Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: iSZXNAulvWd0qClzcA9n7xb5hiakRke2L4WEFQUOyGI=
Subject key identifier: 7D:54:F8:11:17:10:38:2F:93:ED:B9:0D:1C:E4:C0:43:D4:41:EE:D8
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019D2996F077C0D4FF768A50E8495A49984F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 16BD
Signing time: Thu 26 Mar 2026 10:00:50 +0000
Manifest this update: Thu 26 Mar 2026 10:00:50 +0000
Manifest next update: Fri 27 Mar 2026 10:00:50 +0000
Files and hashes: 1: H2T8PA1785l6gX-iVp9IuPaA4Nc.roa (hash: 6faWeYIv5Ai9qI/fX55pW1xZn22WZewYCnXhS25+v6I=)
2: Xz4dqhqCzoZvF10IK-TkgPiAc5Q.roa (hash: ZFUgfRsBRCs1X5BDvrArX90/CdgfBgfrW7Rw9sq2N84=)
3: lyOH-P2_hH5Ugem7r8kpnkt99SI.roa (hash: GiPFjQfoJkQaMedHXbS4M3+BR9UAmP0J6PtJlsbWkGg=)
4: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: xCKwIw2tA7h+NHxfW+3h/9ik8R0bX7xIuPtjT4hFUh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f0:77:c0:d4:ff:76:8a:50:e8:49:5a:49:98:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Mar 26 10:00:50 2026 GMT
Not After : Mar 27 10:00:50 2026 GMT
Subject: CN=7d54f8111710382f93edb90d1ce4c043d441eed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:60:7d:15:ab:53:3b:54:c7:47:9f:5f:b3:
03:ec:2d:fe:8d:1f:0e:9a:ec:df:6c:1f:65:0e:de:
e5:94:7d:89:48:37:a4:34:98:dc:a3:25:d5:c2:23:
34:c0:83:be:6e:e4:3d:98:04:8b:9f:4b:99:82:41:
63:33:23:25:b4:3b:5e:e4:58:5f:f4:2d:bf:32:c8:
4e:bb:97:c2:f7:3e:26:64:8b:e6:4a:8f:b8:e7:e2:
5b:80:42:1f:d2:17:c7:4c:b6:c4:46:05:e9:61:f8:
92:a1:d4:37:fa:a4:91:dd:ff:bc:2b:54:cf:dd:0b:
1c:08:16:23:7f:07:26:b3:47:88:ce:70:34:8e:84:
62:ae:b5:a1:0f:f0:0a:54:ce:93:55:2e:b9:8d:9b:
7d:e6:4b:83:1d:e9:d4:6c:10:15:98:8e:9a:cf:29:
ec:f2:94:84:c6:eb:df:37:90:2d:e5:23:bb:2e:c7:
34:02:53:c2:85:28:05:21:75:2b:2e:25:e0:bc:82:
b4:e3:6f:f0:9e:f0:8e:20:65:4d:32:3c:ab:7f:a5:
54:f4:04:5b:5c:0a:4b:00:1c:e1:c6:91:09:48:b2:
85:5c:c9:a1:f4:66:43:9a:4e:64:2a:63:00:70:5b:
62:59:c6:99:1d:15:77:b6:24:15:02:e3:44:86:9e:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:54:F8:11:17:10:38:2F:93:ED:B9:0D:1C:E4:C0:43:D4:41:EE:D8
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:df:ca:ed:21:cf:6d:d3:2c:25:4e:b2:10:2e:23:45:b0:0a:
1a:81:68:d9:10:da:f6:45:74:3b:28:4a:ba:65:89:b8:8f:ca:
3b:18:a5:7d:e2:38:fd:49:b7:61:41:12:f0:0f:93:ad:01:6f:
af:c3:e3:d8:54:20:46:88:1d:67:e1:d5:e9:31:51:9e:e2:ed:
7f:75:94:c0:fc:1d:2c:7d:27:99:6c:b8:a7:8e:72:75:da:9f:
1c:f7:3d:bb:14:35:9c:db:f8:40:70:88:6f:be:59:ab:b5:4a:
27:7c:46:64:86:56:5c:23:2e:81:04:56:84:ae:c3:97:b8:c3:
ba:44:f8:e8:a9:a8:7c:b6:30:9e:aa:d0:ec:d6:ad:38:7a:d8:
2c:e1:72:35:0d:09:30:e7:93:f0:3c:f5:3e:a7:bb:89:8d:83:
23:eb:5f:06:b1:33:99:5a:2c:de:77:cb:27:ad:45:e1:2e:05:
c5:c5:9c:7b:3e:81:dd:03:a6:95:b9:9c:93:ea:5b:dd:87:aa:
52:20:1c:54:3f:0c:10:fa:82:69:83:c6:9f:d0:64:ca:1b:09:
50:b2:1b:32:3e:34:ad:72:3d:f7:05:2e:8e:f2:d3:35:ff:53:
d5:78:dc:12:b8:e0:c5:f6:fb:ea:4d:e7:72:c8:16:e7:20:1a:
da:ef:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:50 2026 by rpki-client