Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier: 4l5G5o829DnaECsVpFeXLmRkv4vQ28IaTH++Bk2GoE8=
Subject key identifier: 40:17:CC:D7:DE:6B:C7:DD:C0:6E:CE:10:76:CE:78:34:43:05:C5:EC
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 019D39E5FD7F97F4DCF2B55F57E8B14E59B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number: 05A9
Signing time: Sun 29 Mar 2026 14:01:07 +0000
Manifest this update: Sun 29 Mar 2026 14:01:07 +0000
Manifest next update: Mon 30 Mar 2026 14:01:07 +0000
Files and hashes: 1: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: Ngzi1DJxIFYxUIt6YEbTK/frzVqNtOBM9Ey6tmHQ1ds=)
2: z-c9Pey3216LPC0KHV3ix--by3k.roa (hash: 3wJbwPppaRKKbJHcpNB2CmCnMT+2mo4g0n5EWgLuCaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:fd:7f:97:f4:dc:f2:b5:5f:57:e8:b1:4e:59:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Mar 29 14:01:07 2026 GMT
Not After : Mar 30 14:01:07 2026 GMT
Subject: CN=4017ccd7de6bc7ddc06ece1076ce78344305c5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:80:41:e6:fc:b5:27:e0:fa:89:c6:dc:c8:
bb:35:0e:a0:0b:f7:16:5d:7e:23:4c:2b:0f:85:46:
5f:1e:33:6e:ca:a5:92:7e:df:76:5e:a7:75:1b:ff:
78:2c:7e:76:98:cd:75:4a:97:f6:d3:30:fb:c2:65:
90:21:03:34:9a:2a:87:9f:ff:05:76:72:a7:ec:2c:
38:f4:70:80:4e:fa:50:5d:3f:a8:6a:ee:28:8d:d3:
b5:9c:26:bb:53:7a:59:c5:e2:e4:31:da:49:b4:e4:
d2:f7:7d:7f:2b:49:7d:6e:16:38:76:2e:22:b2:1a:
cd:51:03:7a:5d:ea:55:1c:e7:95:4f:a5:95:87:5d:
1d:d6:02:95:a9:9c:2c:37:18:af:1e:d0:34:ee:99:
bc:75:f0:0c:0c:e0:75:51:3a:61:d1:38:5e:3e:23:
09:d8:2e:60:99:fa:50:ad:1a:99:d3:8a:52:1b:15:
31:d9:b6:70:93:4b:a2:37:4b:a5:7a:4b:45:fb:0f:
55:d8:2e:d6:f1:60:88:48:29:ef:88:11:5f:a5:5b:
4a:70:52:c3:f4:02:85:42:9e:e5:13:bc:e6:0c:e0:
01:6b:bd:c3:04:75:39:7f:d0:c9:06:e1:40:45:a9:
de:95:e5:40:43:46:57:a7:4b:84:48:2e:d0:38:d8:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:CC:D7:DE:6B:C7:DD:C0:6E:CE:10:76:CE:78:34:43:05:C5:EC
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2c:ab:b4:3f:d1:28:e7:8b:66:18:6f:22:2c:af:6e:43:30:
10:df:1a:55:ec:30:cc:eb:34:88:46:e1:86:c4:bd:09:6e:76:
41:f2:c1:88:1e:0a:ab:02:b2:79:71:24:bc:50:da:4e:d3:d1:
42:ef:bc:00:c4:b3:20:c8:bf:19:cc:4f:86:c6:66:f8:37:a5:
76:e6:a5:c1:53:36:ec:0a:49:02:a9:b5:60:91:87:32:c3:86:
cc:e1:9d:b6:14:d3:10:ac:e4:ac:76:71:7e:9f:ba:09:34:0d:
99:cc:cf:70:eb:76:a5:3a:6a:44:aa:f7:bb:d6:3a:df:9c:a7:
99:d9:74:6b:7d:9e:6a:5c:a1:e0:70:dc:2d:84:15:c2:1c:9c:
d7:ae:70:1b:47:61:6b:24:47:d0:58:ea:e3:b8:0d:bc:d3:c6:
77:23:2f:33:6e:32:bf:b1:14:e0:c4:eb:99:59:68:2f:bb:ca:
d4:d5:80:ef:d9:48:92:2c:56:b7:a9:6f:28:3b:ec:38:f9:5c:
bc:99:63:d3:b0:7e:ce:63:78:da:c6:eb:ae:ca:99:bb:48:94:
9f:a5:05:ad:d0:77:90:a7:64:7f:4f:89:04:fa:0b:94:f6:f6:
b1:26:0e:44:ff:47:c0:a0:ca:a7:dd:da:09:bb:0e:a1:0a:b9:
7d:a9:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:47 2026 by rpki-client