Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File: q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier: oQUmpkcq/0ywS2TbQ1jTy47zPRawNF4ePGfcw9yA6A4=
Subject key identifier: 2A:FC:BA:99:32:6F:57:15:D7:E8:E6:D7:BD:B3:F9:96:34:10:00:CD
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 019D9AABF6F125B88A6C30B8EE452938D0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 09:00:54 +0000
Manifest this update: Fri 17 Apr 2026 09:00:54 +0000
Manifest next update: Sat 18 Apr 2026 09:00:54 +0000
Files and hashes: 1: 6HLmOIlw0JJlLfNpuVhkS5VevII.roa (hash: duraaLF3+tphpAPz7hcD0W+ai9uSm22QFtqEemAzlOs=)
2: cgiCnDdXt2ZfV4gQ6f64Txzv9UI.roa (hash: Epq0AQtf5gLEvFkohacS+3j5hF97hS/AEpHSVuOJB9w=)
3: nwJtWBtHHCOXbdDRVJgpwU9yEVc.roa (hash: KTNFAJc/6ueKlLn/0ANsYJWuRw0+1gFif+avYpTFJp4=)
4: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: rJLwqMPsueQCft98gmwGPqBJGMlouz4AWp7uuAcoNhY=)
5: qfWUaAQNlV9wKmB2U3853Bl8uNA.roa (hash: rOp4emJoeO5JknR894vKgNsr/vggi5P0L+PXDJf8JnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f6:f1:25:b8:8a:6c:30:b8:ee:45:29:38:d0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Apr 17 09:00:54 2026 GMT
Not After : Apr 18 09:00:54 2026 GMT
Subject: CN=2afcba99326f5715d7e8e6d7bdb3f996341000cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:60:91:81:f5:b3:a1:27:e0:c8:b8:aa:bf:
bb:80:08:5b:86:a4:0c:e5:c5:26:72:ba:75:65:66:
ba:be:c9:8a:9c:1f:c5:ff:10:48:4e:a7:23:78:6d:
59:fd:69:49:21:8b:05:26:df:6d:78:a3:36:f4:bf:
e2:fc:e3:b9:ee:13:a5:8b:c8:e4:aa:98:ab:55:a8:
3c:e0:16:49:6c:43:0f:ed:c0:46:99:57:67:5c:0c:
49:17:74:b4:73:c3:1b:ed:da:74:2c:db:8f:5f:02:
12:10:b0:a5:2f:b6:62:e4:9a:49:3f:30:3c:82:79:
d0:cb:e0:61:59:53:b5:a7:9b:ec:ac:b7:16:6b:dd:
33:ec:f2:45:83:3f:9e:e4:78:97:77:f9:a4:a5:7f:
90:51:3b:20:72:2d:05:0c:f7:b6:db:f5:10:e9:ad:
f5:26:87:f5:10:f7:43:e4:a5:a5:ba:bb:0b:5e:97:
a8:ca:4d:a0:43:2c:cd:8a:4a:52:8f:f1:3d:40:2c:
6b:fe:67:48:0c:1e:a6:d7:14:fe:05:e3:b6:5a:f2:
ce:68:0e:b1:b5:12:6c:ea:b4:2b:54:36:3d:4a:50:
c7:f6:3e:2e:5f:42:ee:03:3d:c6:8b:7c:6f:aa:ce:
2c:b4:b9:83:b5:65:f1:ee:fb:b0:65:d4:0d:2a:13:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FC:BA:99:32:6F:57:15:D7:E8:E6:D7:BD:B3:F9:96:34:10:00:CD
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f9:a4:98:3e:c7:20:83:42:3d:d3:35:fa:42:a7:71:c3:4b:
88:18:49:12:3f:bf:ac:1c:88:37:44:0d:c3:44:e3:de:86:72:
0e:d9:9f:64:f9:be:8d:f8:09:3b:75:ba:32:15:b9:27:3c:23:
e1:3b:4a:30:67:ad:c0:0b:d4:a9:d5:52:94:6d:55:39:bd:78:
b2:df:c5:5b:aa:60:b3:06:53:49:b9:68:5d:37:14:ed:77:74:
e0:ff:96:bc:15:bf:5b:21:c3:8e:b9:0c:f2:4f:cd:81:c6:a0:
ca:0e:53:5d:7c:c9:df:36:10:80:80:11:fc:f0:a7:91:d1:4f:
d6:e2:ae:f2:d1:45:4b:2c:c1:d4:76:ba:69:b6:26:ee:d2:25:
60:38:92:9b:6f:5b:be:4e:cc:6f:24:31:b7:a6:6a:5e:f0:7f:
30:1a:95:0b:38:c6:6d:57:49:a8:bf:0c:1e:24:9c:79:5e:9a:
9a:9a:42:5f:08:85:33:02:a9:31:2e:3a:fc:f4:94:4e:07:71:
c9:1f:92:87:c4:6e:43:e9:cc:4f:f1:45:6d:bc:73:50:ff:5c:
e8:7b:84:20:66:6f:2a:1e:5d:ed:20:6c:b6:89:07:cf:e3:2f:
d7:5b:9c:bd:ac:28:09:52:e1:5c:c8:0e:e3:99:04:dd:a7:cf:
6d:2e:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:28 2026 by rpki-client