Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: nYCrCjkzcWAEyY+mo0ly0xtOOwd706uMUeJ7UjCAMvg=
Subject key identifier: E4:CC:D0:C6:9E:39:4F:D5:C0:AA:D0:8D:87:52:1A:A4:10:C7:16:99
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 019D38D334F7FDE7D0B9C48393D6308F5376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 075C
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: CaTSYTlklPzPsh9aXKnEhvNOdQk.roa (hash: Yu5TNxvfV86Q2+HBX8uXoTCoY5GYvgt5wYG6MqwG8M0=)
2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: ilPCypKrZpI8qBFXIepJXpMorR1sv+qfl8jXiPmh4ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:34:f7:fd:e7:d0:b9:c4:83:93:d6:30:8f:53:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=e4ccd0c69e394fd5c0aad08d87521aa410c71699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:c9:fc:93:fe:ec:63:3b:a1:b1:da:99:44:
f7:d3:e0:f3:c0:62:de:a8:67:1c:e7:a3:73:3e:a5:
cb:50:2c:ce:b8:86:cc:02:35:3d:7c:a9:9b:54:f4:
bf:33:08:d7:f7:9c:42:a7:5f:a8:4b:02:05:95:33:
aa:cd:d2:a1:1b:6d:3b:c6:82:8c:70:e2:18:d2:72:
91:4c:cf:d8:47:5e:19:96:0c:3d:85:11:c7:81:21:
de:2d:54:83:58:6a:5c:9a:a9:fe:a9:74:84:c3:db:
d2:dd:00:d6:56:5d:5b:2e:de:7c:06:d8:32:0c:a1:
d3:17:bb:0e:14:e6:8f:06:11:ee:f2:a2:26:4d:cc:
ef:cc:ed:e9:ca:3e:c5:4c:37:cc:01:58:22:bf:6c:
d0:53:ec:ea:dd:25:74:23:22:dd:af:18:3e:ab:11:
56:d1:e1:d9:7d:6d:ec:71:f6:87:91:f4:4e:bd:71:
9b:f5:0e:19:82:e5:00:82:e4:9b:bc:e9:10:d8:f2:
b2:c4:68:88:01:1e:9d:23:ce:cc:d9:0d:e3:f1:a5:
32:32:ab:15:17:c6:67:6c:61:e9:bb:82:94:ab:40:
51:32:55:c6:70:5d:8b:89:0e:3d:82:99:d2:4d:a4:
1c:59:2f:a5:81:30:aa:24:d9:bd:17:4c:db:19:ff:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:D0:C6:9E:39:4F:D5:C0:AA:D0:8D:87:52:1A:A4:10:C7:16:99
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:35:95:65:fa:f7:ca:ba:a4:bc:2e:d7:25:17:6c:67:71:e1:
8f:9d:81:69:f4:b4:34:cb:10:13:82:01:16:79:0e:67:31:fa:
8e:cb:d4:dd:58:4b:ea:9a:ca:d7:75:31:7f:2a:ac:7a:26:b0:
37:ac:d0:17:00:3d:27:7f:eb:94:e2:e7:ee:1a:64:bb:a3:a8:
29:b5:e8:e4:7d:da:0e:71:7b:c4:aa:68:3d:c7:8c:cc:61:38:
b4:17:d0:fd:2e:53:c3:dc:81:25:f8:27:53:20:4c:8e:ab:c1:
2c:6f:62:9e:50:76:60:ba:4f:bd:b4:aa:ed:c1:7c:b9:29:23:
23:e1:4b:96:bb:c2:95:0e:47:71:95:d6:5f:08:85:fa:68:1a:
99:ed:7f:94:14:cd:c6:71:fb:89:3b:c0:21:d0:33:d9:56:21:
f0:1a:75:91:ca:2b:b6:12:d4:20:4d:a3:46:62:1b:80:a7:38:
c6:64:89:c5:be:99:b2:75:b4:79:cf:10:7a:9f:d3:d6:1c:74:
0d:53:d6:5e:0c:9b:bd:f2:39:11:a3:d2:2e:5e:55:b6:78:45:
75:14:38:13:6b:59:6c:65:45:4d:dc:2b:9b:5f:3c:f0:83:09:
bb:0f:e3:83:99:e4:30:00:84:f0:b9:e9:c7:53:2f:59:56:ee:
8b:12:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:13 2026 by rpki-client