Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: 5FZjg4XSqTVgNl36eqE86Wcyibw/8WjSWeB0ixtdkM8=
Subject key identifier: C2:72:1B:B2:AC:05:6C:D6:33:46:4E:2D:02:4F:8B:EA:DF:D1:4E:1C
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 019D39AE87D0125B7D28F381E330CEB1A744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:00:32 +0000
Manifest this update: Sun 29 Mar 2026 13:00:32 +0000
Manifest next update: Mon 30 Mar 2026 13:00:32 +0000
Files and hashes: 1: 4SfojSm1O0yZDYuVtjhC0oqjoZo.roa (hash: q4mcTRajmA1x3P8ne7N/z6IxFaFTMj4qWNPcuiyXN+A=)
2: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: LHMQATx3pOHKhlmXIc1eI7EvKDlEtYvX2jKeq3bmK0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:87:d0:12:5b:7d:28:f3:81:e3:30:ce:b1:a7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Mar 29 13:00:32 2026 GMT
Not After : Mar 30 13:00:32 2026 GMT
Subject: CN=c2721bb2ac056cd633464e2d024f8beadfd14e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:28:64:a0:24:54:37:3d:ab:27:9e:7a:bf:
98:84:7c:6f:e7:6d:06:db:8a:af:6b:7d:62:5d:95:
41:db:9a:46:45:c8:41:b8:4d:34:44:b0:b1:13:60:
4f:07:1a:1a:21:3a:bd:16:07:b9:43:5c:f9:7a:8e:
03:25:53:eb:f8:86:9f:70:9f:f5:e4:8e:c9:38:c5:
c1:30:9b:a5:bb:e7:07:1b:f1:44:6e:0e:58:06:2c:
c7:a2:c8:fc:57:8d:a7:3d:af:b7:9b:57:df:31:bc:
16:c8:14:7a:71:66:ec:0b:be:8d:92:2f:69:7f:e7:
c6:ca:7b:2c:0e:40:ef:05:0c:0b:79:c0:57:14:37:
95:54:a6:a3:c3:13:80:f3:85:bd:d4:37:2e:53:bd:
15:35:f1:90:64:9f:6a:03:2c:cd:46:2f:3a:27:db:
ec:82:3d:28:a8:bb:2e:2d:82:a2:cf:06:b8:91:25:
70:14:bb:dc:b4:2b:1a:d7:b2:39:61:37:79:eb:5a:
c8:72:3a:31:7b:4e:ad:3b:f0:f3:c1:21:be:d0:6d:
b0:9e:27:96:1f:2c:4f:dc:27:3c:ed:6a:17:68:21:
dd:fe:5c:28:18:e4:7a:16:a5:cc:5c:35:b2:d5:eb:
a0:06:1b:fd:9b:69:02:51:1d:41:2c:b8:10:05:e6:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:1B:B2:AC:05:6C:D6:33:46:4E:2D:02:4F:8B:EA:DF:D1:4E:1C
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:d7:84:7b:61:b8:4e:49:a9:56:b9:3f:20:1f:85:96:39:
62:fd:98:44:90:08:f1:09:8b:6e:e6:e4:81:ae:76:fd:44:a5:
c7:19:0e:03:16:52:95:6e:5f:72:68:33:32:19:73:b3:76:e8:
a8:57:44:07:50:b6:46:35:5e:59:3c:43:0c:79:df:3c:d6:7b:
4d:2f:f4:69:cd:cd:f8:ef:06:76:fd:69:78:eb:e4:07:e2:89:
00:b6:82:11:2f:02:8b:28:b7:15:0b:c4:46:e8:92:47:5c:a9:
25:31:d8:a4:71:a3:53:36:49:5c:bd:2e:a0:f3:70:96:25:e9:
80:1e:88:db:e7:9f:aa:0a:25:8a:30:14:e5:d7:d0:7d:e7:43:
4b:3b:fc:ba:81:b4:45:83:f2:ba:07:f6:7e:d6:3d:97:5d:a1:
8e:e6:58:e5:e3:a2:d7:59:28:98:4d:d6:4d:46:e4:d1:28:07:
5e:b3:19:f0:31:62:b9:e4:ff:26:e4:71:5f:b9:a5:82:0b:db:
e3:ae:3c:66:b8:5d:2c:06:d7:71:30:7e:77:9e:f3:16:c5:d5:
f6:5b:a0:65:9e:59:08:2f:0a:61:84:55:d2:2f:2f:8a:74:4f:
5e:6b:2c:4e:7d:40:d1:89:e9:ab:fa:d5:f0:c8:f0:23:ad:17:
29:b1:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:57 2026 by rpki-client