Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: o5LDhyancVLvItEJLkV+atxuZqyLzzsn/qGtGad17nE=
Subject key identifier: FF:34:62:36:83:12:76:68:70:95:2B:EB:FE:25:7E:A2:68:D4:55:3F
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 01A0D5027BFC86B1C3C4A4D8B22024AD0EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0B05
Signing time: Thu 24 Sep 2026 20:01:44 +0000
Manifest this update: Thu 24 Sep 2026 20:01:44 +0000
Manifest next update: Fri 25 Sep 2026 20:01:44 +0000
Files and hashes: 1: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
2: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
3: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: wkC8DZ44adxVGN7ugu0GChWA6isWg4pd0ZY8uoGuhak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:7b:fc:86:b1:c3:c4:a4:d8:b2:20:24:ad:0e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Sep 24 20:01:44 2026 GMT
Not After : Sep 25 20:01:44 2026 GMT
Subject: CN=ff3462368312766870952bebfe257ea268d4553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:6a:88:a2:fe:2b:24:4e:64:bb:6d:3a:ff:
94:22:d0:62:30:40:a7:07:8b:67:22:19:c1:f2:8c:
8c:26:3e:47:57:39:45:db:6b:82:37:44:a8:e3:d9:
90:80:67:65:55:23:48:74:26:27:47:3e:15:0a:ec:
c1:f9:bb:3d:98:c8:82:3d:a5:e9:3c:c5:6f:0a:25:
e8:b1:4b:9a:c4:72:90:66:fc:3b:e4:8a:0d:68:ee:
61:04:96:93:3c:6c:59:ce:89:91:85:7f:03:7a:f4:
7c:6e:23:75:0f:21:cb:a4:ef:68:dd:b6:c7:be:09:
8c:92:6d:2e:ec:70:53:75:48:8d:58:7a:cc:3a:5e:
cb:a5:1f:61:fa:ee:80:a4:53:50:45:5d:18:85:ad:
f8:4f:f3:96:b6:f6:86:fb:5e:68:6d:ad:cc:dc:a0:
f9:96:ea:4d:8d:22:d6:81:d2:77:b4:73:f2:2d:32:
70:fa:01:f1:f2:01:c6:90:ca:82:1b:79:d2:54:31:
74:a8:ce:1f:e0:d2:ef:bc:d5:44:1d:2c:ee:8c:af:
c7:c1:12:b1:0b:98:a0:e6:3e:0e:da:0f:14:0f:3d:
a1:73:10:7b:ba:0d:c9:cf:81:9d:bf:74:6f:d4:6f:
c1:73:61:8d:b1:b8:0d:e5:f9:45:89:db:ee:3a:11:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:34:62:36:83:12:76:68:70:95:2B:EB:FE:25:7E:A2:68:D4:55:3F
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:43:b2:cc:28:15:35:86:c5:9b:16:97:4d:fd:aa:44:7a:9e:
28:ae:9b:3b:88:eb:6d:4a:18:d2:21:db:dc:67:4c:66:81:05:
dd:d7:15:45:e5:77:b4:76:32:e8:b1:70:c3:ae:3f:95:e7:ea:
2b:e7:a6:ee:0f:0b:23:92:31:16:4e:22:a6:43:60:8a:21:01:
97:e1:24:a4:9f:25:af:bc:98:40:88:a7:cd:45:1d:8e:5b:eb:
c8:75:f2:22:1a:73:ab:05:fd:b4:a2:c5:e7:cf:e9:43:a4:7e:
e8:c1:02:bd:07:d0:69:5e:75:97:80:eb:39:8b:0f:02:cb:f2:
9e:37:5f:a0:44:0f:04:37:1d:00:9e:6a:44:6f:cb:2f:97:3b:
c5:b2:10:17:ba:93:80:8f:8f:5b:ed:ba:ca:86:b4:ed:f4:1e:
cd:b4:db:b7:86:72:52:1f:0c:67:24:96:15:7a:ba:43:77:ee:
85:12:5d:c9:0a:4d:73:d6:e2:85:98:03:75:0a:ce:a5:0f:14:
e1:d5:af:b0:99:91:d6:15:3c:9e:f9:1d:e0:64:c0:96:9d:ee:
6c:93:4c:0d:1a:5e:b4:07:ec:f4:ce:ed:06:f1:62:b1:6b:58:
08:c9:4a:e6:10:91:bb:0a:9f:06:2c:42:46:fb:be:91:79:9c:
92:e4:1b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:45:40 2026 by rpki-client