Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: tbZV6h4WMXkCDv6B43HJGt6oaphX03bUYxi1fIFlRNU=
Subject key identifier: 76:29:26:13:13:A0:C8:64:FF:CE:A1:39:11:64:B8:93:5F:BB:ED:CF
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 019D329A4DF8E84DCF5DEF7D74970683DE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 04:01:06 +0000
Manifest this update: Sat 28 Mar 2026 04:01:06 +0000
Manifest next update: Sun 29 Mar 2026 04:01:06 +0000
Files and hashes: 1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: Ro7Wndof/VM+uvUGCyk5xAPipyvHtIFTVPgsEawMxus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:4d:f8:e8:4d:cf:5d:ef:7d:74:97:06:83:de:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Mar 28 04:01:06 2026 GMT
Not After : Mar 29 04:01:06 2026 GMT
Subject: CN=7629261313a0c864ffcea1391164b8935fbbedcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:d6:3b:47:02:20:ba:06:9c:ed:b4:c6:63:
c7:e4:4d:27:9b:1b:b0:18:9f:a7:b6:06:7b:b3:42:
4f:51:88:9e:6c:b3:49:c2:dd:ba:70:d8:31:28:01:
97:10:7c:1b:24:cf:f9:35:06:9c:18:06:c4:90:ca:
dd:6a:61:93:7d:35:0d:e0:c3:04:c6:16:3f:f2:3c:
33:f2:32:0f:c7:0d:8b:e8:9a:f2:4a:9c:23:7c:d0:
6b:f1:e6:fa:5e:05:58:14:26:94:22:1a:b1:0e:de:
a6:dc:6b:ea:32:22:ca:e3:57:09:a0:00:f4:11:a1:
2e:3d:26:05:85:cf:a2:79:c8:70:2d:5f:a9:f2:47:
86:5c:f1:b8:bd:0a:9e:46:51:29:1f:0d:45:8e:08:
50:d7:fc:09:d4:6f:7e:92:73:a0:dd:4c:39:43:fa:
84:3b:74:db:4c:1b:26:fa:35:f5:c6:c9:aa:36:ed:
5a:2c:50:2a:1c:71:31:72:40:4e:c4:0e:56:70:58:
9c:a4:c7:30:2a:51:38:0b:53:b3:cb:c3:6c:a7:95:
38:7b:69:e5:92:07:33:ff:18:e6:11:1e:71:f0:74:
59:c3:3f:af:aa:64:a2:1c:73:16:54:81:fb:5c:55:
0f:e0:e4:4b:20:03:c5:77:6e:d7:17:95:7e:56:21:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:26:13:13:A0:C8:64:FF:CE:A1:39:11:64:B8:93:5F:BB:ED:CF
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:cc:13:99:d5:73:10:84:44:8c:af:d4:78:46:c7:f0:1b:c2:
5e:dd:7f:18:8d:34:e9:d7:1b:79:60:29:8b:17:a3:fd:05:bf:
4e:e4:f8:2c:ce:0d:1a:ac:4a:8d:eb:20:c7:fc:59:bc:86:d6:
e9:5e:9e:e6:84:c2:60:b0:da:c7:c9:74:ed:92:d1:82:d0:30:
26:38:e5:e9:26:f8:cc:6c:13:7c:f3:72:8b:59:12:81:a6:fe:
40:4f:67:7a:1a:b4:49:28:2c:79:8f:85:a2:17:3e:77:90:ba:
e9:5d:c9:81:d1:f1:ea:8d:c9:bd:e9:18:80:d6:ce:f9:ce:50:
55:2d:b1:05:fe:0b:bd:26:50:25:13:a2:0e:1a:d7:68:ae:d0:
7e:1a:22:d8:2f:fd:d2:96:5d:db:7d:5f:2c:91:cf:4c:c7:29:
d1:1e:ec:7b:9b:dc:91:d8:53:0a:44:38:f2:b2:3b:19:9f:15:
c3:59:6f:73:f0:73:ec:dc:1e:a1:b2:52:c5:7e:a0:ad:df:f6:
8d:ea:a9:70:c5:e3:f8:9d:4f:83:b3:e3:ce:87:f4:d3:8f:da:
4c:e8:30:84:2a:f9:10:7f:3c:91:54:6c:54:13:24:f5:b9:09:
5f:80:f3:bf:aa:a7:5c:e9:3f:39:cf:db:61:ad:0b:19:c9:6b:
71:a3:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:08 2026 by rpki-client