Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: wt6VgpP9bcyA6fZEB6zxZ+0OwobhpBfSvDAxzWp4PL4=
Subject key identifier: A8:F8:BA:60:38:41:64:BB:C6:C5:47:BE:C5:F0:92:55:56:88:33:E1
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 019E1CB4691D56DBF95BCABC0CC52E33ADB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 02D3
Signing time: Tue 12 May 2026 15:00:45 +0000
Manifest this update: Tue 12 May 2026 15:00:45 +0000
Manifest next update: Wed 13 May 2026 15:00:45 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: ofaVXcrMnUlftdZ8RMEdvwovpyYmtYf0SXcnEEQ1szA=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:69:1d:56:db:f9:5b:ca:bc:0c:c5:2e:33:ad:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: May 12 15:00:45 2026 GMT
Not After : May 13 15:00:45 2026 GMT
Subject: CN=a8f8ba60384164bbc6c547bec5f09255568833e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:66:5d:95:52:9f:f8:21:68:39:04:2d:53:
ab:17:96:4b:1b:2e:81:28:b7:94:e2:74:a3:d3:56:
73:69:cc:95:4e:9b:c9:b6:b5:79:17:29:1c:88:16:
a2:1e:e7:45:67:78:fb:55:42:98:6b:82:0f:8e:c0:
a2:5c:93:78:30:44:96:06:a8:c3:9d:4a:1a:f6:94:
7d:83:ea:86:fe:3a:e0:3a:92:f3:4b:3a:61:79:b2:
ce:3a:92:0e:34:a1:ab:af:11:5b:4f:0a:3a:ae:78:
22:19:14:00:37:1d:89:b3:9c:e5:36:ae:59:c3:06:
bb:a1:fb:51:18:0f:33:50:b5:bc:69:62:67:a6:c9:
bc:a9:28:bb:26:07:b5:1c:af:c1:be:e7:d7:e4:7a:
75:83:ea:4e:0d:87:4a:73:34:06:fe:36:b8:bc:ee:
b3:58:6f:e8:ea:5c:34:79:d2:01:23:3a:2b:4b:03:
2c:32:95:dd:fd:a4:d2:bb:29:44:bf:4d:9f:e2:65:
42:5b:99:02:90:a8:3a:88:c2:93:eb:93:a1:16:ed:
1e:ce:ac:36:92:e7:1f:53:7a:b2:0b:e5:61:3f:83:
3d:9b:00:4c:3b:31:16:e5:99:9d:89:b9:7d:98:2a:
85:63:2c:d5:f7:57:36:e5:d7:0e:26:c3:9f:13:4a:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F8:BA:60:38:41:64:BB:C6:C5:47:BE:C5:F0:92:55:56:88:33:E1
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ed:6e:e1:8a:e7:f3:51:f7:71:65:f1:7a:7f:ab:1d:99:73:
46:ba:03:ed:a2:06:1c:34:a2:fd:41:8f:9b:59:cf:09:df:ff:
96:ff:3e:de:db:57:53:2f:57:db:e0:65:67:be:de:87:49:fc:
7c:09:7b:ba:3f:e5:77:ff:cd:f1:53:4b:5e:a6:b0:a4:4b:0f:
f2:0f:ab:01:00:0c:af:0b:ad:6c:b2:24:1c:b7:37:b9:99:e3:
da:de:61:31:07:bc:cf:3a:34:05:35:9b:b4:2e:e8:e4:06:5a:
0e:fb:8f:d3:5e:f9:dc:39:11:45:ce:ed:f1:59:e7:c4:05:b1:
aa:91:78:2b:b4:3c:5f:82:ec:8b:6f:64:dd:ee:5c:59:b4:ab:
43:47:c1:f5:0b:0a:24:fb:14:f1:84:7f:a7:03:25:86:5b:07:
07:35:74:4c:a2:37:4b:ee:2c:aa:c4:0e:f8:bf:4a:b8:94:5e:
4c:ae:4d:ab:5a:5a:d9:2d:68:c6:f9:f3:2f:74:53:6f:8b:87:
42:cc:cb:8c:47:d1:de:9f:f6:95:f8:4c:5c:fe:06:35:e6:44:
60:be:d9:01:96:85:d1:a4:7d:2c:4f:ad:13:30:53:3e:96:e0:
e1:7f:85:f1:c5:f8:72:ae:d1:77:14:f3:8e:13:45:86:b3:7b:
06:f2:a5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:29 2026 by rpki-client