Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier: igtgHvyaKAm3KhC1NyYhs85AlTEZfnwotJKgJABvtvw=
Subject key identifier: C4:10:49:31:CC:64:03:50:15:E0:F7:0B:77:F2:BB:31:FE:D0:1E:A6
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer: /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial: 019D382E698047688683211B29F5B3E51171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number: 0765
Signing time: Sun 29 Mar 2026 06:00:58 +0000
Manifest this update: Sun 29 Mar 2026 06:00:58 +0000
Manifest next update: Mon 30 Mar 2026 06:00:58 +0000
Files and hashes: 1: bin4sOPD5OKGfACXCfj3DQEIKBY.roa (hash: VnhSf12ZJGOlUh0T6+7Mdxo6I0H2lB8E2bDRpPDL8BU=)
2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: 5FhGQig0rdatslGeKWW/peQCs4UjrEkDiL9kBZosIA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:69:80:47:68:86:83:21:1b:29:f5:b3:e5:11:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Validity
Not Before: Mar 29 06:00:58 2026 GMT
Not After : Mar 30 06:00:58 2026 GMT
Subject: CN=c4104931cc64035015e0f70b77f2bb31fed01ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:05:dd:a2:02:4a:99:5e:f9:39:b5:56:ed:
f1:43:14:2b:dd:34:ff:67:1a:63:ec:07:6a:76:2f:
2a:bd:72:b8:3c:2d:97:4a:08:54:37:01:37:8e:39:
28:88:7e:81:e6:e0:a8:ff:7f:0c:cd:21:05:6e:ac:
32:3d:e8:4c:b0:00:ec:2a:d5:8e:0d:eb:f9:80:b9:
17:aa:2e:06:0e:e1:71:0d:3f:f9:82:c9:17:3d:24:
e8:d9:d5:6b:8d:6d:13:7c:0f:3b:39:60:e4:00:c6:
3f:2b:5a:87:7b:f6:42:cb:3b:40:16:a2:7a:a9:f8:
c2:df:79:30:1c:dd:61:4c:f8:14:0c:f7:2b:91:07:
db:7a:b9:d8:43:65:1b:51:a9:f3:b1:9a:4c:5e:bf:
b3:6b:5c:d4:e7:5b:46:a2:b7:49:cc:ea:db:4c:b7:
df:7f:fd:4f:e4:1c:6a:2b:2f:bf:31:37:57:6b:ec:
c7:8b:62:5e:59:3a:f9:a4:72:ca:49:30:7b:97:9b:
39:07:4c:92:2a:69:dd:d6:fd:65:91:ed:a8:5b:df:
7a:fb:62:d1:be:05:9c:19:05:91:52:ba:75:c5:96:
70:aa:35:67:b9:ed:31:84:02:e5:c8:c7:50:cf:6d:
f2:b1:a7:27:b5:53:94:90:1c:67:7d:e9:4c:ad:f9:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:10:49:31:CC:64:03:50:15:E0:F7:0B:77:F2:BB:31:FE:D0:1E:A6
X509v3 Authority Key Identifier:
keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4e:80:63:ef:26:6b:78:74:17:1c:37:4c:68:63:98:58:ba:
7e:d1:f9:1e:19:e8:d4:d8:64:ed:f7:94:fb:15:60:1c:70:1f:
d3:e3:45:5a:46:2a:3f:11:ed:b7:ca:17:d3:b0:1b:1c:d7:b3:
55:f0:fb:c9:a0:6c:9c:d3:87:8e:9c:a1:3c:f1:2e:24:c2:0a:
ca:da:1e:7d:2a:5e:1a:a2:cf:cc:6a:58:5b:54:3a:1f:da:11:
fa:33:bb:ae:07:0f:56:cf:9d:fa:d1:e8:c7:1c:80:35:c5:f3:
4a:72:02:b0:9c:51:76:0c:dd:b7:0b:de:0f:1c:e8:bf:0a:6a:
54:86:e4:ee:7f:14:fe:63:9b:51:2a:05:26:de:27:47:3d:80:
1d:3d:6d:42:c5:9a:1c:9b:9e:35:d9:7f:55:0a:54:08:36:9b:
90:e6:5e:3e:c1:85:a4:a3:c3:4c:1e:83:82:33:53:b4:ef:5b:
cb:25:bd:2d:7e:95:41:2f:76:7f:f7:92:f9:15:cc:b4:db:39:
05:62:99:14:fd:ab:02:86:03:e4:fc:2e:f3:8c:b2:b5:24:e2:
3f:c4:37:77:fb:d8:60:82:43:22:8b:96:98:c0:0c:7a:74:73:
60:30:dd:e2:b4:6c:ca:4f:17:ea:7b:ce:d9:72:b7:3e:73:2f:
78:1b:60:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:47 2026 by rpki-client