Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: OTbEaAOgsvPSQO/0CIr0AqOhji+QRrXIoj/PMctds2E=
Subject key identifier: 8C:F9:D9:B6:E5:16:93:E6:3B:1C:AE:09:AB:30:DE:A6:68:EE:23:D9
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019E1ED996F875DA34F332D311583DEA7011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 173C
Signing time: Wed 13 May 2026 01:00:36 +0000
Manifest this update: Wed 13 May 2026 01:00:36 +0000
Manifest next update: Thu 14 May 2026 01:00:36 +0000
Files and hashes: 1: H2T8PA1785l6gX-iVp9IuPaA4Nc.roa (hash: 6faWeYIv5Ai9qI/fX55pW1xZn22WZewYCnXhS25+v6I=)
2: Xz4dqhqCzoZvF10IK-TkgPiAc5Q.roa (hash: ZFUgfRsBRCs1X5BDvrArX90/CdgfBgfrW7Rw9sq2N84=)
3: lyOH-P2_hH5Ugem7r8kpnkt99SI.roa (hash: GiPFjQfoJkQaMedHXbS4M3+BR9UAmP0J6PtJlsbWkGg=)
4: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: lN+IbXo6pRdFS97y3pn9LFoZMjcHE9obOJkeHVkk5BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:96:f8:75:da:34:f3:32:d3:11:58:3d:ea:70:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: May 13 01:00:36 2026 GMT
Not After : May 14 01:00:36 2026 GMT
Subject: CN=8cf9d9b6e51693e63b1cae09ab30dea668ee23d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:c4:e5:e9:8a:6d:a4:a4:af:98:d4:4d:c4:
9e:c9:be:10:71:ef:08:9a:92:2b:0a:76:d2:d5:04:
61:9a:63:a0:a4:61:88:8e:79:53:81:e2:82:ae:7f:
b4:db:74:3b:39:cd:20:23:40:86:26:b5:95:1f:ba:
79:9b:b3:b1:db:06:a1:1d:a7:d9:7d:2f:f6:04:58:
fb:af:5b:45:a9:4d:a5:5d:d5:e7:9b:11:88:f0:b3:
b4:41:09:64:c3:31:e7:89:ae:3d:ac:26:08:85:17:
26:eb:c1:64:45:50:37:82:95:e2:2d:86:db:73:0d:
14:c9:60:95:23:12:51:04:d8:0c:eb:76:02:e3:2f:
30:d6:7d:c1:e2:15:c2:a0:f1:11:66:6c:7d:49:95:
55:0a:e8:a6:bf:2e:56:ec:49:46:ef:a3:75:4b:4c:
2e:7f:82:e5:57:43:65:40:ca:9a:f8:50:58:f8:9a:
d6:65:04:ac:37:41:fc:86:9c:1c:5e:68:e2:df:f7:
46:d0:12:58:45:dd:2c:b9:a1:ea:c3:d6:ee:18:28:
39:8a:c6:4c:55:36:a5:c1:e7:5b:16:9f:94:70:f6:
95:d7:b4:59:23:0d:f8:cd:fa:7d:e3:e0:8f:09:3d:
14:3a:8d:a3:9b:6d:23:0c:14:b7:cd:44:df:3d:49:
b5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:D9:B6:E5:16:93:E6:3B:1C:AE:09:AB:30:DE:A6:68:EE:23:D9
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:30:50:44:5e:e2:29:6b:6c:91:84:0c:e1:ad:ec:7f:43:5b:
85:76:f4:dc:1d:86:84:87:d4:39:c4:4a:33:33:2b:bb:b6:2c:
18:c3:26:74:a6:1e:a3:96:c0:06:b0:5d:d7:81:23:d1:26:09:
45:12:25:60:1d:60:d8:1d:a2:da:ae:5c:06:ac:e0:52:39:5d:
d6:96:82:66:f1:bb:48:ad:40:4f:53:e1:26:a3:df:8d:32:12:
0c:3d:12:fe:3f:04:56:2e:ba:67:d5:2a:31:2a:c9:b7:e7:94:
96:85:62:ce:f7:f0:1d:cc:29:ff:8b:33:b0:74:e9:79:1f:6d:
4c:96:9e:57:ec:d4:c6:74:4a:17:56:73:19:4a:09:9e:5f:eb:
6c:a3:bd:c7:a6:d5:f1:bc:83:e3:54:b8:86:75:2f:24:00:8f:
35:35:8f:1b:dd:d9:db:95:5a:75:28:4d:1a:6c:27:5e:46:27:
7f:f0:2a:83:39:4a:d4:a7:ba:59:8b:2b:25:0e:ce:fa:42:04:
80:ef:3a:18:48:94:86:62:87:9d:7e:4c:43:7e:88:bd:b5:db:
e4:c0:88:40:40:37:e2:24:7d:55:f3:c5:ca:51:cd:74:ea:1a:
73:ef:85:92:b9:76:9a:45:0e:f9:68:54:b3:e9:71:eb:02:2b:
d4:3c:2f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:48 2026 by rpki-client