Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: sFo5M8jlfaChgNkpJ3cH/ECqar46Jwwr3TekvOUFi58=
Subject key identifier: 53:53:B3:5F:2C:CE:16:43:7A:C6:7E:0B:DB:08:EB:A5:F1:DD:4E:A6
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 01A11FE5425A8E53AC19652ECCCA8A575B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1AA0
Signing time: Fri 09 Oct 2026 09:01:20 +0000
Manifest this update: Fri 09 Oct 2026 09:01:20 +0000
Manifest next update: Sat 10 Oct 2026 09:01:20 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: OZqzLCxS2Nk/W9ooD2o82ewI129WfMzko6oiQO2ThLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:e5:42:5a:8e:53:ac:19:65:2e:cc:ca:8a:57:5b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Oct 9 09:01:20 2026 GMT
Not After : Oct 10 09:01:20 2026 GMT
Subject: CN=5353b35f2cce16437ac67e0bdb08eba5f1dd4ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:93:39:0c:45:a7:9f:c8:e0:39:c3:c7:32:
b8:66:fa:ef:50:65:30:c6:d7:66:51:5f:e5:af:7d:
8d:03:34:b3:8e:3c:90:f3:ee:bf:a8:19:d6:01:c8:
e6:e6:31:78:ff:19:2e:3f:a4:5f:79:e4:ed:6a:7b:
6a:f4:83:3b:9c:31:c4:16:39:99:ab:95:26:e7:77:
cf:e3:59:84:cf:99:bf:85:09:79:44:6b:76:cc:0e:
c3:29:15:dc:c9:51:61:c2:bf:e5:ff:6b:e3:55:95:
fb:97:a8:59:c7:fc:a7:c1:0f:a7:a2:97:36:d8:47:
7d:ec:fe:ae:24:91:4f:0c:c3:d0:3e:9f:89:2d:16:
a3:35:23:9a:fb:b0:aa:46:88:30:38:cb:f3:e5:03:
e4:96:56:98:be:8f:a1:95:cb:e8:fa:a8:ed:16:87:
6d:a2:38:d2:83:d2:44:2a:04:4d:90:72:e5:50:34:
36:b3:a6:54:43:7d:a8:c0:4c:8e:eb:18:57:f4:99:
26:4d:d5:56:fb:a2:93:e1:72:5e:ea:5a:af:27:41:
4c:ab:66:07:ce:81:d9:ff:e8:7d:74:4d:90:26:16:
61:2d:88:26:9a:b5:10:6f:2b:54:e0:c0:e1:f9:92:
1b:5d:7b:43:4e:92:01:dc:6f:31:40:1f:b5:e6:93:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:B3:5F:2C:CE:16:43:7A:C6:7E:0B:DB:08:EB:A5:F1:DD:4E:A6
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:1a:c9:3e:e2:19:b2:8b:79:ca:ee:6b:d7:ae:47:d4:1c:
ce:92:1c:b3:68:9b:9e:76:6f:7c:4c:78:d9:c4:f1:53:c9:0f:
e3:c8:bc:2d:3b:86:7f:93:35:4c:4b:71:ea:2e:be:f7:38:91:
fd:03:fd:dd:42:a1:b9:ab:a0:cf:56:3a:f6:6a:2b:83:11:fa:
c3:e2:4b:50:4f:60:a9:df:fb:d2:d5:65:77:9f:46:38:0c:3e:
3f:1d:d5:48:cc:52:21:27:4b:c6:5b:7d:74:d4:f4:56:fa:1d:
c2:09:f5:c2:13:39:e9:ec:62:9e:b6:cb:b2:21:68:df:a8:7a:
88:fb:62:c2:04:a2:e1:f1:89:f8:f1:1e:5b:5e:a7:e7:60:b0:
25:b7:da:8c:24:d4:ad:72:6d:4c:53:03:ae:38:6e:5b:04:37:
a5:e7:93:1d:b9:ae:26:68:db:e9:bb:90:72:67:32:72:25:28:
d4:a1:ca:0e:81:74:6d:d6:c8:e9:50:47:ad:69:52:38:46:fa:
d1:43:dc:6c:0c:62:87:42:3b:66:63:bd:b4:1d:33:1d:51:86:
29:7a:a4:33:0b:07:4f:c4:0b:45:52:fc:9a:4b:33:15:ff:b8:
f4:d6:69:f4:20:fe:c4:b3:5c:bc:cb:89:af:8f:cb:1e:cd:c9:
2c:c6:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 19:57:49 2026 by rpki-client