Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: ILarllkA4ukFnf102CyFumEI+vWaYEkvN6iwGeDOBDQ=
Subject key identifier: EF:F9:DA:C9:8C:FD:DA:C5:96:6B:B2:85:DD:CC:C0:D2:C5:41:CF:9D
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 01A165A1DA5835035BAD5805C6F6879A1A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1ABA
Signing time: Thu 22 Oct 2026 22:01:08 +0000
Manifest this update: Thu 22 Oct 2026 22:01:08 +0000
Manifest next update: Fri 23 Oct 2026 22:01:08 +0000
Files and hashes: 1: ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa (hash: wWznWI3pS+Ln2wiCRlmdeHQDHSW6bkqR14q4qqXsCjc=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: 1Vm0DD1407rfl++j+u97FvHe4WMeur87vo68WFw0fcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:a1:da:58:35:03:5b:ad:58:05:c6:f6:87:9a:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Oct 22 22:01:08 2026 GMT
Not After : Oct 23 22:01:08 2026 GMT
Subject: CN=eff9dac98cfddac5966bb285ddccc0d2c541cf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:b8:78:98:27:37:a5:d7:f2:af:1b:b8:15:
16:2c:5b:1e:17:89:5d:b0:0f:e7:08:cd:fa:3e:53:
08:08:ca:30:6a:fc:06:06:40:80:a0:25:78:0a:53:
e3:61:d4:60:8b:8a:98:c0:84:b1:1c:5a:a9:d8:37:
ed:e9:6f:08:56:e4:97:ac:3c:c4:4a:83:e8:db:6f:
6d:a3:d3:97:7f:99:0b:c9:be:bd:96:b4:ce:80:06:
41:ac:a6:e7:a7:c0:e5:67:89:9a:71:15:a0:2c:57:
f0:29:05:4a:d5:d9:d1:00:8f:42:a2:30:99:c1:86:
61:34:d0:d6:55:9d:aa:f4:f6:2f:29:72:24:db:45:
63:c8:1d:83:45:a2:07:86:3e:1c:3e:ba:f5:7d:83:
89:4e:56:5b:e4:d1:0b:a8:74:c8:7b:df:66:f5:72:
8d:7b:91:0e:ba:83:db:d8:62:99:d9:0f:5f:47:a7:
e3:d8:2d:74:20:24:d8:18:72:59:41:92:4f:48:36:
00:bc:5f:8b:df:a3:c0:a5:b0:12:82:fd:c2:df:03:
08:57:a6:32:e2:11:3a:cb:11:44:38:52:a9:31:47:
77:6e:4a:d5:90:0e:bf:8b:35:8f:b4:6c:ec:ee:ae:
d8:39:98:09:8b:d8:f4:ed:43:43:5b:af:33:c0:5b:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:DA:C9:8C:FD:DA:C5:96:6B:B2:85:DD:CC:C0:D2:C5:41:CF:9D
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:f1:40:d3:c9:af:1a:a8:2d:ad:a7:5b:9a:9b:0d:4b:5a:
f3:05:a8:8c:58:ca:e5:18:50:d0:29:7a:15:89:e2:47:d9:dc:
bb:d3:09:0d:c4:f7:ae:71:10:53:47:37:31:cb:fe:b1:dd:3a:
57:54:2f:b3:19:71:22:fa:4f:06:de:b2:32:75:bd:57:75:10:
96:2b:c1:ff:a8:9b:40:fb:1e:96:35:3e:f8:e6:45:c9:5e:9b:
3d:7d:52:04:31:82:de:3c:5f:d1:b4:99:04:59:26:00:15:b5:
ff:3f:1e:38:00:8e:cf:0c:e6:cb:dd:59:8e:87:31:f0:ec:45:
bd:ff:66:c1:90:4b:13:a6:69:dd:01:66:06:19:5d:b3:c9:ab:
18:5c:2a:92:58:33:62:d8:61:fe:ba:fd:df:67:68:ad:1a:ef:
ff:90:f8:cc:a7:a5:03:3e:63:5f:24:39:62:3b:52:7a:67:bb:
bb:74:9d:b7:3c:d3:c5:8a:6d:0a:86:1d:59:a1:96:e8:8d:ff:
50:4d:1b:81:57:62:ee:e5:ae:cf:a5:ea:9f:b0:75:ba:f7:4a:
5c:db:1a:5b:99:9f:60:f6:7b:0d:31:28:ee:00:fb:a8:18:cc:
4d:ce:a7:e8:5e:f8:8c:ad:eb:1d:9f:82:ac:2f:9b:fb:ef:e4:
3d:cd:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:26:54 2026 by rpki-client