Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: O6Ag9maQTJpbNtKLvwuMjnnwl9FBIrQr7WJZMLzewcw=
Subject key identifier: 1E:13:4F:1F:F9:E5:EC:4B:3A:DB:73:21:A1:E4:66:BF:F7:F1:1B:A7
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 01A1DD94E9D506251A5C9EC28ECBB49A1ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0B8E
Signing time: Sun 15 Nov 2026 05:01:26 +0000
Manifest this update: Sun 15 Nov 2026 05:01:26 +0000
Manifest next update: Mon 16 Nov 2026 05:01:26 +0000
Files and hashes: 1: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
2: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
3: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: ujn29vMbBuoyc5UlkbaMbd9eMx2IGYzgkGh6cVxh4Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:e9:d5:06:25:1a:5c:9e:c2:8e:cb:b4:9a:1e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Nov 15 05:01:26 2026 GMT
Not After : Nov 16 05:01:26 2026 GMT
Subject: CN=1e134f1ff9e5ec4b3adb7321a1e466bff7f11ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:3a:5a:45:de:5b:f4:7a:be:88:ba:59:8d:
58:97:d3:4a:a8:63:6c:9c:6f:e7:6e:b3:e8:69:07:
4a:ed:1f:55:39:0d:86:00:c5:eb:6f:fd:2d:24:ff:
15:1f:f9:d2:1b:df:10:37:ee:20:69:3e:07:15:5d:
45:c0:62:12:4b:a3:70:67:dc:a0:16:e5:4b:c8:b3:
dd:b5:ef:55:34:e1:06:9e:0a:03:c5:b4:14:1f:fa:
e3:ec:c9:ea:de:98:76:5e:e9:26:35:76:ea:c1:ae:
60:ab:61:ff:bf:5c:5e:40:42:c9:0a:f5:21:5d:c2:
0d:51:7d:00:41:e1:52:e1:54:b7:4e:87:c6:12:81:
1d:8c:7d:f9:38:1f:0a:ab:58:c2:48:2f:e8:da:60:
42:02:bf:38:28:44:9c:d6:40:08:bf:ef:0b:9a:af:
3d:46:d3:a4:52:30:76:7d:14:88:ec:49:19:3a:1a:
16:0d:67:64:b7:37:23:6c:31:3c:5e:df:ac:bb:98:
d0:70:ff:e9:a8:aa:7c:d3:34:fb:14:44:52:31:16:
96:03:c5:08:90:ab:66:6d:2e:12:19:50:67:c4:3e:
7d:7e:3c:a1:ca:42:77:b4:d4:24:a9:11:d4:bb:e5:
74:fa:9b:c8:04:ad:cb:05:21:5b:4e:07:90:8e:3a:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:13:4F:1F:F9:E5:EC:4B:3A:DB:73:21:A1:E4:66:BF:F7:F1:1B:A7
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:45:15:fa:99:bb:1b:0a:1b:87:7e:48:d8:12:06:ec:ca:c5:
5e:c1:e6:07:1a:57:62:a8:c6:68:09:08:52:ad:a1:27:e6:cd:
4a:a5:61:49:70:db:da:89:c7:d7:62:f9:35:f1:20:09:af:ad:
39:d8:8e:56:78:fb:76:53:9d:b1:ca:65:46:3e:ff:51:bb:45:
f9:3c:97:c4:8c:fd:17:0f:d0:70:8f:f0:ed:b5:d9:61:90:9a:
9c:2c:35:af:f0:05:47:59:4d:d9:eb:0e:e2:00:1b:ff:59:40:
17:ec:95:c0:12:ac:60:36:3a:07:fc:c7:37:44:fe:a8:24:e0:
74:17:26:ec:5f:c3:04:d5:15:cc:3b:2a:53:6f:ed:35:54:e9:
2b:74:a8:6f:59:8c:f0:b0:62:6b:1c:39:87:cd:e2:31:ea:5f:
f5:3f:e4:59:a1:75:b3:67:69:ed:fd:7d:10:c8:9e:aa:1b:75:
7d:25:9d:66:31:41:48:f3:0d:82:cc:3c:d3:24:64:91:28:fa:
2e:ac:ee:a7:3c:d9:93:91:8f:f4:0a:0e:6c:bf:5c:e4:e6:50:
e9:e3:a7:7f:13:54:ee:b1:1c:eb:58:4c:0c:df:8a:b3:2d:16:
f1:dc:ef:04:ec:37:83:d2:29:9b:e5:66:e8:9f:2b:ea:b2:8c:
3f:0d:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:05:00 2026 by rpki-client