Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: +01l/NtwhU4RmfFEM/T9OcrwSnIRs5BGcmEsJnih9Fw=
Subject key identifier: CF:BD:C7:CB:F3:84:7E:E1:76:47:39:15:AF:38:C6:7C:2F:C5:60:FC
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 019D37C025DD1796A977FB6C1994110BCA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 14E1
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: 2QQChTDwIOQycovI2YsVvoZPz2I.roa (hash: CH9BbZ7Au7IxXqkLtHNUF65I74hoA0C1m5kNxLVSkng=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: z+7Xcsnf79ozjK4dvfHC9/zHH5UVznqsaOS4sT8xlYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:25:dd:17:96:a9:77:fb:6c:19:94:11:0b:ca:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=cfbdc7cbf3847ee176473915af38c67c2fc560fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:6a:62:e9:09:de:d1:0f:08:24:91:83:44:
3c:80:4a:87:b7:5e:61:f3:87:50:de:4f:df:90:d0:
ac:84:1b:f0:31:b4:f5:1e:46:89:83:e8:56:6d:51:
3b:7a:1c:d6:7c:c0:41:cb:08:21:d1:f6:c2:82:84:
4b:7d:a8:bc:9f:63:02:90:48:ae:18:50:eb:fa:8b:
0f:30:9b:64:45:bd:6b:8e:83:5b:14:74:89:c0:2d:
7b:df:09:e3:9e:e6:8b:ef:ed:91:ff:ad:57:bc:4a:
6f:89:d5:47:29:4f:6b:47:cc:a2:cb:9b:ed:f5:7e:
2e:ce:84:53:8c:c8:db:49:80:da:05:43:a4:b4:d4:
57:9c:5b:a7:80:08:7e:a7:5e:1e:38:76:19:da:07:
fb:80:5f:8a:e8:21:8f:ed:83:e3:6f:c2:60:89:10:
2c:b0:88:84:e4:d5:1d:fd:a3:6c:18:b5:62:63:a0:
25:f5:74:e8:71:13:2b:9d:a6:53:0a:ed:75:6a:49:
f3:17:36:f6:f2:a2:17:a9:d1:14:bd:4e:7e:1d:3f:
09:11:e7:2d:17:22:ac:3c:01:a4:07:0a:2b:93:30:
84:64:ca:39:4f:4e:89:58:da:ff:20:e4:50:de:78:
ae:7a:df:d8:78:b2:dd:34:12:2c:5e:e8:70:98:62:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:C7:CB:F3:84:7E:E1:76:47:39:15:AF:38:C6:7C:2F:C5:60:FC
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4e:fa:9c:99:13:d6:29:2c:f5:20:26:4a:e1:7c:69:c0:a4:
c9:ce:4a:e9:b0:00:eb:44:45:c5:a9:dd:84:44:aa:f8:e4:68:
f4:ca:3d:f8:0b:f4:4c:5d:bf:13:c9:a7:6b:63:05:fb:f6:ed:
4d:88:88:d6:31:df:70:03:e0:30:07:82:a7:75:19:42:9b:2a:
a3:2d:88:e8:d6:f4:f7:84:5e:78:52:78:0b:52:14:e0:a6:e2:
a1:11:18:28:b0:ed:87:b6:a6:9f:5d:ea:aa:89:bf:d1:80:f7:
f7:18:87:c3:dd:5b:b2:07:cd:ad:ff:da:6b:89:38:fb:34:38:
2e:5b:57:a0:9b:b0:36:6e:f8:bc:8e:41:dd:9e:08:36:9a:96:
69:48:76:67:30:b7:98:52:28:ce:4e:8b:21:bd:2d:ce:6f:bc:
95:d7:f5:8d:ce:51:9b:1a:d0:be:51:bf:e0:75:3e:69:65:b8:
51:e7:11:67:c9:36:d9:c6:4a:96:46:a0:59:21:73:71:e9:8f:
fc:03:a8:11:f2:cc:76:0d:82:25:06:7b:e6:30:84:52:fb:f6:
2b:b1:70:6e:8b:08:7c:da:99:3c:cf:c7:d3:d0:00:f5:0d:1e:
b5:ed:c8:d7:16:76:34:c8:42:70:9b:e4:19:71:8e:b3:52:5a:
15:23:02:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:55 2026 by rpki-client