Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: l+agmWTkGzTAHR3VHwlMTcoV3WbQWP/LdCyIwzwEOAM=
Subject key identifier: 28:B1:01:F8:9F:D2:B1:DC:F7:85:47:8F:00:CA:47:CD:A5:EF:1D:31
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 019D2A72D40C7EAA55A964E10EC44C7B581A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 14CA
Signing time: Thu 26 Mar 2026 14:01:01 +0000
Manifest this update: Thu 26 Mar 2026 14:01:01 +0000
Manifest next update: Fri 27 Mar 2026 14:01:01 +0000
Files and hashes: 1: 7GQ9Go4t-nftndZjqWcwpqT2cyA.roa (hash: 6D6ISAC07Xvz4amnsg7PkhtQR5UqUKKR6P12gP68O4o=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: +sGa1wAbBvZXrO1kcq40wL8u1Ex5pbMVNFaeBeVRRn8=)
3: rU-plC-KTVhiYyslURMS4u3CzE0.roa (hash: pWfwbsWcRp37n3w6oGbkZG6T9NfFQSapOlKhQcIYE1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:d4:0c:7e:aa:55:a9:64:e1:0e:c4:4c:7b:58:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Mar 26 14:01:01 2026 GMT
Not After : Mar 27 14:01:01 2026 GMT
Subject: CN=28b101f89fd2b1dcf785478f00ca47cda5ef1d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:fe:4a:c9:e4:77:bb:3b:89:9a:23:2d:10:
00:a4:32:9e:21:7b:bd:07:2c:ef:5b:85:a3:0f:d9:
3f:b0:61:a1:17:53:5c:6d:60:47:e6:13:f6:30:83:
80:75:1a:e6:aa:87:82:6b:15:12:d1:b1:ad:37:a4:
58:7c:43:8e:7c:52:f6:8c:64:c2:97:bb:9b:8d:02:
ab:26:af:e0:b6:54:6c:32:86:7c:5d:9c:27:22:93:
c2:5a:0b:be:8b:6f:80:f5:08:08:7f:2a:e8:65:87:
76:d1:ca:62:7b:91:21:a5:3e:3f:b8:10:21:32:26:
a6:7c:3a:21:6f:5e:c0:27:5e:c4:32:07:27:76:77:
f7:42:46:d2:02:e8:3d:58:79:05:6b:ea:5f:e1:66:
6f:5a:66:27:18:46:a9:60:31:b9:cd:12:d1:cb:06:
1b:eb:b9:b8:c5:b9:20:4f:f8:6c:f1:c4:d3:38:0a:
7c:3f:c1:71:6c:01:3b:82:f4:e7:bd:d4:46:33:a7:
54:fd:09:7c:b4:84:bf:8d:b6:c0:84:67:99:e0:ac:
6f:1f:57:5c:62:0b:e8:8c:0c:0d:60:11:fb:94:4d:
44:d7:41:ff:70:0f:13:19:c8:ca:28:2b:0f:21:be:
0c:3c:dd:d6:5c:62:10:c9:35:be:f5:d8:17:68:9c:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B1:01:F8:9F:D2:B1:DC:F7:85:47:8F:00:CA:47:CD:A5:EF:1D:31
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d1:05:23:85:54:d4:5d:49:43:3f:0a:dc:0b:b7:b2:aa:aa:
b1:ac:5a:28:89:74:65:0b:eb:8a:ba:fb:72:65:c8:d1:b0:1a:
ae:72:ce:4f:b1:60:77:db:88:1a:8b:28:90:04:25:c8:cf:f6:
6c:d3:f2:33:3b:5c:40:b9:e9:56:f4:ab:99:e8:51:d0:8f:e6:
42:43:e5:93:b7:f2:84:ba:2e:27:1e:cc:04:e2:c1:0d:17:37:
52:32:5c:e4:2d:83:99:8a:31:c2:6d:78:70:ae:9b:c4:1f:0c:
31:bf:cc:61:e6:b4:4a:2b:db:42:d5:e9:ab:67:26:6b:fd:79:
8c:a6:d2:12:56:c4:e6:98:2c:27:01:3e:79:20:cd:53:92:46:
80:77:04:21:66:22:3f:bc:45:70:36:44:d0:01:5f:8d:57:37:
40:04:1a:8a:bf:e0:2e:94:86:31:14:b2:69:9e:bc:23:d8:c9:
17:a5:7e:23:d7:77:9b:d2:35:f0:10:70:f7:8e:75:e4:15:d0:
d9:07:de:b1:cc:de:9e:9e:ba:25:f6:45:d9:06:bd:0e:b9:b1:
33:c8:4f:75:fc:2b:24:41:fe:82:d3:99:f8:0c:b2:31:53:71:
72:e1:86:83:63:7c:a0:8d:16:fa:b5:b1:94:d7:5f:28:2a:bd:
55:9a:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:19 2026 by rpki-client