Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: RH8Zv6SWIoAZvVTz0pZe6zaCRJsHVBDO3WLeUgsBqAc=
Subject key identifier: 27:0A:AB:7E:C2:A6:1D:B8:5E:15:F4:1C:08:8D:88:99:B5:6F:C6:A8
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 019D2816E3588E904AE08F9EE5B8D968D478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0F77
Signing time: Thu 26 Mar 2026 03:01:21 +0000
Manifest this update: Thu 26 Mar 2026 03:01:21 +0000
Manifest next update: Fri 27 Mar 2026 03:01:21 +0000
Files and hashes: 1: _f2HEEBuezRD1LjpBU3oUL7f-cg.roa (hash: ND07CUp2q2s9xUghAhuQH6sunoACMx3Se30bMpjk0Zk=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: e0bRkjRudsjHS1qLbFBE9meDyNRT38JrWQPpBg99aos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e3:58:8e:90:4a:e0:8f:9e:e5:b8:d9:68:d4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Mar 26 03:01:21 2026 GMT
Not After : Mar 27 03:01:21 2026 GMT
Subject: CN=270aab7ec2a61db85e15f41c088d8899b56fc6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:6a:19:5c:8f:1b:36:99:e7:d3:00:a9:4e:
6e:88:08:20:92:f8:a1:77:68:a9:7a:f2:11:38:67:
b4:cb:d1:22:a3:ee:69:7e:fb:b6:5d:1b:1e:78:b3:
2a:81:a6:1b:bf:4c:b6:e2:e5:f6:0f:67:a8:24:c7:
a7:2c:27:ae:34:6d:ba:dc:d9:10:2c:53:4b:cb:54:
85:0f:8f:6f:9d:42:59:a2:8b:de:01:05:96:21:5c:
19:9c:37:cc:65:94:6b:39:b1:07:54:bc:77:3a:7a:
c4:1a:e3:e7:a0:3e:b0:d7:91:ea:03:81:ee:a9:d6:
20:30:f7:4e:f1:62:f7:c4:95:bc:cd:b3:a3:09:24:
fc:84:72:2c:ac:52:2a:a6:c2:85:ca:da:a6:ee:df:
f4:67:72:79:6d:cb:ce:e7:0f:25:34:2e:2f:e7:c9:
5d:a2:b4:df:c4:cf:e5:ef:f9:6c:c5:0d:25:0e:b6:
e7:af:92:f3:aa:48:0a:be:cd:1c:1c:84:b9:85:b4:
27:9f:26:2d:0a:b9:f1:4e:64:6e:5e:1f:72:fe:2d:
07:90:fe:f9:29:25:3b:b4:7b:8d:df:d0:c7:f6:51:
3d:07:38:27:70:73:6c:00:2f:21:b5:98:0d:99:89:
a6:6e:57:c7:0c:02:4f:07:5b:d2:e0:95:c1:f1:94:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0A:AB:7E:C2:A6:1D:B8:5E:15:F4:1C:08:8D:88:99:B5:6F:C6:A8
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:3e:78:93:70:85:89:ff:60:2d:f7:9f:86:c3:29:fa:f6:
81:e8:88:ea:09:42:1d:1a:04:1f:3d:fc:46:28:02:83:68:4f:
d7:0b:8a:d6:ec:a4:e1:0c:f1:2d:af:f8:3e:65:52:f0:29:99:
26:ee:22:49:a9:21:47:82:56:a4:cb:67:e4:b6:17:27:0d:d1:
0f:d5:25:36:91:6c:e1:a1:1d:aa:82:99:b2:75:fd:17:aa:25:
ba:1c:92:81:aa:17:6b:d1:96:64:47:b2:6f:03:cb:dc:63:2a:
08:9b:a8:d6:05:51:b2:2f:a9:d9:38:56:c5:0a:c1:7b:c5:09:
32:5a:fa:62:36:55:0b:63:da:9f:94:dc:b1:b0:16:c4:12:0b:
a8:15:23:dc:d9:63:0a:fe:9e:03:48:5f:3d:fe:e9:07:cb:59:
79:75:eb:46:d1:ac:5c:83:10:08:d8:32:1e:d6:22:b3:dc:df:
05:eb:29:70:46:40:2b:91:59:02:16:8d:2c:c1:7c:77:87:d4:
2c:c3:b9:1d:8c:58:4d:f7:f7:46:d2:8b:83:54:bf:26:1c:09:
0f:f5:08:f9:74:a8:1e:c2:c7:a6:45:36:29:b4:b6:b1:86:24:
20:8d:39:fd:e0:75:5d:31:ce:35:f4:fa:1a:c9:8f:20:6d:92:
cd:f8:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:14 2026 by rpki-client