Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: FLFFtJkmKXUVliIvJp6yRbf1hR1PAppp0UWG7VK6/2w=
Subject key identifier: BD:B8:0E:A4:AC:23:28:AB:1B:8A:44:D1:64:66:9E:71:6C:5B:7E:04
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 019D382DE520FBA0B375FC666E4104F37C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: Yrcgx8X9stHwgpCHDOsVbc1hluI.roa (hash: ECVF6igxy3y3LufgBVxh6FK9Aw/oP5gnb7fO7cFVtSs=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: qz4lIuFW4okEvLiHeeMTto4ELdKq97lIuEG41xKJdc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e5:20:fb:a0:b3:75:fc:66:6e:41:04:f3:7c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=bdb80ea4ac2328ab1b8a44d164669e716c5b7e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:a7:96:48:6b:cb:f8:d6:70:e7:e1:38:f6:
66:d2:e1:83:45:e2:b5:6f:a2:95:ba:ab:3e:1b:34:
89:41:23:42:cc:d9:3a:bc:dc:0a:31:d1:1a:e7:a0:
7f:bd:8a:aa:69:d5:59:e2:db:28:3c:2d:8c:38:92:
07:6e:9b:81:53:57:a4:ae:54:09:37:f2:98:75:c6:
6d:55:8e:09:a7:c5:2e:91:75:ab:57:8b:f1:62:4e:
dd:0c:8e:7a:d7:9b:6c:b5:bb:16:7b:1f:49:19:f7:
f9:c7:7a:08:66:40:c9:f5:bc:0e:c2:d0:39:8c:a3:
2b:98:42:77:a0:84:37:dc:e2:51:97:32:9b:ab:38:
bb:58:1c:a5:0e:81:b1:be:50:12:fc:ae:f1:cd:3d:
64:da:c7:0a:fd:6b:8c:01:80:35:73:3e:77:93:04:
6e:44:43:46:9f:e5:77:77:01:5c:ff:b2:89:aa:ee:
63:06:da:25:f6:04:8f:67:13:00:11:3b:94:65:1d:
30:b8:bb:6c:ab:84:82:55:ac:21:9c:a4:12:e4:d3:
4f:af:93:fd:30:bb:09:ad:08:f0:03:77:db:95:59:
a2:23:86:3e:59:ad:20:98:86:cf:a4:f6:02:36:af:
be:ab:02:40:80:40:f0:1c:b5:26:ab:50:c5:4c:7d:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B8:0E:A4:AC:23:28:AB:1B:8A:44:D1:64:66:9E:71:6C:5B:7E:04
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7b:35:01:2a:c1:a1:4f:56:45:58:2f:be:99:ed:4f:c5:9d:
d6:15:be:c6:37:e6:e5:56:63:6b:d9:12:2d:eb:61:21:19:71:
11:33:23:0b:03:99:6e:c9:22:09:2e:47:05:94:c7:45:21:a2:
70:86:7b:61:f8:20:13:9f:6a:83:ca:00:cc:88:f9:a5:2a:bf:
50:43:f6:ca:7c:2f:52:5f:ca:ce:e3:57:fc:86:e1:3b:c4:d8:
30:b8:f8:eb:01:8e:ad:5e:22:96:c0:a4:a7:f4:a3:fc:b4:bc:
3a:38:47:ea:51:58:2c:02:d1:8a:ae:47:0a:de:01:eb:20:89:
c1:d1:ac:24:7e:f3:c7:f4:d1:3a:19:94:0b:dc:c6:6e:be:e3:
00:5a:de:a9:28:3b:9c:49:b3:5d:8f:27:44:6e:8d:28:ad:5f:
bd:2a:23:6b:9c:94:d2:0d:aa:6b:5a:16:33:fb:bf:4b:b5:5f:
d8:d9:ef:18:d1:3a:63:49:36:42:52:84:e8:b7:3a:3e:6c:6c:
1f:34:17:56:fc:02:64:d8:b5:60:e1:a5:56:72:ba:70:7d:cb:
b6:1f:44:7a:a5:0b:c1:54:fe:a3:e8:bd:98:cb:42:88:c1:0d:
7a:e3:3f:0a:19:79:e4:24:5a:43:b7:cf:ba:f7:0d:9b:9f:dc:
32:43:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:44 2026 by rpki-client