Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
File: q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft (raw, json)
Hash identifier: A/YmXk8FAtdj3TxFZgjwDMKDG3LCe+k9ELI9PnmoI58=
Subject key identifier: 76:CD:DA:47:2A:20:6A:6E:37:A6:37:AF:35:7C:FD:D0:C3:31:9F:7C
Authority key identifier: AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12
Certificate issuer: /CN=ababd67e3e108c19f34fc00c76c6005993233512
Certificate serial: 019DAF7C72AF202D9AFFC1D0C9BCE0F8C660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
Manifest number: FA
Signing time: Tue 21 Apr 2026 10:01:01 +0000
Manifest this update: Tue 21 Apr 2026 10:01:01 +0000
Manifest next update: Wed 22 Apr 2026 10:01:01 +0000
Files and hashes: 1: pGugAdUz5p-YAsFMIka9-wuebXc.roa (hash: YdqhZ0Mq4ECgTaBnJBwjKT9BiKBYB9QUoZqYUPVe6yI=)
2: q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl (hash: xm+a+mS6UzF5YT/6dVEcpFY2BpQajvsEiSMY3k/BvAY=)
3: sk8j4ooIq_6310cgpT7JHgS__6Q.asa (hash: rnR8JO7Sl7gfRDV7P8yjIvScF3IAyOEjWduQgbXRoFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:7c:72:af:20:2d:9a:ff:c1:d0:c9:bc:e0:f8:c6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ababd67e3e108c19f34fc00c76c6005993233512
Validity
Not Before: Apr 21 10:01:01 2026 GMT
Not After : Apr 22 10:01:01 2026 GMT
Subject: CN=76cdda472a206a6e37a637af357cfdd0c3319f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:b7:99:c4:67:4d:1e:80:97:c9:dd:3e:91:
b6:3d:07:00:6c:3c:cc:67:63:10:39:8f:fe:00:9f:
7d:cb:ab:28:4e:90:f1:11:94:25:45:c5:04:b8:5a:
11:6f:13:1f:8a:e9:89:38:25:fb:e1:2b:73:a8:4f:
1a:d3:c8:99:88:4a:73:c2:b2:77:51:2b:47:32:f6:
91:ae:b1:c0:70:fe:8b:75:02:44:61:0c:f0:a3:44:
ac:d8:ae:76:77:17:27:7b:fb:f6:c4:87:e5:a3:4f:
1b:3d:f0:4b:22:4b:bf:c5:71:33:b1:ea:24:88:23:
d1:68:6f:c7:62:18:30:98:32:53:57:ff:be:63:3c:
ab:e3:82:d2:45:6d:15:7f:23:6c:70:fe:85:b4:f5:
2e:5f:df:c0:fa:eb:a3:75:41:a7:35:c8:21:f2:23:
25:05:2c:05:8d:1c:72:b8:ee:96:3d:9e:70:4d:9e:
a2:f5:ed:72:39:64:19:94:57:7b:54:be:00:1f:e0:
e3:c2:36:cf:90:52:0e:51:2c:2f:e5:5d:f3:26:21:
4a:ec:d4:6f:72:47:07:45:3a:91:85:68:10:d4:2d:
49:9a:41:e2:94:9a:87:51:bb:53:2e:fd:8e:bd:d2:
c4:bc:ac:90:bb:77:fa:1d:47:5c:d1:cc:73:83:a9:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CD:DA:47:2A:20:6A:6E:37:A6:37:AF:35:7C:FD:D0:C3:31:9F:7C
X509v3 Authority Key Identifier:
keyid:AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:c3:79:16:0e:7f:d6:53:8d:1f:78:59:ee:af:07:bd:65:
b5:82:61:85:2e:3e:95:56:c9:7f:93:18:80:8c:30:18:5a:ab:
5f:ae:67:ec:68:32:1d:6a:dc:d5:1b:ec:cd:b2:7a:a8:ef:19:
84:98:b2:ad:fb:89:d7:68:24:9e:70:81:c6:04:b9:57:66:e5:
c4:a8:83:51:e8:c7:57:30:22:58:cf:af:01:e5:61:43:77:e6:
86:75:48:96:c2:15:b2:dc:50:7e:52:c7:07:b7:41:3c:12:bb:
5f:8e:b3:63:52:1d:98:9b:d6:c3:78:62:cb:36:04:05:c2:8b:
ac:50:24:a8:f1:51:99:05:43:c9:d7:8e:08:89:a9:35:02:ca:
0c:a3:35:3c:db:23:e0:b0:70:ec:42:53:a2:7a:56:ee:af:fa:
14:47:31:b1:9c:8e:27:3b:18:01:a5:d2:ba:ee:a5:93:2f:7e:
a0:0f:b5:99:98:d4:76:92:48:69:e3:fd:86:31:a9:56:1f:06:
11:72:b2:6c:c8:35:db:a9:a8:dd:4c:30:e7:c0:0f:3a:c3:41:
a9:eb:a6:ac:96:36:e4:ca:c6:71:fa:3f:33:f7:d7:53:d7:49:
50:d0:ec:a5:3e:0b:29:1c:ae:b6:b2:cb:64:14:98:be:9e:e3:
23:3f:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:01:03 2026 by rpki-client