Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
File: q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft (raw, json)
Hash identifier: jDbNrpDb+nzgyXgeunFUwL72GJ1auBkSr/1RpU+Z3E0=
Subject key identifier: DB:48:6A:82:9A:AA:BA:35:36:FE:1C:57:D3:92:6D:50:1A:3D:DD:89
Authority key identifier: AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C
Certificate issuer: /CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
Certificate serial: 019D390995E1FC9E4ED7129FEA5F9A150622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
Manifest number: 0859
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: YY2bD1lJGVXnAve4KCOQnRgcyqM.roa (hash: zyz3+Ol7aMUrRBs0SEp2hLbGVzOPcEMMPHj5nB0BmD0=)
2: q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl (hash: bqpZ6ToZQz9nura06EuUQ29MafjXjd4NxRfDyZYD+ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:95:e1:fc:9e:4e:d7:12:9f:ea:5f:9a:15:06:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=db486a829aaaba3536fe1c57d3926d501a3ddd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:eb:dc:93:86:60:46:37:11:43:31:77:11:
e9:69:55:e0:97:3b:40:8f:50:b3:91:93:33:4c:dd:
2f:a7:26:64:a0:4e:b6:84:33:51:0f:32:31:44:9f:
74:02:f3:24:68:d2:7e:c3:eb:9a:61:e9:6e:2b:34:
cd:65:ed:be:79:11:79:df:54:27:4f:10:78:0c:11:
c5:97:0e:62:c6:f9:ae:ba:ed:2a:46:64:c1:e2:a6:
34:b6:6e:1e:4f:68:62:89:ff:0b:8a:50:62:be:bf:
9d:3a:da:de:9a:42:9f:09:db:3d:d0:2f:20:2a:0f:
9b:a4:49:93:a2:e0:60:01:01:c7:cf:8b:1a:28:a3:
72:0c:e2:db:40:0b:60:3b:52:61:60:f2:22:9e:a8:
cd:87:02:a9:dc:e1:8e:25:33:60:a8:97:ec:b0:f0:
91:78:22:e1:8a:f1:0a:ec:21:74:ea:01:57:1e:e9:
46:d5:b2:c8:f1:27:6e:4f:a9:b2:a9:d4:e9:d8:95:
f4:d0:8d:c5:e2:8c:df:93:76:87:59:9c:35:5e:88:
fe:cc:d4:fe:e2:47:0f:d6:bd:7c:2f:f9:51:fa:99:
d7:19:3a:10:da:3c:29:5f:e8:bc:5e:69:55:15:f1:
1a:a7:59:e0:8a:68:d9:e0:22:c0:2e:22:91:60:17:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:48:6A:82:9A:AA:BA:35:36:FE:1C:57:D3:92:6D:50:1A:3D:DD:89
X509v3 Authority Key Identifier:
keyid:AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1a:a0:42:fb:50:06:b9:07:f2:69:61:75:8c:0f:ba:d6:f0:
b8:0c:3a:e6:64:a6:c3:c1:b5:11:0b:55:14:95:14:10:11:fb:
01:2e:88:93:67:87:40:71:6f:d7:a7:f1:2b:d2:68:51:70:d7:
4b:3c:c4:53:cf:71:41:2e:ea:f0:e5:32:23:f2:61:bb:67:8b:
35:e4:04:ae:2e:38:d7:9a:f5:9f:ab:a1:56:ca:89:60:3b:d6:
69:7e:a2:fe:59:64:20:7a:c0:5d:b1:48:66:bf:4e:0e:e3:94:
aa:42:65:a6:d6:d0:97:c3:d8:38:24:22:ad:e3:60:b3:1f:e0:
6a:82:2a:78:a9:cc:54:6f:3c:99:50:00:54:91:67:13:71:16:
ec:6f:97:82:20:e6:78:71:ad:88:90:38:89:75:57:8e:3c:66:
b1:8a:75:b6:06:aa:4a:85:00:e2:0a:07:79:56:f7:3d:5b:b6:
0c:c1:8b:c2:61:da:ea:d1:22:6b:7e:2a:f8:3f:d8:1d:5b:ee:
6c:e8:02:31:27:48:06:b2:0e:3d:bb:44:b5:1d:5e:55:ce:77:
b9:44:74:b5:2c:59:ac:7e:0e:4e:d8:b6:69:c9:25:62:d0:43:
c3:94:99:d6:97:b4:71:77:82:6e:a2:9f:17:29:5d:53:15:20:
72:0e:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:02 2026 by rpki-client