Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: C4PkMNNXyAgpyYAHbgs0taahK9CFxfTVeG0sUvpcGCM=
Subject key identifier: C1:57:03:65:01:B9:2E:5E:AA:6A:4D:06:4C:70:82:F1:EC:79:78:6A
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 019D9A74E5389B8ED5A56952EA501620742C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 1504
Signing time: Fri 17 Apr 2026 08:00:45 +0000
Manifest this update: Fri 17 Apr 2026 08:00:45 +0000
Manifest next update: Sat 18 Apr 2026 08:00:45 +0000
Files and hashes: 1: 7GQ9Go4t-nftndZjqWcwpqT2cyA.roa (hash: 6D6ISAC07Xvz4amnsg7PkhtQR5UqUKKR6P12gP68O4o=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: 3Hd3FNNMCP6JRlJPX8B1q977EPbWVseQFaC8pvxNals=)
3: rU-plC-KTVhiYyslURMS4u3CzE0.roa (hash: pWfwbsWcRp37n3w6oGbkZG6T9NfFQSapOlKhQcIYE1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e5:38:9b:8e:d5:a5:69:52:ea:50:16:20:74:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Apr 17 08:00:45 2026 GMT
Not After : Apr 18 08:00:45 2026 GMT
Subject: CN=c157036501b92e5eaa6a4d064c7082f1ec79786a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:ed:60:2f:a8:f6:b6:f2:d5:8a:a4:69:48:
33:aa:29:96:86:f3:84:d4:73:b8:63:92:61:d9:ed:
5f:b2:bb:e5:fb:c8:9f:c0:fc:d1:2c:f1:a4:e1:e1:
dd:ce:1a:00:42:62:58:83:98:3d:30:5a:52:65:70:
e5:fc:da:c3:dd:dc:d9:f6:7a:5c:8d:b1:f4:1e:05:
11:27:0b:bd:62:19:38:ae:38:93:c4:3e:a0:29:67:
d2:ac:6e:9d:3f:b3:5c:8e:9b:4d:1a:68:a2:d7:88:
bc:95:07:29:7b:e2:a0:2b:f9:04:8e:db:8d:d0:98:
8b:85:2e:24:e0:7b:bf:1d:99:34:9c:2f:11:c2:b5:
27:03:67:6c:77:3b:8b:7a:ad:dd:0f:79:c6:52:43:
1b:66:4b:08:a3:9f:2d:13:7b:2a:89:3f:12:16:20:
69:97:45:9c:aa:94:c8:b3:3f:69:b8:64:0f:25:38:
0f:34:90:7c:87:b5:2a:c0:45:e1:88:a9:18:2e:7a:
a6:19:69:a8:45:f0:85:d9:5f:9a:3d:5c:d6:fb:7e:
64:b7:02:e7:bc:74:b1:d6:f5:eb:2e:18:7a:ab:e0:
85:d3:41:06:f0:65:79:7f:32:a7:e6:f2:f8:51:d9:
14:88:1b:81:d8:db:fc:ef:a1:e3:bc:13:9f:17:4b:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:57:03:65:01:B9:2E:5E:AA:6A:4D:06:4C:70:82:F1:EC:79:78:6A
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:13:d5:54:cc:49:78:d6:1d:ff:a8:2f:35:82:bc:b9:55:33:
ba:5b:9a:b0:73:35:92:44:33:0d:7d:b6:4d:b0:b6:c1:6e:ac:
06:48:a7:7e:0c:ad:1a:34:a6:2f:74:79:e0:8d:87:74:2e:b4:
e8:10:34:91:b7:99:1f:68:ff:33:80:20:66:5a:38:50:0c:99:
57:61:f0:2c:d8:ac:10:ef:0e:d5:f9:1f:c8:9e:5c:a2:ad:02:
a8:0d:dd:38:b5:5d:01:b3:9c:93:c0:fc:e1:26:65:6a:1a:d5:
06:b5:26:fd:21:4d:f4:2e:fa:4f:86:42:90:e8:7e:99:cb:86:
34:5b:15:8d:fc:97:02:42:a0:41:23:e4:30:78:70:4e:f6:e8:
36:39:33:ef:83:ff:60:5b:69:0d:30:d5:e7:32:d2:59:c9:17:
f9:8e:2d:43:a9:2b:e3:db:f3:ab:69:7d:17:38:d0:99:7e:14:
ec:40:d1:e3:20:e9:60:b2:e2:71:28:1c:10:ae:c0:95:0b:40:
61:d2:bd:47:91:cf:34:4d:db:cc:6f:b6:0c:29:5d:a8:a5:c3:
cf:24:6d:d6:85:5f:7f:c5:34:cf:a8:26:e9:86:a0:8a:9e:c6:
bc:4b:34:ff:f3:08:48:10:c8:8e:b7:52:78:cf:d3:57:fd:bc:
e5:e3:4b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adOU4m47VpWlS6lAWIHQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz
MDBiMjAwHhcNMjYwNDE3MDgwMDQ1WhcNMjYwNDE4MDgwMDQ1WjAzMTEwLwYDVQQD
EyhjMTU3MDM2NTAxYjkyZTVlYWE2YTRkMDY0YzcwODJmMWVjNzk3ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4LtYC+o9rby1YqkaUgzqimWhvOE
1HO4Y5Jh2e1fsrvl+8ifwPzRLPGk4eHdzhoAQmJYg5g9MFpSZXDl/NrD3dzZ9npc
jbH0HgURJwu9Yhk4rjiTxD6gKWfSrG6dP7NcjptNGmii14i8lQcpe+KgK/kEjtuN
0JiLhS4k4Hu/HZk0nC8RwrUnA2dsdzuLeq3dD3nGUkMbZksIo58tE3sqiT8SFiBp
l0WcqpTIsz9puGQPJTgPNJB8h7UqwEXhiKkYLnqmGWmoRfCF2V+aPVzW+35ktwLn
vHSx1vXrLhh6q+CF00EG8GV5fzKn5vL4UdkUiBuB2Nv876HjvBOfF0sk+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFXA2UBuS5eqmpNBkxwgvHseXhqMB8GA1UdIwQY
MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt
MThhNzY4YjYwZmNkLzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk
LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxPVVMxJ
eNYd/6gvNYK8uVUzuluasHM1kkQzDX22TbC2wW6sBkinfgytGjSmL3R54I2HdC60
6BA0kbeZH2j/M4AgZlo4UAyZV2HwLNisEO8O1fkfyJ5coq0CqA3dOLVdAbOck8D8
4SZlahrVBrUm/SFN9C76T4ZCkOh+mcuGNFsVjfyXAkKgQSPkMHhwTvboNjkz74P/
YFtpDTDV5zLSWckX+Y4tQ6kr49vzq2l9FzjQmX4U7EDR4yDpYLLicSgcEK7AlQtA
YdK9R5HPNE3bzG+2DCldqKXDzyRt1oVff8U0z6gm6Yagip7GvEs0//MISBDIjrdS
eM/TV/285eNLCA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:30 2026 by rpki-client