Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: 6ummWgGpoVh/qAChLU+W085ZEfkeWGIJw/uhbAUQOF0=
Subject key identifier: 29:EE:C0:CF:D6:12:9B:3F:EE:A6:1E:C9:C0:9C:D8:9D:B2:28:E6:DA
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 01A1C366E9E2CB1841B587FAAE8E308F95B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 04B7
Signing time: Tue 10 Nov 2026 03:01:03 +0000
Manifest this update: Tue 10 Nov 2026 03:01:03 +0000
Manifest next update: Wed 11 Nov 2026 03:01:03 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: 36up4lWbVwOMSgI+Y5XOdhC0evvL+mD9l/66f4U5X18=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:66:e9:e2:cb:18:41:b5:87:fa:ae:8e:30:8f:95:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Nov 10 03:01:03 2026 GMT
Not After : Nov 11 03:01:03 2026 GMT
Subject: CN=29eec0cfd6129b3feea61ec9c09cd89db228e6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:f3:6c:40:0d:9b:d1:98:5b:44:aa:95:6b:
4b:92:af:ab:07:5e:bd:ad:fc:54:d0:85:a2:c3:cb:
60:bd:ba:7d:61:e3:60:17:26:7a:ca:ca:57:0a:3d:
4f:ff:04:fd:d6:4d:ed:8c:0e:b6:f8:97:00:29:bc:
94:43:1a:d2:82:f5:7f:82:63:ce:47:df:51:ab:04:
09:b6:55:b7:85:60:6d:40:69:6f:2a:ee:30:ca:f4:
71:e7:93:4b:72:8e:4e:cc:a2:71:26:a7:a1:86:0e:
18:52:b3:e8:a1:55:68:57:9c:21:b3:b8:96:86:45:
bf:73:d7:bf:4c:c8:1e:f5:5d:18:15:c5:d8:2b:a9:
9c:5e:fb:3b:67:a5:1a:f4:cf:0b:48:ce:0e:08:1d:
01:d6:50:4a:c4:84:d3:4c:b0:6c:68:5a:c6:73:60:
17:fc:4d:26:5d:e1:e0:2d:14:37:8b:0c:98:26:81:
c9:ea:b8:9e:c7:a6:5f:a4:36:6b:de:67:41:c5:c7:
6e:49:6b:3e:60:f4:19:9a:64:99:4e:b1:2e:f9:8c:
6c:3c:f4:07:97:90:e1:af:c4:7c:ef:3d:16:90:2b:
c8:6e:81:55:72:98:49:87:e8:4a:a5:7f:6d:29:bb:
c6:6e:2b:ec:94:73:9e:f6:ce:77:c2:28:36:12:ef:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:C0:CF:D6:12:9B:3F:EE:A6:1E:C9:C0:9C:D8:9D:B2:28:E6:DA
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:13:f5:59:b9:c9:0f:83:b8:70:25:3c:85:3e:b7:ab:b2:ba:
4f:f4:2d:39:01:64:b8:c6:b4:45:a0:a1:94:f4:38:cd:b5:73:
46:bb:7c:63:14:65:c0:66:4a:84:d7:43:d7:64:c1:27:34:a5:
5b:eb:6d:03:8e:e6:10:84:eb:5c:62:84:0f:ce:5a:16:0e:ee:
fc:ef:95:03:58:5d:82:b7:7f:e2:1f:ea:1e:20:aa:b8:3b:a7:
c0:99:e7:6b:8d:55:0f:ac:69:06:aa:07:12:c3:b5:87:53:b6:
16:b3:1f:7c:91:c6:60:ee:b8:8a:d7:92:a3:57:82:52:17:9a:
e4:d9:0b:7e:67:44:7a:68:f3:83:82:69:c0:e6:5d:fb:b5:81:
77:61:26:91:a3:78:72:f6:07:3d:d8:9a:b2:03:cb:99:ad:6b:
b2:13:1c:f3:10:92:1d:c5:f0:4d:24:d3:f4:1d:df:53:54:67:
8d:6a:f3:e6:b3:2b:77:15:ab:c2:7d:d8:dd:a9:70:8c:76:97:
78:24:32:b6:87:8d:4f:3e:6f:e3:7c:86:8a:78:de:65:55:96:
8c:81:18:24:6a:86:22:c3:b7:0b:fa:4a:ec:6e:7e:3c:b6:b4:
0a:24:9c:71:94:1b:d4:94:78:bc:d7:9d:49:c8:74:f1:55:0e:
31:66:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 10:30:24 2026 by rpki-client