Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: Hgtggc9Yn6UI0NrQbGnW5Q+xXWvu0f2rSOroYKmf+BY=
Subject key identifier: C8:56:B9:36:65:7C:09:52:4B:27:63:08:1C:72:F4:2F:8B:67:C9:07
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 019D386645EB1FCB0EB856374CCC976D635E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: f4AZIRtQB5gDNGTVG0SqDa4vmXo.roa (hash: 9ufERm7dPXdZ8JI0YQRXJwdfyWGQYDyrJB99NlaPj8c=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: nybM8Ib5JWjP5QDSqYKpd2llH67dfETpwaLMZiGDzPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:45:eb:1f:cb:0e:b8:56:37:4c:cc:97:6d:63:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=c856b936657c09524b2763081c72f42f8b67c907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:b7:2c:f9:f9:24:3f:bf:39:71:89:76:30:
e5:da:04:a6:95:22:02:03:a4:a7:93:ad:7d:e4:dc:
56:56:f3:c3:61:8a:23:19:61:3f:0c:84:97:e3:a5:
73:c4:66:22:ef:c4:44:56:c1:46:8b:26:43:97:ba:
dc:72:1b:56:36:3e:4f:00:6e:63:95:6f:48:af:bd:
75:c0:64:d5:d8:55:96:d0:bc:4f:b2:95:d2:f6:3b:
21:42:38:d9:ed:8b:5f:61:ea:00:62:6a:91:23:e0:
03:e1:f9:12:51:e3:60:25:70:b1:7f:0b:38:62:4c:
28:89:c6:00:25:7e:2b:51:d6:23:e7:33:3b:74:3c:
8c:0f:09:b0:85:43:4c:bf:08:fe:38:3c:77:e4:58:
25:f2:08:84:39:6f:f4:8f:9e:d8:87:ad:4c:b8:43:
ba:c7:8d:05:e6:09:1a:b6:68:12:a6:40:93:85:d7:
af:56:82:ad:a0:b8:b2:e7:10:c2:b4:1e:bf:f1:68:
61:19:e0:f4:0c:d7:4a:db:51:a2:34:3d:68:96:f5:
13:6d:77:b1:6b:30:4d:97:6d:12:db:5f:35:1f:5c:
1e:39:f6:38:7f:af:8c:8b:e2:35:4a:c1:92:f8:21:
09:9c:3c:7e:57:c7:c3:f3:fc:bc:33:26:9d:ef:1c:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:56:B9:36:65:7C:09:52:4B:27:63:08:1C:72:F4:2F:8B:67:C9:07
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:49:92:a6:b3:23:d8:ba:3a:30:ee:c2:44:4a:78:70:47:82:
f4:96:8d:b6:99:00:05:ff:12:fb:86:a2:ca:a3:64:f0:08:38:
58:aa:bf:45:5f:ff:77:fd:99:f8:48:de:35:1d:dd:bb:fa:f9:
4a:cf:d4:f4:bd:85:ff:0f:0e:df:41:fd:d0:ae:35:2c:b5:76:
7c:f3:3d:bc:55:42:a4:df:de:c2:74:53:46:cd:53:12:f4:8c:
d2:50:0f:24:76:84:0f:37:cf:7b:0b:9b:d4:d2:75:63:d0:af:
c8:44:a0:97:05:b3:66:b5:c6:00:ad:84:ee:00:9f:d0:6d:b8:
dc:31:6e:f2:53:38:c5:97:81:39:5d:78:40:dc:d6:6e:a1:71:
a0:93:01:46:eb:94:ee:ce:4b:e6:4d:c3:4c:4c:f0:7b:1a:7b:
64:3c:f0:25:ec:69:98:59:79:62:dc:07:f3:38:fa:8a:37:e4:
f3:b0:1d:0e:0a:db:d5:3c:75:6c:ec:bf:00:7f:98:51:0d:31:
c9:07:57:07:d2:b5:b7:8c:e4:6e:37:e3:22:1d:97:e9:73:08:
1b:5b:7b:a5:83:08:b4:bc:b3:68:66:28:7e:d6:e0:13:e2:66:
ef:77:b0:91:b9:ce:b3:5e:e0:bf:51:01:52:cd:f4:70:b8:3e:
a2:34:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:11 2026 by rpki-client