Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: JvV+lUOflZ6EQ1STULdDpXptVvVKrgoKrW25TdWZhXY=
Subject key identifier: E0:92:3B:77:FD:85:F5:50:D5:47:34:3C:01:F9:47:D5:01:FE:7C:E1
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019FFC48A810F30FED0181AC579D4D5C5D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1A09
Signing time: Thu 13 Aug 2026 18:00:47 +0000
Manifest this update: Thu 13 Aug 2026 18:00:47 +0000
Manifest next update: Fri 14 Aug 2026 18:00:47 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: HbzUWRWn6j9rxdPuGSXMX1MoTEXyFyf83wnPE21iaEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:48:a8:10:f3:0f:ed:01:81:ac:57:9d:4d:5c:5d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Aug 13 18:00:47 2026 GMT
Not After : Aug 14 18:00:47 2026 GMT
Subject: CN=e0923b77fd85f550d547343c01f947d501fe7ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:06:3e:18:c4:ca:f2:28:1e:6c:4b:7d:89:
32:d3:d3:23:5d:1d:eb:90:10:d7:f1:d3:60:ce:51:
12:72:bb:88:4a:ef:02:9c:87:0e:31:75:1b:22:ff:
b7:2e:f8:25:16:45:72:d8:33:dd:93:48:b3:8c:00:
c1:84:85:5f:83:70:92:63:14:71:02:44:c5:b0:3a:
77:9a:db:ff:5f:5f:e5:91:ed:b3:b1:23:55:23:dc:
75:11:e1:a8:45:6e:c4:52:04:23:70:c8:c8:e0:14:
ea:d7:9f:84:70:7b:d7:e0:de:93:53:c5:4c:4f:48:
ae:21:48:5f:56:7d:05:e8:d0:a8:9e:d5:95:6d:11:
bb:81:95:d4:b6:b2:47:ec:ab:f6:e3:b2:a1:72:3e:
01:b1:38:e7:69:0f:6c:8c:9f:9f:6c:0a:4e:22:d5:
f3:c5:3c:0c:dd:95:85:d1:7d:2c:2f:83:1f:ac:1c:
7e:a8:8a:5f:c8:06:25:c2:90:de:0c:6d:f4:5c:c4:
27:15:7a:1c:0c:f7:de:7e:f6:bf:c6:00:00:11:3b:
c4:d2:58:4b:45:ed:dc:cd:39:ae:16:11:c7:8f:71:
9f:e2:7f:ec:83:83:99:ce:a6:43:f4:3d:fb:31:57:
1d:6c:25:25:65:3a:4e:22:cb:32:35:bc:c9:17:b4:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:92:3B:77:FD:85:F5:50:D5:47:34:3C:01:F9:47:D5:01:FE:7C:E1
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:61:42:87:4f:98:15:82:a6:94:71:aa:6b:85:34:a2:79:8e:
39:ba:b3:c4:62:ed:3e:d3:d4:e0:81:7f:5a:9b:24:ce:b6:eb:
17:1a:d8:a1:d9:f6:ee:0a:f7:b6:31:74:69:73:06:34:46:38:
54:97:89:09:09:4b:93:7f:39:f3:55:8b:d4:22:51:2f:df:d6:
73:f9:95:66:e5:0e:d2:2d:3a:17:fb:c0:49:d2:33:e9:d0:c9:
5e:bf:ea:26:4c:6a:1f:f8:a6:80:61:1a:4a:bc:da:da:0f:70:
87:02:85:9e:b7:a8:fa:ff:e7:96:2b:ea:17:f6:35:31:e5:8d:
62:6d:1b:88:5d:7d:2e:17:25:42:12:2a:01:17:b0:ba:35:65:
16:6d:36:d7:72:1f:28:30:9c:a7:c7:d3:e8:df:30:74:27:00:
80:45:e8:32:28:8b:52:95:db:3b:5e:2f:13:dd:73:12:4f:cf:
b4:88:69:4f:51:3d:b6:63:94:3f:7f:67:ba:ae:58:c5:1b:a8:
16:ba:bb:5e:57:9e:3d:4b:ce:68:fe:48:84:62:2e:0f:2c:2c:
29:da:bc:01:1e:06:02:a5:1d:7a:5f:42:f6:9e:92:fb:aa:60:
36:ee:c6:89:c5:3f:5c:aa:99:25:eb:ab:a4:7e:5e:e9:dc:92:
8c:bf:e5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:37:53 2026 by rpki-client