Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: 9d2I7L8U7yFRxCA479l1GRd8v6LAzE4R/JJfDY3yk50=
Subject key identifier: C2:6C:CC:48:FC:CC:14:E5:8E:03:1C:87:AE:37:54:C3:F2:33:A0:80
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 019D3AC1985FF4960C66F78DEF3D95CD1138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 18:00:59 +0000
Manifest this update: Sun 29 Mar 2026 18:00:59 +0000
Manifest next update: Mon 30 Mar 2026 18:00:59 +0000
Files and hashes: 1: 6H1pHroW_WpI3RuJ_XZZvGns_sM.roa (hash: NhpuQWl3vvTwNJCxL4zGLvg+GHPtSA273p3r0OlIk9U=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: gIOnPpIYQveMORxA7qYezgcxNKaUSXaUkgsU85ADTbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:98:5f:f4:96:0c:66:f7:8d:ef:3d:95:cd:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Mar 29 18:00:59 2026 GMT
Not After : Mar 30 18:00:59 2026 GMT
Subject: CN=c26ccc48fccc14e58e031c87ae3754c3f233a080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:00:cf:06:79:5d:58:a0:00:bc:a4:e0:17:
ae:8f:33:db:38:b6:fb:d0:fb:cd:a6:4a:62:0d:19:
84:2e:c4:1d:f4:51:71:55:49:3b:ac:c7:46:ed:81:
db:59:6c:1d:b9:f3:69:83:44:55:3d:b9:ce:d5:7e:
5c:55:73:17:66:78:6f:57:50:fc:93:5c:8c:55:70:
b3:d7:7f:74:ee:39:9a:cc:c5:3b:8f:f5:d8:70:66:
80:53:29:b0:42:59:be:54:2c:31:ad:ab:9c:07:f2:
2b:6f:c1:58:13:8f:2d:6b:6d:9c:fb:48:3d:2e:05:
fc:11:62:e1:58:64:54:34:f2:98:4e:94:53:ad:2b:
82:81:b2:36:fa:88:b2:67:41:8b:07:65:34:19:6e:
a6:50:2c:e8:f7:de:c5:ce:54:f0:e6:a4:53:21:10:
48:17:2d:07:b8:53:6b:e4:78:b2:4d:e1:90:8d:be:
d9:ac:2a:d6:fa:4e:e7:b4:a8:e8:49:4b:f9:8f:5a:
12:fa:08:48:15:22:3c:52:ef:01:2f:6b:3a:e0:85:
b4:1b:39:17:72:a6:a7:71:55:64:2c:98:a3:c8:03:
fc:de:ab:45:63:2b:a7:d8:57:e3:0e:fb:aa:c7:1f:
6f:7c:25:90:72:81:7b:eb:23:9d:c7:ff:59:2b:b3:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:CC:48:FC:CC:14:E5:8E:03:1C:87:AE:37:54:C3:F2:33:A0:80
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f2:af:1d:67:c8:ba:d4:1b:ee:ff:ef:7e:1b:91:31:d9:47:
17:f2:94:cc:68:26:84:e1:ec:6a:9a:33:e9:0a:ea:90:89:fb:
11:90:0a:12:43:ca:28:8d:96:24:4a:48:4b:4b:8d:e2:e2:fa:
85:57:6e:3b:d2:56:d1:ba:a3:09:53:7a:a6:0e:b7:3e:07:07:
2d:cf:29:3a:6f:a6:ef:32:4c:bd:53:69:41:07:96:ee:f7:c5:
37:d0:76:59:9d:86:a2:f0:81:26:08:af:b0:4d:95:6c:c3:01:
6e:9b:40:22:e1:40:9e:14:76:71:37:31:a0:7a:9b:ae:12:a7:
21:9f:8d:7e:b2:80:f6:75:63:36:9b:bd:61:3e:42:19:f3:ca:
64:da:e7:48:4d:5f:50:d3:2e:c3:5c:28:c6:86:fe:c5:70:9e:
e0:e4:e3:73:5e:4b:9e:40:1b:bb:6e:e0:28:5e:6c:43:e6:f2:
2c:9c:c7:da:44:e5:0e:fc:eb:c7:49:16:cd:f9:78:0a:a8:6d:
88:1b:1c:ee:aa:57:af:d9:30:42:84:b5:85:8a:25:10:7a:2b:
03:1f:b8:f0:09:3a:51:c9:6b:de:9d:06:5d:95:e4:65:44:18:
89:04:89:03:56:f5:7f:eb:0e:58:21:aa:51:90:02:9b:26:d1:
8f:05:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:27 2026 by rpki-client