Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: TxAKEhTZWC6zNeqpWEezNz4V+75qLlwVFNFtL59J68I=
Subject key identifier: 6D:A6:7D:95:4B:FD:C5:1D:2C:7B:79:6F:B3:32:ED:3C:EB:51:6B:86
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019D359B234975EA894B7601F7EC67DFD162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1899
Signing time: Sat 28 Mar 2026 18:00:52 +0000
Manifest this update: Sat 28 Mar 2026 18:00:52 +0000
Manifest next update: Sun 29 Mar 2026 18:00:52 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: via7yYz6WOcalt2a2jgE+n03iIJzM4C1qYoQwiNJaZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:9b:23:49:75:ea:89:4b:76:01:f7:ec:67:df:d1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Mar 28 18:00:52 2026 GMT
Not After : Mar 29 18:00:52 2026 GMT
Subject: CN=6da67d954bfdc51d2c7b796fb332ed3ceb516b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:06:fc:89:a1:6d:ac:f9:f7:9f:5b:b3:5a:
98:14:c5:d5:73:d5:2c:a3:8d:64:ec:be:ba:5c:33:
bd:b1:8d:f6:ab:52:4e:0e:fb:ba:38:7d:e1:d8:5a:
0b:09:f1:c5:39:34:7b:90:f9:eb:a8:be:46:21:32:
d3:8f:0d:bb:6d:5e:9d:bb:36:be:ef:ec:f8:79:4c:
f6:7c:1a:c8:59:d8:3b:ef:ac:4b:f6:9b:dc:ee:13:
ca:84:f0:a1:85:95:df:7c:6e:a7:d4:64:ce:f0:bf:
da:24:8f:19:84:ef:de:6b:a1:6f:de:45:97:2a:55:
f6:b1:5b:90:70:77:4a:c4:71:58:c3:5a:da:3f:0e:
a7:f4:55:23:1d:e6:cf:01:81:39:7f:d0:9f:02:58:
24:88:3e:93:ed:89:65:2e:11:fe:92:23:cd:96:78:
c5:ed:24:7f:84:50:f0:5f:3e:a5:cb:12:5c:f5:bc:
83:ef:82:95:70:50:15:e5:e7:f1:fd:cc:92:67:0a:
22:7f:9b:39:45:16:36:bb:dc:8f:1c:6e:b3:9a:06:
67:f8:99:3b:20:5d:13:18:ba:9b:a2:7f:03:c3:3d:
db:13:73:12:dc:9f:59:d9:28:47:39:be:fe:9a:05:
78:f4:cd:bf:3b:26:88:60:d4:55:6c:be:07:06:1b:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:7D:95:4B:FD:C5:1D:2C:7B:79:6F:B3:32:ED:3C:EB:51:6B:86
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bb:0a:c4:af:84:b1:e3:0c:a6:2f:1c:49:47:5c:63:4f:22:
cd:e4:08:02:81:06:c0:84:71:ef:e5:35:cd:be:00:36:15:4d:
98:78:99:d9:44:8f:79:f3:48:8a:e3:d8:4a:2f:7e:5d:81:21:
ad:89:bc:e5:80:52:ab:14:17:ff:12:09:12:69:a8:44:85:f2:
10:22:08:1c:2c:60:5b:df:ef:b9:54:e3:45:d9:f6:30:45:49:
ff:6f:88:46:44:2d:98:62:de:1d:61:0d:1f:6d:e5:ef:42:2f:
e8:fa:48:03:90:f8:70:0d:3f:f0:dc:5b:ce:0a:4c:e6:1b:8a:
98:51:9e:f6:9f:22:b0:8e:ed:35:e7:b8:dd:89:37:cf:ce:74:
d6:7e:d4:d3:74:8a:a3:8c:64:80:98:c9:36:9c:97:d2:9c:1f:
7b:d1:82:64:3c:cf:78:bf:a5:b9:d0:a0:ef:ed:b4:8e:08:32:
e3:43:2b:2b:1a:2a:95:95:88:8e:01:90:a1:80:a3:70:95:56:
65:f2:0e:1a:ac:f8:96:8a:38:d3:8f:e6:72:d8:46:57:92:f7:
ca:22:23:2e:fb:5c:99:bc:64:16:fb:47:1d:0a:4a:e4:67:0d:
a5:4e:47:a5:07:4d:1e:dc:45:3a:d5:14:82:2d:b6:91:21:fb:
7d:b7:00:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ01myNJdeqJS3YB9+xn39FiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw
YjAwOWIwHhcNMjYwMzI4MTgwMDUyWhcNMjYwMzI5MTgwMDUyWjAzMTEwLwYDVQQD
Eyg2ZGE2N2Q5NTRiZmRjNTFkMmM3Yjc5NmZiMzMyZWQzY2ViNTE2Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyesG/Imhbaz5959bs1qYFMXVc9Us
o41k7L66XDO9sY32q1JODvu6OH3h2FoLCfHFOTR7kPnrqL5GITLTjw27bV6duza+
7+z4eUz2fBrIWdg776xL9pvc7hPKhPChhZXffG6n1GTO8L/aJI8ZhO/ea6Fv3kWX
KlX2sVuQcHdKxHFYw1raPw6n9FUjHebPAYE5f9CfAlgkiD6T7YllLhH+kiPNlnjF
7SR/hFDwXz6lyxJc9byD74KVcFAV5efx/cySZwoif5s5RRY2u9yPHG6zmgZn+Jk7
IF0TGLqbon8Dwz3bE3MS3J9Z2ShHOb7+mgV49M2/OyaIYNRVbL4HBhuPIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2mfZVL/cUdLHt5b7My7TzrUWuGMB8GA1UdIwQY
MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt
MjEzZDY0YmVmZjcxLzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx
LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLsKxK+E
seMMpi8cSUdcY08izeQIAoEGwIRx7+U1zb4ANhVNmHiZ2USPefNIiuPYSi9+XYEh
rYm85YBSqxQX/xIJEmmoRIXyECIIHCxgW9/vuVTjRdn2MEVJ/2+IRkQtmGLeHWEN
H23l70Iv6PpIA5D4cA0/8NxbzgpM5huKmFGe9p8isI7tNee43Yk3z8501n7U03SK
o4xkgJjJNpyX0pwfe9GCZDzPeL+ludCg7+20jggy40MrKxoqlZWIjgGQoYCjcJVW
ZfIOGqz4loo404/mcthGV5L3yiIjLvtcmbxkFvtHHQpK5GcNpU5HpQdNHtxFOtUU
gi22kSH7fbcAQg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 03:40:26 2026 by rpki-client