Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: 5VKtOj77t/w6ZmFif4Jr36ueDAbqVfKQJIyeWVhGL48=
Subject key identifier: C3:45:DB:BD:D6:C8:70:19:44:82:E2:CC:94:CE:6B:83:A6:E0:FA:71
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 019D3865CED6B0E2908254168EDAF9D0304A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: LnlKGqjGvTYWx41kxdwt/6U6R6NP3vJVpu2QBVcqedM=)
2: tQeq3gyDlggE_iMVfQtijaWolKE.roa (hash: +8U51vzZRoC0d7LUoiUC8rmqZBGQmF1Hqr6UPr/Xav8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ce:d6:b0:e2:90:82:54:16:8e:da:f9:d0:30:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=c345dbbdd6c870194482e2cc94ce6b83a6e0fa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:e8:f1:3b:1b:a3:e2:59:ab:5d:69:0f:32:
3d:0c:56:67:0c:38:16:bd:b3:d4:cd:da:24:68:cc:
69:4e:6d:99:1d:36:8a:c4:f3:53:4d:18:ab:e1:f1:
d2:d9:b1:c8:16:32:5f:26:36:25:59:c7:53:6b:32:
df:a9:e5:d6:77:b2:3c:c9:f9:9b:12:c4:64:86:e6:
3a:6d:26:e4:89:3b:97:59:14:f4:b2:c8:5f:bd:02:
c0:28:22:20:1c:28:d2:65:12:58:2e:e8:04:e5:70:
ad:c2:d6:be:29:ae:62:c9:1d:7e:51:e3:96:a7:bd:
f0:aa:3c:bf:3f:96:33:a3:13:41:cd:8f:90:d1:e7:
1f:04:59:49:7e:93:4a:cf:28:b1:02:1d:66:a9:2d:
fc:4e:61:0b:1b:7a:2d:4c:19:98:25:8c:a2:df:07:
80:2e:40:38:0d:ec:88:89:df:87:67:09:a7:eb:24:
30:fd:63:8e:95:0d:8a:45:17:66:47:e3:5f:5d:0a:
94:10:34:28:98:32:4a:07:2b:3f:4b:33:ed:44:c5:
87:d9:9d:92:55:d4:4d:87:9b:bd:dc:6b:d8:15:85:
e7:d2:3b:d7:53:51:3c:b7:3e:73:31:aa:55:13:b6:
9f:45:db:fa:7f:ec:44:e8:f1:41:62:18:06:88:28:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:45:DB:BD:D6:C8:70:19:44:82:E2:CC:94:CE:6B:83:A6:E0:FA:71
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6f:7d:34:e2:8b:89:57:63:90:dd:bd:31:83:ee:7d:04:08:
f8:65:2f:dd:94:bc:dc:ee:3d:2c:ae:24:db:b9:dc:03:c5:44:
c7:20:11:73:55:71:26:50:66:01:d1:34:c7:55:47:ef:15:99:
f6:4b:5e:f7:c0:b2:c2:bf:6b:f0:06:9a:9d:23:7a:d0:bc:ad:
7b:16:9d:48:8c:b8:ca:f9:81:78:2e:d8:74:b7:95:cb:fb:d5:
e4:1a:b4:3d:5d:e7:f9:3e:bd:85:15:0b:0a:48:ca:95:fa:ef:
eb:a3:05:27:b9:1d:1b:ce:5f:a8:9d:c1:12:58:b1:fe:a3:ce:
28:02:59:4f:aa:0c:ae:ca:4f:4d:ac:7a:2c:19:ac:e6:ed:fc:
c9:d6:42:d0:6d:ce:d5:8b:fd:74:43:0d:a4:3b:3b:ff:c4:6b:
dd:b1:db:9a:39:ad:e7:47:b5:b9:ef:ce:f0:6e:1c:35:c7:86:
7e:97:f0:e6:a5:a5:41:57:39:e2:b2:8e:f4:8e:d5:f3:f8:00:
31:af:fe:2d:48:b3:ab:d0:13:72:5f:aa:10:03:5b:62:93:16:
50:77:cf:96:08:93:09:31:6b:a8:8b:5f:a3:bb:92:ad:9c:7a:
52:e6:3b:89:d3:9c:b4:47:36:e3:78:f2:55:6d:40:f7:cd:0d:
a7:bb:1f:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zc7WsOKQglQWjtr50DBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgzNWQwNjAxNzZlZTgxNjBjNzkzMGY4N2U2OTM1NTkw
OTBkNzgwHhcNMjYwMzI5MDcwMTI5WhcNMjYwMzMwMDcwMTI5WjAzMTEwLwYDVQQD
EyhjMzQ1ZGJiZGQ2Yzg3MDE5NDQ4MmUyY2M5NGNlNmI4M2E2ZTBmYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQLo8Tsbo+JZq11pDzI9DFZnDDgW
vbPUzdokaMxpTm2ZHTaKxPNTTRir4fHS2bHIFjJfJjYlWcdTazLfqeXWd7I8yfmb
EsRkhuY6bSbkiTuXWRT0sshfvQLAKCIgHCjSZRJYLugE5XCtwta+Ka5iyR1+UeOW
p73wqjy/P5YzoxNBzY+Q0ecfBFlJfpNKzyixAh1mqS38TmELG3otTBmYJYyi3weA
LkA4DeyIid+HZwmn6yQw/WOOlQ2KRRdmR+NfXQqUEDQomDJKBys/SzPtRMWH2Z2S
VdRNh5u93GvYFYXn0jvXU1E8tz5zMapVE7afRdv6f+xE6PFBYhgGiCh9uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNF273WyHAZRILizJTOa4Om4PpxMB8GA1UdIwQY
MBaAFKuoNdBgF27oFgx5MPh+aTVZCQ14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NmQxZDItYTZjMC00N2JlLTg3NzEt
YzNhYjZiMzQ2NmMwLzEvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NmQxZDItYTZjMC00N2JlLTg3NzEtYzNhYjZiMzQ2NmMw
LzEvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ299NOKL
iVdjkN29MYPufQQI+GUv3ZS83O49LK4k27ncA8VExyARc1VxJlBmAdE0x1VH7xWZ
9kte98Cywr9r8AaanSN60LytexadSIy4yvmBeC7YdLeVy/vV5Bq0PV3n+T69hRUL
CkjKlfrv66MFJ7kdG85fqJ3BElix/qPOKAJZT6oMrspPTax6LBms5u38ydZC0G3O
1Yv9dEMNpDs7/8Rr3bHbmjmt50e1ue/O8G4cNceGfpfw5qWlQVc54rKO9I7V8/gA
Ma/+LUizq9ATcl+qEANbYpMWUHfPlgiTCTFrqItfo7uSrZx6UuY7idOctEc243jy
VW1A980Np7sfeg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:56 2026 by rpki-client