Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier: yPhHrk9lW/vPVSolkorc+FkgBtpcatXOY8CfWCXg2xA=
Subject key identifier: 62:2C:AC:53:1D:C9:66:03:B2:97:5C:3E:19:E6:E4:96:94:21:D1:37
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial: 019D3A1C508126D078D3079C9CD85848C96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number: 0C14
Signing time: Sun 29 Mar 2026 15:00:27 +0000
Manifest this update: Sun 29 Mar 2026 15:00:27 +0000
Manifest next update: Mon 30 Mar 2026 15:00:27 +0000
Files and hashes: 1: gefx2fr_MDXtvtuWxylmxEbY_9I.roa (hash: DoV6a6Zcce+W+t7QXHihpVY0/SyCf2V+1wNo94geZZ0=)
2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: bvWJn9L5Fo0QAdxopyTP5+0dJJkMegH+WyOdb1+dOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:50:81:26:d0:78:d3:07:9c:9c:d8:58:48:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Validity
Not Before: Mar 29 15:00:27 2026 GMT
Not After : Mar 30 15:00:27 2026 GMT
Subject: CN=622cac531dc96603b2975c3e19e6e4969421d137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:74:2e:f2:20:2f:e2:da:03:2b:96:47:77:
98:3b:5d:40:89:25:cf:39:b7:0e:da:6e:1f:61:44:
92:21:fd:b8:bd:51:af:a5:04:d9:e6:88:fb:6d:55:
8b:32:a5:e7:11:6a:46:e4:90:49:c3:4d:fa:c5:c4:
9a:be:bb:c6:47:24:55:b1:a3:ae:c6:38:f0:04:67:
8d:64:0e:bf:f9:75:e7:3e:4a:c7:80:a5:d8:28:a2:
08:39:02:37:56:0a:70:c0:0b:e1:b5:b6:a5:52:2f:
0b:49:57:86:f2:79:1a:09:8b:d1:ee:99:10:44:ed:
36:5d:9e:01:7b:79:d0:0d:54:34:56:d9:a7:03:fa:
32:02:d5:13:69:5c:73:b5:e7:6a:86:1c:3e:7e:0a:
c3:5b:d0:b9:e1:a3:a9:43:e5:72:9c:e3:03:81:45:
85:f4:1e:19:b8:bf:3d:18:90:65:aa:7a:24:03:54:
fc:5b:75:9d:0e:36:b3:0e:6b:01:97:fe:26:7c:ae:
c4:84:f4:b7:f3:a3:db:75:3d:87:a3:89:c1:73:30:
e4:8c:96:14:8d:bc:0d:25:c6:1d:e2:07:13:1a:65:
7c:d7:cf:a3:4e:e8:df:2f:20:59:54:ab:af:00:32:
12:9f:9e:82:d4:bd:26:7f:ff:58:8c:73:a9:63:07:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:AC:53:1D:C9:66:03:B2:97:5C:3E:19:E6:E4:96:94:21:D1:37
X509v3 Authority Key Identifier:
keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:eb:10:ac:15:74:f5:e8:36:a1:7d:44:df:e4:27:e8:d0:b2:
32:96:d9:03:38:1a:d0:df:a6:39:3e:d0:78:9a:7c:e7:af:28:
9a:e0:aa:df:c3:21:b9:aa:3a:fb:89:88:97:13:2b:16:b8:9b:
0a:7f:a3:ae:5d:53:df:2d:7f:05:15:96:5d:b2:8d:8f:b2:69:
c0:0b:2d:99:1d:e7:06:5e:ba:ab:17:65:a5:20:d0:51:ed:45:
70:a6:89:2e:c4:14:3c:1e:c9:47:0a:ea:6f:80:86:48:75:06:
d8:f6:71:5e:49:f0:dd:9a:0c:e3:10:6a:da:6d:3f:73:6a:4b:
3c:5e:dd:08:4f:c9:b7:49:4d:d9:a3:3c:f2:f7:05:b3:38:50:
5c:ed:56:7d:1c:d5:f6:81:21:4e:81:6f:e1:1c:2b:df:80:ee:
4a:c0:ad:52:c5:68:7b:39:60:4d:9f:72:a7:ba:fd:ed:77:da:
1c:9d:df:8f:74:4d:94:95:f7:4d:f3:60:6f:6c:18:05:8a:b1:
f4:27:63:55:7b:06:f0:e9:c3:f6:f7:2a:ac:06:72:03:04:80:
1d:01:a5:03:03:63:65:68:12:3a:2d:e0:f1:7f:5b:42:f4:ba:
b1:bc:f9:12:98:39:d1:cf:1d:f2:6d:4c:bc:32:a9:c7:1a:ca:
c8:2c:5a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:56 2026 by rpki-client