Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: J4CqAUKjx2gQdLYhGGmi+uAloawv4KO9Od6W7QZjQmM=
Subject key identifier: 39:8B:EA:F3:F1:1A:BB:B6:58:94:D1:85:A8:BF:98:21:E2:B6:20:83
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 019F90909994ADAA7E49A4EC98B5987EDBD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0A5D
Signing time: Thu 23 Jul 2026 20:00:23 +0000
Manifest this update: Thu 23 Jul 2026 20:00:23 +0000
Manifest next update: Fri 24 Jul 2026 20:00:23 +0000
Files and hashes: 1: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
2: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
3: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: 9/3sGuAb8Q4YIecHGZiYravTG7YOpW1O5frdzDwiwaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:99:94:ad:aa:7e:49:a4:ec:98:b5:98:7e:db:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Jul 23 20:00:23 2026 GMT
Not After : Jul 24 20:00:23 2026 GMT
Subject: CN=398beaf3f11abbb65894d185a8bf9821e2b62083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:01:94:32:64:ba:06:53:fc:3f:65:ae:14:
7a:fe:dc:41:be:cb:fe:6b:da:93:ea:71:8a:98:d1:
f0:dc:9e:83:ff:fe:58:4d:84:d2:0e:c8:0a:32:00:
8c:9c:67:0c:bb:28:35:df:88:fe:8d:d2:cb:e6:f1:
68:7a:5e:67:c6:03:24:6a:98:62:d0:b4:11:28:ee:
50:03:5a:17:2d:07:f2:0a:1a:e7:8a:3a:fd:ae:74:
91:a3:ed:ea:d1:a1:0d:8f:4c:b7:b6:78:4f:3e:f5:
e2:60:46:68:ed:48:db:f8:63:31:90:b2:92:47:46:
56:7b:b8:07:ff:f0:8a:8d:ea:aa:f5:88:ee:4c:b2:
72:ac:09:98:0b:d2:3d:a0:e4:75:d0:05:d0:b1:a3:
1a:ea:c1:87:62:76:84:c9:1c:de:8a:e5:8f:13:5b:
97:f0:f7:c7:99:0e:7d:2c:ac:53:79:d2:31:f1:0b:
04:aa:76:cf:02:44:df:44:19:02:df:14:d4:31:a2:
1a:15:67:db:5f:62:43:f1:e2:93:1a:38:fc:03:25:
1d:1c:38:b3:a9:00:97:cc:f1:b7:b9:99:25:46:b6:
3c:18:3d:ba:90:79:47:a4:80:85:6b:2b:04:c6:53:
af:1f:15:89:31:cd:f6:d8:e2:00:1d:ff:42:82:c5:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:EA:F3:F1:1A:BB:B6:58:94:D1:85:A8:BF:98:21:E2:B6:20:83
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:27:9d:f4:a5:c6:d6:f2:6a:df:e0:23:c2:c9:0c:3c:37:50:
fe:0e:fe:13:3d:2a:66:eb:af:4d:73:41:65:3e:47:3d:fe:d9:
c0:78:f9:0c:eb:8c:b3:3b:05:67:ad:7f:38:7b:e3:a2:ae:e4:
8e:c9:12:d3:44:16:0b:2d:9a:6f:9b:d6:1c:6b:2e:1a:40:4b:
01:a0:d5:fb:4d:7a:ec:d5:6b:fc:bc:ba:aa:ac:47:01:d4:23:
34:5e:dd:d0:0a:ac:3f:6b:09:49:53:ed:9b:78:78:68:0c:cc:
50:70:0f:8b:6e:24:d0:44:ab:26:6c:a8:a7:8e:8a:18:90:7d:
92:4d:dd:f5:cd:3d:04:5a:f9:7a:f9:1b:0b:e2:1a:f8:c4:ea:
4c:a0:89:e3:72:9b:cc:40:47:ed:53:13:72:51:69:c7:39:d3:
f4:4d:64:67:55:9e:1a:ef:de:cc:46:8a:6c:27:72:7f:91:80:
3b:98:96:46:17:4c:76:03:f7:eb:8c:ed:61:62:08:58:e5:ee:
ee:85:24:72:33:60:06:40:df:d3:32:02:2f:63:dd:79:10:bc:
c3:3e:9b:01:9d:66:c4:b1:46:78:d2:14:69:89:ca:62:f9:2c:
8a:7f:7a:c3:b5:51:74:b0:05:b4:c3:c6:b4:8c:70:8e:8f:5f:
2f:7e:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:43 2026 by rpki-client