Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: AupPtiA6uF/vy5dmzxoEaewZtEqMriDLIdhHhpwp8BU=
Subject key identifier: 35:F9:66:32:81:FF:49:FD:B9:4C:63:ED:81:80:11:59:79:DF:23:B6
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 019D224B797C0EF321FBDCE9FA70A85FC555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 00:01:04 +0000
Manifest this update: Wed 25 Mar 2026 00:01:04 +0000
Manifest next update: Thu 26 Mar 2026 00:01:04 +0000
Files and hashes: 1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: T9TRSGm2YysGRDkqSdwzcVyA6Tm7GsbBRVE03tmCjWs=)
2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 23:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:4b:79:7c:0e:f3:21:fb:dc:e9:fa:70:a8:5f:c5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Mar 25 00:01:04 2026 GMT
Not After : Mar 26 00:01:04 2026 GMT
Subject: CN=35f9663281ff49fdb94c63ed8180115979df23b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:b4:17:7a:fb:fb:0f:98:4a:b1:aa:c7:c6:
9f:db:fb:53:3b:61:07:82:1f:5a:af:8d:ad:13:99:
5a:23:9a:24:b8:4c:01:6a:fc:e3:07:75:6a:8e:1c:
f9:ed:07:c7:43:fd:8d:48:c2:0a:96:dc:9d:0c:a2:
60:e7:8f:da:7d:f3:dc:44:34:b7:75:a7:64:38:81:
20:be:06:42:df:dd:d1:6c:88:43:5d:50:62:5f:0d:
76:0e:0a:63:38:22:91:99:e5:bc:ce:01:f1:fd:45:
7e:6e:e2:de:4a:56:ee:59:0f:a4:ef:cb:95:58:4c:
2d:60:d5:29:3e:c0:fe:8c:d4:ab:96:af:d1:b9:93:
23:e8:3d:f7:e9:93:d4:16:3d:ad:69:8b:cf:19:aa:
e0:3c:0e:09:ad:9a:53:13:96:89:07:9d:75:f4:fa:
d6:84:ae:cc:d9:3f:2b:9f:e4:6e:50:e4:51:c8:3d:
23:ec:71:37:7d:b5:e2:fa:c5:63:0d:32:16:8b:ad:
02:1c:38:81:c0:00:26:65:d8:fc:00:99:38:39:f8:
3c:fc:0f:77:d4:b0:ef:6d:29:db:79:10:3b:41:e4:
86:37:f4:f2:bd:15:73:da:ec:5e:8a:17:81:0b:c7:
5e:a4:4b:76:ad:a1:36:46:13:c9:cc:c2:bf:73:2a:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F9:66:32:81:FF:49:FD:B9:4C:63:ED:81:80:11:59:79:DF:23:B6
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:41:a3:e9:a4:7f:b3:7f:27:2b:42:82:4d:60:a4:a1:48:
c6:e0:d5:07:28:0a:24:59:e4:b7:d2:58:e2:74:04:bd:fd:e0:
83:cd:af:07:b5:14:11:df:9a:11:ea:a0:67:a4:a8:7f:c6:c3:
ed:ed:45:0f:e9:12:93:f9:19:c1:83:87:ce:a7:cf:f2:c8:72:
91:70:34:1a:fd:b1:1c:31:ce:96:37:77:bc:c1:e9:f0:1f:eb:
af:98:a9:32:99:a7:24:ba:f9:bd:52:ac:2f:22:70:36:14:e3:
c0:b2:0a:2d:01:3f:2a:b5:84:23:4e:4b:32:84:4f:9a:b2:36:
45:1d:e2:7a:ed:ae:a8:44:ee:eb:2a:a0:b2:b8:c6:1c:65:1a:
e3:3a:5b:a3:a5:f8:f8:36:74:5b:7f:91:d5:cf:2f:36:e0:9b:
ca:28:77:9b:21:85:0c:13:08:e7:2b:ea:e2:a4:23:36:1c:a8:
dc:c9:56:ca:22:90:d7:60:f2:5b:ac:4f:46:bf:a6:58:eb:bf:
00:5c:f1:f8:6f:79:7a:64:05:57:ef:e0:54:5c:7c:ef:e7:01:
61:45:d9:3e:6c:5e:71:c7:43:1b:e8:aa:8b:9d:65:d9:d3:f1:
ac:77:e2:ef:5e:57:f5:b3:8e:70:54:4e:61:01:93:da:ce:40:
28:ea:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 02:32:32 2026 by rpki-client