Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: HhA/zqbYt4b776EzXQ6ckP0dwDcBd/4QGY+LDeB4cnM=
Subject key identifier: 76:4E:E4:40:B4:00:E9:AF:5C:36:0F:D8:CF:0E:87:52:20:4A:6C:0A
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 019E205AB5EA3DE9BAB7907E89EAE1E3A0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0F3A
Signing time: Wed 13 May 2026 08:01:16 +0000
Manifest this update: Wed 13 May 2026 08:01:16 +0000
Manifest next update: Thu 14 May 2026 08:01:16 +0000
Files and hashes: 1: Oyzshlci-9jPVV78Pg3C9EqgWpQ.roa (hash: bjeZr+jgrrjOajuuWHyD7Sxiyz43CZIWH0Yks80/PvM=)
2: ZGp0FDP8qvB8cgr-1S3_xdm1jys.roa (hash: 9rCAt6z+0Tts+8L8PuhpJuck/ju+E8/tnJZUEMT7+6Y=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: XA9cHSVbl5IbkepJLmmodbV4FOBTJ4+GZY0uYiHgCT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:b5:ea:3d:e9:ba:b7:90:7e:89:ea:e1:e3:a0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: May 13 08:01:16 2026 GMT
Not After : May 14 08:01:16 2026 GMT
Subject: CN=764ee440b400e9af5c360fd8cf0e8752204a6c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:34:fc:58:1d:25:48:71:24:c1:37:59:e3:
1f:37:86:20:1a:2a:ad:9a:1b:8d:01:a8:58:24:d1:
ea:63:68:2b:cc:62:72:0b:23:44:94:b3:1f:5a:b7:
ea:37:33:94:65:b9:80:d7:e7:41:03:b9:c0:68:59:
5d:41:1d:00:3b:fa:7c:aa:0e:3d:87:fd:6b:fe:eb:
af:61:01:6a:28:1d:65:9d:9e:eb:51:bf:19:1c:bc:
0c:9a:63:e8:6d:c5:d6:6e:dd:ab:13:a0:8e:39:70:
ca:25:4e:93:91:e1:f0:8d:11:7c:cf:42:6e:41:f6:
42:bd:e8:ac:d4:f5:15:d7:ed:a5:34:68:38:1d:b2:
9b:e3:f3:b3:52:ff:0e:a0:30:62:1a:9c:ad:dd:be:
10:6a:01:f2:76:2f:a3:c8:e7:31:c0:71:d1:2e:9f:
ba:e0:e7:a8:e9:cb:f2:51:17:f4:6a:ef:00:ed:b0:
5c:34:74:68:26:a9:d4:2d:33:5d:93:b6:01:9b:71:
e9:41:b9:b9:09:58:43:81:de:62:c1:d9:e2:bd:50:
49:41:b6:2f:8a:d8:09:3d:26:73:00:9d:3d:d5:0c:
17:39:1d:01:8c:93:d3:64:01:f7:ec:b3:29:35:7f:
cd:87:fa:27:c6:02:45:63:b7:ef:a5:9d:c9:d3:51:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4E:E4:40:B4:00:E9:AF:5C:36:0F:D8:CF:0E:87:52:20:4A:6C:0A
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:52:9f:cc:52:81:02:74:d9:e4:70:2f:a5:ac:1b:dd:24:82:
6e:59:2a:44:e9:ce:a8:a4:75:1b:83:44:d5:26:35:ca:29:75:
8b:12:9b:98:5b:8c:f8:ba:8a:d1:e0:c1:8b:8e:65:13:55:c8:
a2:81:b7:77:6a:b8:45:b7:03:4c:4d:1a:49:50:d7:6b:36:d6:
b3:4e:bf:01:b5:a3:7d:41:ce:95:6e:dc:a3:ee:95:d4:3a:38:
1e:df:a0:5a:7d:86:56:68:85:f4:cf:7b:e3:c5:fc:a0:60:82:
73:23:b6:e2:ff:03:03:63:21:40:b1:b7:39:4b:19:4d:39:dc:
db:57:d4:b4:9a:da:fc:7f:ed:6e:40:fc:55:cd:ad:13:01:19:
8d:4f:70:b5:3a:d6:03:95:9e:c6:c1:09:2c:03:46:1a:59:87:
8a:09:71:c6:8e:e2:86:16:d1:50:70:0a:73:d7:41:6b:43:49:
26:fc:d6:5c:d8:ed:ac:2c:f5:a1:c0:4b:3c:b3:40:6d:ea:f6:
bc:0c:af:29:63:84:2a:b0:35:20:3f:8f:65:b3:3f:04:0b:ae:
19:57:7c:f7:79:d0:6c:7c:39:db:07:4d:8e:a8:c1:94:4c:4b:
5f:a0:3b:f1:ad:8a:e3:71:62:dd:64:b0:b9:ac:bd:1e:30:e0:
a8:e4:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:20 2026 by rpki-client