Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: UHYBpOxAIMtu3FZ4IxuERnGga6x2wxQBon7Q8PMkS00=
Subject key identifier: 54:BE:64:EE:FF:7C:8B:C8:31:AE:A3:A6:5C:04:3A:D2:3F:66:39:C1
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019F10AE420A28A3D43C39941EAD1CB96700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 198F
Signing time: Mon 29 Jun 2026 00:01:23 +0000
Manifest this update: Mon 29 Jun 2026 00:01:23 +0000
Manifest next update: Tue 30 Jun 2026 00:01:23 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: muvmBXpyu2s6/yr6kcSLgQEhblcE475ww8w/DWL3jCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ae:42:0a:28:a3:d4:3c:39:94:1e:ad:1c:b9:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jun 29 00:01:23 2026 GMT
Not After : Jun 30 00:01:23 2026 GMT
Subject: CN=54be64eeff7c8bc831aea3a65c043ad23f6639c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:33:a6:8a:09:9f:c7:3e:6d:6a:f4:24:1c:
d5:28:da:31:69:9e:aa:87:9e:5f:58:45:88:2e:f4:
67:10:e6:57:4a:0b:a9:03:93:56:05:6b:91:fb:19:
5f:f9:7d:4e:63:13:8f:9e:36:3a:3f:4d:b5:95:e3:
d7:52:89:71:78:87:ec:1a:12:07:5e:9f:46:32:1f:
df:cf:d4:1b:d9:b3:30:bf:fa:43:0e:90:4d:41:33:
c5:ef:08:d6:e1:9f:0c:c6:ee:96:57:28:ba:e5:f4:
6c:88:05:76:c5:3c:82:0a:d4:a5:80:ec:e9:a5:c1:
9a:4f:a0:16:eb:46:04:cd:68:1c:ef:ca:aa:c6:21:
0f:8c:2c:fe:4f:5f:54:cc:05:6a:7f:35:b8:57:36:
16:ec:d7:98:ba:96:4d:d7:24:12:c5:a0:25:1f:9a:
76:dd:11:62:b2:24:08:37:58:5b:61:f7:30:53:e9:
cd:e7:18:5a:4a:b7:68:d4:40:44:7e:d0:1a:83:17:
91:8c:f2:09:2b:be:c3:ad:58:1e:0b:7d:4a:02:cc:
3d:5d:12:5d:74:b9:64:ff:2f:34:1d:90:1b:b0:6f:
0e:2e:7c:7e:67:b8:9d:8b:65:86:7c:5b:ba:dd:58:
58:54:fd:48:89:79:91:54:ae:10:f4:85:06:47:47:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:64:EE:FF:7C:8B:C8:31:AE:A3:A6:5C:04:3A:D2:3F:66:39:C1
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0b:89:7c:52:e5:62:f6:54:ac:c7:49:76:55:7d:91:f5:f7:
53:7d:0d:76:6d:e0:50:07:86:80:cc:9c:6d:d9:9f:12:90:cc:
47:48:8f:d9:0e:de:c7:62:e5:b6:f1:7f:e0:06:e7:6a:76:e5:
83:01:e0:57:01:a9:16:83:22:6e:91:ce:e6:71:76:60:31:f9:
1d:d5:60:aa:1c:6e:2a:15:4b:52:e3:b3:07:9a:45:19:57:a0:
bd:30:c3:f9:6f:44:a1:52:6e:47:a2:29:eb:30:ed:7d:af:9c:
ba:c5:d7:26:9a:db:28:b2:65:31:69:c8:a2:3a:2c:31:ee:9b:
fd:1d:f7:56:3b:08:1b:f7:b8:bf:a7:c3:d3:23:75:60:52:7a:
ab:e7:3b:56:97:90:ca:84:38:93:a3:2a:c2:88:52:88:f7:bf:
7d:44:10:98:67:94:88:18:b0:4f:23:14:d8:6d:15:a2:ac:3f:
b4:a4:f8:8b:50:5f:e8:f4:32:99:f7:a8:b2:0a:7d:97:48:00:
bb:dc:72:2e:92:c7:f1:be:62:0d:13:22:33:8c:a7:71:e3:7a:
46:5e:df:9e:d3:c3:e1:7d:aa:33:27:10:63:ba:a1:89:a5:d5:
16:fd:7e:7c:6e:f7:39:90:a3:be:1d:d5:56:ff:c6:3d:d8:6e:
22:4d:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 08:01:26 2026 by rpki-client