Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: 2GwA/y0+5kb6DeniSICrWVbEl8eQ0j4I94vuB/PGIdw=
Subject key identifier: DA:04:04:A5:D7:61:AA:E8:2A:37:F1:50:89:F3:6B:29:C7:7F:10:38
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 019E0BF83B57D24D99771AC8CF56D23A3768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 18FC
Signing time: Sat 09 May 2026 09:01:17 +0000
Manifest this update: Sat 09 May 2026 09:01:17 +0000
Manifest next update: Sun 10 May 2026 09:01:17 +0000
Files and hashes: 1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: p66t6n8w8cVXEqB4OeAO3sMNIL0oeJy3wLEc4c4rTqE=)
2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0b:f8:3b:57:d2:4d:99:77:1a:c8:cf:56:d2:3a:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: May 9 09:01:17 2026 GMT
Not After : May 10 09:01:17 2026 GMT
Subject: CN=da0404a5d761aae82a37f15089f36b29c77f1038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:14:b0:c6:81:cf:e6:0e:b5:1c:3f:d8:3a:
23:ed:b2:bc:fe:67:0e:66:bd:f4:6c:24:58:d2:0a:
b9:64:07:a2:be:c8:6b:fc:71:05:da:28:40:9a:d2:
20:ff:19:36:15:e3:00:6e:dd:6f:03:87:d0:83:56:
9a:ce:29:61:35:50:81:6c:ef:c5:23:61:0f:4e:26:
80:83:d6:1f:b6:a3:e3:35:d1:79:76:f7:4c:5b:ca:
f9:79:46:ce:9c:03:f4:dc:96:ad:bb:44:60:dd:f9:
57:3b:1c:ab:2d:e4:e3:48:35:07:57:15:5a:b2:d8:
8e:a5:6a:09:9b:bb:ff:58:d4:b2:56:9f:cc:99:e8:
3b:96:01:b5:e6:32:ff:2e:82:d6:64:ee:2e:ff:f0:
8f:59:55:64:42:22:ff:08:67:05:c5:ab:25:3a:ae:
c8:40:97:0b:4b:61:09:80:14:1a:68:4c:80:d9:dc:
4d:7f:e7:6d:ed:e0:57:b0:c2:ce:01:45:94:ea:76:
22:c1:a8:b4:2e:92:ad:96:27:eb:5e:22:04:4e:ed:
17:20:ad:67:ac:57:9f:2e:62:50:06:dd:60:9e:3d:
f3:72:87:74:17:44:3e:6b:81:71:94:c1:be:dc:bd:
05:52:4c:86:4b:3a:22:74:0c:40:72:fb:55:a8:6d:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:04:04:A5:D7:61:AA:E8:2A:37:F1:50:89:F3:6B:29:C7:7F:10:38
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:61:9c:df:21:b6:11:60:ae:31:ae:5a:5d:47:cb:03:4c:36:
2a:2b:64:95:4a:69:21:5c:4a:6b:33:86:d8:2f:c4:6d:37:37:
2b:31:d9:eb:ae:7f:2c:8e:35:c7:9d:c9:f4:34:bc:6d:5f:41:
1d:a3:ad:2d:05:f8:6a:d0:0b:e1:d8:ee:9e:de:95:7e:d1:ee:
e6:99:b9:ac:51:50:37:44:bd:c3:04:8a:69:1d:ad:8d:b3:8b:
0c:8c:7f:5a:25:d8:cf:fc:fb:5a:49:b9:08:24:25:7a:94:00:
f1:c1:18:d6:1a:60:79:a7:bd:6f:36:16:ff:20:76:6e:0c:4f:
91:f6:41:a4:98:c4:66:c2:cf:ea:bb:5a:35:fb:26:a3:31:c5:
f1:de:c0:0c:ba:d8:8c:de:4e:db:60:8e:9e:c7:bf:df:42:70:
f7:8f:1d:76:6f:68:10:14:c6:17:07:b7:0b:c5:78:ae:e4:d5:
70:8e:04:ef:69:8f:91:9f:f9:46:96:97:5d:30:a6:f3:af:f7:
df:4f:ef:d4:16:92:4d:2b:b8:6e:46:d0:b3:24:de:4a:29:9b:
ad:23:e0:ca:73:99:21:e6:79:e8:7f:7f:a3:8d:e1:50:82:f2:
7d:fc:35:5a:b5:ea:3d:f3:f7:67:93:07:f0:2b:67:65:1d:37:
73:73:c5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 14:30:24 2026 by rpki-client