Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: 55dxpYGHPx+ZgjjLskoT2OvXFptGJRYPuFohWMMMFZI=
Subject key identifier: 85:50:88:20:EA:E4:8B:0D:62:35:F0:14:33:60:8F:CB:54:75:FC:02
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 019CAAFD24AC094FC8F7110E9F48CE13BB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 1488
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: 7GQ9Go4t-nftndZjqWcwpqT2cyA.roa (hash: 6D6ISAC07Xvz4amnsg7PkhtQR5UqUKKR6P12gP68O4o=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: G71HG9SIJqk55pRdyTTBMv/GAA+QFbJ9+YtP+DsKVxQ=)
3: rU-plC-KTVhiYyslURMS4u3CzE0.roa (hash: pWfwbsWcRp37n3w6oGbkZG6T9NfFQSapOlKhQcIYE1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:24:ac:09:4f:c8:f7:11:0e:9f:48:ce:13:bb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=85508820eae48b0d6235f01433608fcb5475fc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:4a:07:76:1e:e9:8a:f5:ae:58:10:f2:b5:
23:df:0a:f3:09:09:5a:3c:18:a4:f9:31:43:31:24:
af:71:76:86:4f:2d:a8:40:c9:2d:0b:21:eb:02:05:
95:d1:db:b9:91:28:54:52:01:70:81:eb:05:31:a2:
03:36:63:12:d8:8a:6d:3f:f3:86:75:24:7d:40:58:
1a:5a:2f:bf:9d:bb:ef:46:84:3e:7c:5e:23:04:4c:
bb:ae:73:7e:a7:c3:b5:9e:4d:f3:f8:5d:c3:0a:75:
ac:88:8f:88:5e:97:b2:80:b5:33:46:75:e1:9f:af:
1a:fd:2c:4c:09:12:35:65:e0:57:df:31:22:a2:ed:
3e:98:3e:0c:ef:b7:5f:81:49:79:63:22:c4:0c:92:
75:64:48:48:b4:6d:36:79:08:a5:e0:74:90:21:e7:
db:c8:89:a4:ba:b7:8c:2e:0d:ef:41:7d:b5:32:53:
1b:a4:f3:60:fd:f9:fe:da:c0:dc:d4:5d:c5:b8:86:
b4:d7:27:c9:d0:16:21:83:30:54:00:ac:99:f1:e2:
e8:9f:31:69:32:be:a3:ee:a9:d5:de:bc:1e:75:31:
81:b0:0b:b1:49:7e:c3:1c:bf:d4:70:fe:c4:ee:f5:
fb:06:cf:b4:70:00:0f:9d:44:4c:2d:73:e2:ba:5a:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:50:88:20:EA:E4:8B:0D:62:35:F0:14:33:60:8F:CB:54:75:FC:02
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:63:4e:22:28:fa:10:ba:c0:96:11:0b:27:09:3d:2b:ac:56:
2e:78:33:84:5c:9a:9f:da:a6:2e:0f:d3:6e:84:0a:f0:94:df:
43:a2:e1:65:74:14:bc:84:ce:80:66:e6:b4:b9:57:ed:2f:5a:
3e:e2:6e:85:70:31:9a:d0:e6:8a:09:ca:08:fa:ee:71:ba:f7:
30:9e:ec:a4:46:00:41:73:e5:11:03:2b:22:fa:b2:31:3c:ab:
35:25:f8:a1:f4:11:f3:b2:b7:f4:63:9e:39:a0:0c:83:e3:70:
3e:68:0d:48:14:82:01:94:d0:47:80:46:c2:8f:2d:88:81:c1:
82:7c:4a:21:ef:d2:48:76:4e:df:0a:7f:c8:36:7b:bd:70:9f:
0d:27:c0:f5:f8:6f:d3:b7:7b:1a:bc:0c:4e:fd:60:58:2a:26:
cb:30:83:a0:0a:36:b6:ff:5b:96:58:d3:fd:68:ab:64:8e:b7:
bb:3a:a5:a2:61:30:fd:b5:8a:98:5e:2e:c1:a8:a3:74:6c:dd:
0e:d6:2d:ed:8b:21:11:c9:7e:f8:c9:f6:a4:be:5a:9b:94:69:
ac:49:65:1b:74:a5:c6:8d:9b:5e:ee:f4:2a:28:ca:58:df:16:
d0:05:64:32:08:cc:1f:a1:83:b5:d5:ef:78:39:20:55:60:4b:
f6:99:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:09 2026 by rpki-client