Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: TjWopy9ZsWBt/EW99EdDzojz618OnL7ovyazUegWed0=
Subject key identifier: DB:5B:A6:EC:C5:B2:4E:EC:51:2A:96:5C:42:75:AF:F2:46:07:E1:A3
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 019D38D2D1BE0312481EFF456CE5712CAA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 0C16
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: IQbpL4Pqq93ybQGV6ANNMbZ2iIo.roa (hash: PGBZA27UKVJdbgN0SEeBoj7RAPgQfESC+ab1mII1zDE=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: irHiUKg3zaX1TqBjjf2lbEBGpycvU+4RcEJ6UpUEjfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d1:be:03:12:48:1e:ff:45:6c:e5:71:2c:aa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=db5ba6ecc5b24eec512a965c4275aff24607e1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:16:21:8c:8e:61:4f:56:91:9d:08:d3:a5:
71:dc:3e:07:58:3e:10:17:00:07:2c:5a:1d:d7:00:
f1:6b:62:63:e2:42:c3:47:5f:4d:50:6d:12:2a:6f:
4f:53:33:5c:b9:91:da:bd:bc:d7:9f:7a:de:aa:d8:
22:35:03:88:a6:1a:3e:ca:83:eb:a7:c3:00:47:ae:
8f:af:ec:f4:50:63:50:18:b0:77:c1:61:9e:81:a5:
6e:4c:a2:27:79:74:56:7d:86:4b:38:17:41:34:37:
f3:bf:bb:b6:cc:9b:46:8b:a5:8c:e2:90:d0:6a:e8:
53:9a:13:6d:b3:5c:3a:11:92:b6:a5:45:88:4c:ee:
07:75:18:66:2b:f5:f9:82:71:af:bc:dc:2f:d2:18:
eb:c2:f7:ec:63:dd:64:c6:46:f1:09:35:77:e0:42:
b7:b9:be:0f:50:4d:f8:fa:ab:4e:73:7c:58:eb:cc:
1b:00:b1:fa:51:81:bf:61:eb:6e:1e:e3:83:c1:1c:
cd:3b:7b:f9:08:72:2f:c5:9a:bf:5a:b8:74:d1:3a:
44:f8:e7:8a:bc:fb:06:d3:5b:06:af:ab:51:b6:54:
76:21:5f:6a:8f:51:5d:8b:a3:a2:7c:4b:16:1e:94:
73:5a:e1:15:32:0f:33:99:50:7b:c3:80:37:54:6b:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5B:A6:EC:C5:B2:4E:EC:51:2A:96:5C:42:75:AF:F2:46:07:E1:A3
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:56:f0:e5:ed:01:9d:60:8f:b5:c1:82:28:eb:9c:f4:8c:42:
82:0c:e3:3b:b3:67:d6:7e:df:9a:55:a6:56:de:f2:3f:43:38:
f8:05:43:4a:57:8b:d6:29:5a:a6:46:f8:8d:a5:e5:2c:29:54:
c3:ed:21:17:5e:9d:6f:ec:e0:d9:eb:94:3d:61:bc:91:4d:78:
55:f7:dd:8e:49:7d:ae:99:29:16:67:0e:8b:6f:9e:62:6b:cf:
7e:2e:0e:e8:16:8c:dd:df:28:91:1f:c2:d4:68:33:f7:e5:18:
75:ad:26:76:62:d5:63:e3:e2:a8:4c:20:bd:45:d7:15:eb:74:
a6:53:fb:65:d8:3d:24:3e:cd:5d:1b:53:f3:08:15:a6:9f:1d:
80:19:77:65:e4:7b:2c:b2:0e:b3:ad:92:32:0e:11:8d:13:9c:
7f:2c:d1:ba:e4:fb:79:87:55:83:ca:d3:24:df:2c:ea:a0:11:
66:eb:2b:1f:2b:6f:16:9b:66:b6:b9:b8:78:b4:49:b6:57:6b:
8b:68:77:ab:f9:60:02:02:86:71:f4:90:02:ed:ce:de:98:3b:
34:22:6e:ce:b2:f7:9a:32:bc:c9:23:60:8f:8a:55:c6:24:cf:
11:17:6c:52:cf:13:c3:1c:de:87:54:83:aa:59:c0:79:13:82:
c3:c8:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:31 2026 by rpki-client