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5c:21:83:7e:66:52:fe:27:cc:23:fb:19:52:83:46:2b:9c:
f0:a4:0c:fa:ac:f6:59:db:3b:03:f0:b6:ad:c8:de:92:f9:03:
e1:4b:f2:5f:11:96:2b:69:ff:7a:55:6d:4b:82:f3:07:cb:87:
d9:66:4a:bf:de:2d:73:5d:2c:be:36:43:5a:2a:f9:f8:06:10:
2e:6e:51:2c:3c:a0:46:0c:60:b0:d2:5e:c6:e0:9e:60:bc:71:
dd:d3:fb:b0:05:f5:d9:33:31:ab:ee:d3:b7:72:62:62:b9:36:
a7:92:e9:f2:69:c5:cb:ce:4a:5c:fa:7f:7a:68:e4:b0:c6:de:
e2:d1:b9:e5:05:63:59:73:52:fe:49:1a:d1:cf:a5:7b:3b:33:
e8:31:0f:a0:87:dc:32:6b:4c:4b:0d:46:29:62:55:06:b7:40:
8a:91:15:c8:a6:a6:22:99:8c:76:0d:60:59:df:39:3b:d8:e6:
fd:f7:bf:f2:98:b5:fc:b9:29:23:d6:f2:16:b2:b0:3c:07:0f:
ed:ef:e6:25:b1:da:04:eb:dc:81:6e:df:d1:2f:af:1a:24:7b:
d0:b3:15:4c:a0:3a:53:2f:81:a6:33:1d:46:9c:53:14:1d:92:
95:e3:68:f8:b7:db:f4:0f:a6:80:be:3a:3c:0a:f0:e2:60:da:
73:d8:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:04:55 2026 by rpki-client