Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: JIut5R1J5rZFrVekolJeqUURiBgg5ZlSkFLebGkzFBg=
Subject key identifier: E8:91:C2:DC:17:77:70:BF:5C:BE:AD:A4:E8:D0:71:6F:60:11:37:6F
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 01A0D804A23047A143ADD14E172B186A9B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 18A5
Signing time: Fri 25 Sep 2026 10:02:57 +0000
Manifest this update: Fri 25 Sep 2026 10:02:57 +0000
Manifest next update: Sat 26 Sep 2026 10:02:57 +0000
Files and hashes: 1: H2T8PA1785l6gX-iVp9IuPaA4Nc.roa (hash: 6faWeYIv5Ai9qI/fX55pW1xZn22WZewYCnXhS25+v6I=)
2: Xz4dqhqCzoZvF10IK-TkgPiAc5Q.roa (hash: ZFUgfRsBRCs1X5BDvrArX90/CdgfBgfrW7Rw9sq2N84=)
3: lyOH-P2_hH5Ugem7r8kpnkt99SI.roa (hash: GiPFjQfoJkQaMedHXbS4M3+BR9UAmP0J6PtJlsbWkGg=)
4: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: qtiAZjXMqNyHiRbWA4oG4w8E3fviwQcJCKAVDJ+5qBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:a2:30:47:a1:43:ad:d1:4e:17:2b:18:6a:9b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Sep 25 10:02:57 2026 GMT
Not After : Sep 26 10:02:57 2026 GMT
Subject: CN=e891c2dc177770bf5cbeada4e8d0716f6011376f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:14:6e:93:83:69:8c:08:28:7c:a1:5e:09:
f9:7b:ac:aa:19:f7:eb:fd:4c:4e:ba:1b:6c:98:36:
a4:89:b9:34:ff:e4:fa:58:6c:c9:d3:1c:46:1d:d1:
ac:db:ee:c1:f7:1e:f6:d0:5e:59:36:d4:20:11:8b:
b2:c0:05:c2:10:33:e4:d3:bb:67:8c:36:95:19:38:
0d:2d:f4:7c:5e:c7:02:34:f9:2d:2d:74:28:b6:dc:
92:4c:45:f6:5b:f3:d4:8e:66:7e:91:d8:a4:39:d8:
08:c7:70:34:23:12:df:bd:19:a9:3a:98:f5:33:22:
55:95:f4:2c:0b:9e:4a:ef:b4:c6:15:5d:03:ac:be:
22:e1:83:4f:30:8a:46:7b:9a:a2:3a:bb:b3:47:16:
51:6f:1a:49:cb:fc:74:6e:57:1c:ff:73:54:00:16:
17:67:1c:81:69:49:c1:0a:7a:88:d3:ce:01:0e:fc:
45:d7:88:81:4c:9d:97:7b:50:c9:2c:43:28:19:6a:
1a:33:d9:e2:0c:55:68:c9:98:f6:0f:e0:1d:52:30:
e5:11:e6:79:27:01:46:68:3a:81:c0:26:23:6f:bc:
a9:26:03:94:e5:1a:e8:15:39:0f:dd:1d:36:d4:65:
7d:b3:8b:f6:eb:aa:3a:b3:ca:6f:7e:a3:1d:7d:00:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:C2:DC:17:77:70:BF:5C:BE:AD:A4:E8:D0:71:6F:60:11:37:6F
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e9:f3:f2:96:c4:94:2c:48:78:a6:c6:17:40:02:47:7a:cc:
88:b4:05:59:d9:05:3b:57:11:d4:50:36:f3:b2:9c:86:bd:20:
4e:d5:7c:69:4e:45:44:35:15:eb:07:ec:11:25:6b:23:e0:6f:
55:ad:66:df:ef:e9:46:c2:52:9e:bf:00:48:ff:15:b8:f9:ae:
79:39:b2:54:fb:a4:9e:ef:9b:9a:78:5b:07:fb:d0:d5:bb:44:
9e:bc:40:6c:aa:a9:d0:51:a2:2c:1f:0f:56:3b:8f:51:27:5f:
e5:f6:22:7c:d0:8b:f5:32:6a:9c:63:1f:7a:29:61:6f:63:d5:
54:1e:de:7b:84:31:08:97:d5:1f:7d:f0:11:d3:80:6a:6a:d9:
e6:72:c8:0c:23:af:a9:a4:d9:04:6e:93:33:d9:fb:ff:55:15:
3f:8c:dd:75:c2:37:89:3c:26:2f:fa:85:3f:af:5d:28:be:0f:
ba:15:3f:ed:11:9a:30:32:68:fd:f9:ea:e3:01:ff:ac:ab:f3:
85:9d:c5:d2:fe:9c:f6:75:04:18:71:ed:3d:02:a8:74:85:82:
d8:ae:43:58:ca:e9:ca:a1:b9:d2:0b:a4:b7:25:8a:5b:04:11:
3e:fa:38:1a:93:d7:71:42:1e:df:2c:4e:bd:b1:2e:2c:8d:67:
7e:f8:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:53 2026 by rpki-client