Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: 8zP9yfqx11pP9d31fQWvbEDG8CpymiEeABW8bZDUeO0=
Subject key identifier: 2D:EE:D0:B4:5D:D2:54:C6:15:11:15:46:80:D4:CA:B2:9D:56:41:BB
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019D389BB9AC449B574CFADBEBB025FA2A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: 1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa (hash: JDIIwJMIws7Yan/EHkT9Ljq/fUXQU7hpu1yjAvkm5mo=)
2: BaNWyPJkYMdl4AcgG8334MdnOcE.roa (hash: T74jpYeo37fOzj45FGRDC/CZ0GAhyN9geA/QxTHQiHk=)
3: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: 1OUqy1vG2r7cA+SW0CgLCEFoGXX/YfnFBzwyEWXl5io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b9:ac:44:9b:57:4c:fa:db:eb:b0:25:fa:2a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=2deed0b45dd254c61511154680d4cab29d5641bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:d3:d6:a4:26:30:00:b4:6c:38:10:8f:be:
ad:9c:87:70:43:e3:e9:8f:36:51:74:32:3e:69:aa:
0e:39:b7:50:e9:46:26:db:ac:ba:fb:26:81:b2:bb:
9b:9d:72:20:03:1b:62:0e:5f:6a:3c:44:7d:61:68:
f1:1f:f5:30:49:74:2d:ac:d5:4a:3a:cc:d1:e6:4d:
75:45:7c:39:53:34:a4:61:9f:22:c3:6d:51:f2:eb:
09:c7:61:dc:bf:67:14:8b:5a:01:ec:8e:72:2a:aa:
c1:e9:8d:2f:01:f1:59:a1:80:6d:19:91:9b:e5:ba:
6b:71:18:6a:6b:9d:cb:b1:4b:bc:0e:d0:44:3c:5d:
6f:b2:63:cc:42:24:7c:f1:03:e3:86:a1:29:b7:5d:
cb:8b:6f:b3:3d:a6:74:6c:b5:94:d3:6e:2d:c7:11:
dc:2d:8b:53:40:c8:84:b5:62:1e:89:ca:84:9c:71:
e7:97:fa:0a:fa:39:08:f2:b2:cf:d3:f0:1f:1d:c9:
98:b0:0a:7c:b0:60:fd:97:83:17:52:74:9a:62:46:
f6:bc:61:93:be:30:72:13:46:71:a8:47:b4:f9:09:
53:62:52:23:05:72:d1:81:f2:48:7b:a3:df:91:fe:
e8:ab:5d:ad:39:e2:20:62:a5:c2:5d:e2:04:a8:31:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:D0:B4:5D:D2:54:C6:15:11:15:46:80:D4:CA:B2:9D:56:41:BB
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:84:ee:4a:4b:db:db:fa:97:95:5e:6f:39:51:41:95:e7:1e:
ae:0c:5f:b0:ac:e9:72:18:92:1f:ad:ba:04:e6:31:7b:12:c1:
fd:ba:a4:e7:fe:fe:d4:80:d9:fd:3d:80:1b:51:74:94:10:44:
cb:81:59:20:4e:2e:25:f1:3b:7b:ce:39:0f:04:23:79:a9:f1:
b1:ab:36:cd:b6:ba:5e:29:42:7e:8f:a0:d9:90:a3:5d:23:ab:
41:09:34:a6:71:d8:26:5f:11:5e:4a:69:44:61:d8:95:56:41:
f4:82:c3:ba:ce:7f:9a:6c:2c:e1:b3:fd:5d:93:82:4e:c4:74:
68:7b:5d:95:9e:67:83:2b:23:8a:03:33:27:f8:52:26:89:c7:
e8:91:c9:65:99:21:9d:d9:51:50:05:33:70:c3:c4:06:e7:e3:
71:10:e1:3f:9b:72:51:37:d6:32:da:ab:a6:eb:5b:5e:32:a5:
09:03:2f:8b:fb:d1:27:1a:5b:52:25:cd:3f:07:ff:db:3d:82:
88:74:9e:fb:f7:ad:cc:69:2c:68:e8:e3:06:96:1b:50:de:6a:
b7:38:d7:2e:b4:66:c6:b9:78:d7:14:2b:58:f5:49:54:96:42:
4e:a6:29:10:e2:81:2b:d6:43:c7:9d:d3:68:d8:67:f1:c3:c5:
3c:28:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:23 2026 by rpki-client