Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: ulEikYwplec+MBs44xsea67a6JeKRMlTg9BY0GIe8yg=
Subject key identifier: 84:8C:01:D1:79:DB:54:04:AE:78:60:0E:D9:EF:BC:AF:F7:C7:DA:F4
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 019EF3B5C96538A49AC84233425FA119AA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1974
Signing time: Tue 23 Jun 2026 09:00:37 +0000
Manifest this update: Tue 23 Jun 2026 09:00:37 +0000
Manifest next update: Wed 24 Jun 2026 09:00:37 +0000
Files and hashes: 1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: VkTBTzoy4I7rywQBKHA124GRXMekrekKAMYO3nYdC3w=)
2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:b5:c9:65:38:a4:9a:c8:42:33:42:5f:a1:19:aa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Jun 23 09:00:37 2026 GMT
Not After : Jun 24 09:00:37 2026 GMT
Subject: CN=848c01d179db5404ae78600ed9efbcaff7c7daf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:2c:67:d0:c2:ed:37:e3:d2:67:e7:48:ea:
16:2f:d7:b0:37:bf:74:34:66:a9:a1:0a:b3:b2:fa:
16:0f:2f:37:81:34:02:2e:1e:9c:37:af:9a:cf:b9:
0c:bb:cf:f0:87:dc:6b:60:43:0e:3e:90:3a:01:29:
53:49:9a:48:d3:af:65:61:8c:03:09:06:7e:a9:6b:
3c:b4:36:42:bd:c7:50:eb:67:86:90:47:82:ff:77:
53:cf:d8:91:f0:50:1e:d4:36:38:fd:42:00:c7:10:
ac:4a:df:7b:66:22:36:aa:08:0c:56:81:44:82:b7:
24:92:d0:63:40:9a:24:ac:b5:74:3b:ca:cc:78:17:
7d:df:ba:4a:85:c9:94:92:a7:5f:ef:c5:dc:01:74:
72:a4:79:5d:5a:88:6b:4e:da:fb:0f:29:78:16:eb:
b3:1e:3c:6b:87:f9:e3:9f:5f:87:fb:bb:c0:c3:e9:
eb:8b:6f:8e:6c:f3:89:5d:bc:0a:8a:a1:97:8e:ea:
56:1b:ca:ae:c0:a2:6c:3d:7b:13:cd:cf:08:0b:cc:
86:d2:e7:48:84:86:e2:34:9d:ce:c0:69:65:c6:ed:
c4:f9:92:35:f2:79:8b:23:7a:30:20:12:ab:3c:d0:
f7:4a:e7:e0:40:47:a1:a5:53:b6:28:00:45:13:d2:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:01:D1:79:DB:54:04:AE:78:60:0E:D9:EF:BC:AF:F7:C7:DA:F4
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a5:b6:67:09:57:39:d4:97:d0:af:2f:cc:d1:45:a2:97:7e:
1b:b0:ba:bc:0b:56:06:a3:10:3f:00:a0:62:0e:1c:16:61:95:
42:be:9c:c0:84:c4:ed:41:19:73:c4:1e:1d:95:35:84:0d:44:
d2:c0:2d:cb:82:d6:b6:8d:55:68:a9:65:f3:d7:da:51:c9:b9:
cc:2a:a3:96:7b:f4:4d:06:fa:95:f0:e7:bc:af:5e:4f:d0:e0:
3c:b7:7f:37:c7:af:41:51:a7:51:b5:00:21:a7:22:1c:f1:42:
d6:c6:c3:be:9e:15:ae:87:76:b6:fc:87:1c:78:fa:ed:bc:2f:
ed:a2:ff:16:6e:72:bf:1d:91:cf:e3:ee:9d:51:8f:ef:50:62:
d9:5f:54:dd:5b:1d:12:19:9f:ab:c9:52:51:96:08:f4:64:06:
ae:81:75:c1:c3:3e:81:b1:e9:d3:b1:a8:2a:75:4e:76:99:55:
fe:fa:c7:23:a7:71:14:c7:73:48:d0:25:ec:a4:86:9e:54:25:
87:d8:7a:c2:16:c9:c4:b3:2a:f7:e4:4c:7e:06:0d:7c:5a:33:
a3:4b:44:95:fa:f1:97:53:b0:73:b7:d0:34:8d:c3:fd:34:10:
2c:cf:5c:5a:00:6f:9e:a6:29:bd:82:ef:a8:99:df:45:4b:bd:
1d:af:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 19:21:33 2026 by rpki-client