Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: jnJ1jxkD274YqDwLCEGTHD+FRCq7UTZ4LzmPHA3Pt/4=
Subject key identifier: 01:73:F0:93:80:3E:30:0E:0D:AB:14:F2:A1:98:99:21:0A:90:6A:19
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 019D37C1104008A956F8D8493D3DEF1288EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:32 +0000
Manifest this update: Sun 29 Mar 2026 04:01:32 +0000
Manifest next update: Mon 30 Mar 2026 04:01:32 +0000
Files and hashes: 1: ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa (hash: wWznWI3pS+Ln2wiCRlmdeHQDHSW6bkqR14q4qqXsCjc=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: tsRFcAYj1l6pa3v0Odm3d189HBcT4rZK1/TYqSLJ3y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:10:40:08:a9:56:f8:d8:49:3d:3d:ef:12:88:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Mar 29 04:01:32 2026 GMT
Not After : Mar 30 04:01:32 2026 GMT
Subject: CN=0173f093803e300e0dab14f2a19899210a906a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:20:3d:b6:f0:e2:30:5e:b8:a2:18:22:36:
87:ff:d9:62:7c:5f:10:f3:f8:a1:4c:ea:12:cf:a6:
74:f3:7f:70:e5:a0:80:f0:c0:6a:79:43:ef:ee:0b:
9c:b1:ef:eb:f3:cd:b0:bc:95:f5:9f:32:c3:7b:d0:
a0:16:e4:b9:6d:31:f4:8b:37:ff:a2:44:15:6c:2b:
51:55:ee:56:e7:44:3c:ec:a5:33:89:30:20:72:a6:
39:8e:f7:15:7a:33:dc:69:4f:b9:63:5d:08:be:fe:
f6:25:48:99:1e:f3:01:f0:64:9f:8a:ee:38:c6:a4:
65:d6:e0:bd:a1:fe:4d:a2:cf:13:b2:72:52:e4:7d:
4b:a6:a4:3d:07:bb:22:d6:5f:b4:29:4e:0f:72:f0:
f5:e4:98:6a:8c:49:84:09:74:aa:cd:5c:43:e9:70:
6a:3b:5d:42:eb:21:e0:95:71:6c:fe:94:c2:d3:ad:
88:81:a1:48:e6:bc:d7:0f:8c:ce:07:c3:fc:48:b1:
74:c0:dc:d1:d0:54:14:33:00:a0:de:87:6d:14:33:
26:95:aa:6a:29:36:91:6a:7b:35:4e:ff:4c:0b:a1:
38:e8:b0:ab:a2:1c:24:9b:bd:53:0c:3c:7f:cf:41:
71:60:5d:59:0a:e2:7c:3a:25:ea:ea:0a:53:3c:d3:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:F0:93:80:3E:30:0E:0D:AB:14:F2:A1:98:99:21:0A:90:6A:19
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:16:c9:29:55:b1:e8:a2:3a:9e:2f:20:2d:07:db:a7:0e:00:
d0:61:4d:28:c2:8c:fa:55:82:ec:b6:7d:2c:51:d1:c2:3f:3d:
85:e8:a7:23:61:43:da:d7:7f:eb:87:2a:62:31:8d:31:64:fc:
d9:cd:f5:67:66:0c:f7:cf:ee:99:52:14:eb:d2:ec:5a:fe:0e:
11:d4:77:4d:f8:21:1c:87:93:17:3a:fe:99:c7:34:85:1a:19:
3b:ab:e2:a7:84:4b:0e:e3:59:0d:01:ef:fa:c1:a2:fb:b8:ad:
57:d9:cf:5b:fb:20:68:56:66:dc:62:02:57:a0:b2:e1:5e:cf:
c8:30:2b:52:64:7f:f0:d0:22:1e:f4:73:2e:bf:45:51:7c:3f:
ff:e6:ae:8d:68:9f:3e:6a:7a:f4:9c:6f:ee:e2:78:d3:f0:e1:
95:3f:18:d9:cd:02:25:d4:33:9c:ed:d2:c5:5b:2d:96:13:29:
67:84:1f:66:2f:04:29:ed:6e:2b:3c:eb:be:96:62:a0:a1:a7:
cd:91:0f:7e:3d:84:9c:e5:88:c2:7f:37:35:af:37:f0:5d:59:
c3:65:ad:00:ec:5f:a8:50:b6:a7:a4:da:20:1f:a2:31:27:2f:
4b:37:e2:7c:6d:30:b5:4c:35:03:92:e6:2f:81:79:a7:01:e0:
6f:ea:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:47 2026 by rpki-client