Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: 3uBhh/inONq51lq3/nVREZPN8adFbcsPIKH2ZQ6xZ5k=
Subject key identifier: 3A:21:45:5C:0E:BE:2F:9C:49:CB:6A:CF:22:C8:61:BA:01:07:1F:5A
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 019DCF075C484D6A57FBCF35ABE220D78C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 0392
Signing time: Mon 27 Apr 2026 13:00:59 +0000
Manifest this update: Mon 27 Apr 2026 13:00:59 +0000
Manifest next update: Tue 28 Apr 2026 13:00:59 +0000
Files and hashes: 1: LzYZHC-rjJGbruYM23VscVWulpM.roa (hash: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: 6Zau0sgHUnYD0WGmd2h6r/iUQNcRskr31IhBCY0q4Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:5c:48:4d:6a:57:fb:cf:35:ab:e2:20:d7:8c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Apr 27 13:00:59 2026 GMT
Not After : Apr 28 13:00:59 2026 GMT
Subject: CN=3a21455c0ebe2f9c49cb6acf22c861ba01071f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:d8:c7:2c:82:ca:b0:6f:42:c1:d2:d7:cd:
f5:c9:b9:ab:6b:62:a7:e2:5d:2f:e7:02:80:99:98:
13:82:57:ec:f4:70:18:d3:17:bf:08:e9:60:0c:87:
d3:79:21:17:74:05:4a:d0:85:16:fc:71:93:6d:96:
bf:a1:90:89:e1:23:b9:e2:72:aa:4d:5a:8c:ef:84:
f2:03:42:54:06:04:00:4c:bd:7b:f2:72:65:34:ef:
82:9b:a3:1d:bc:16:8d:3a:de:54:87:c6:b1:86:bd:
c9:72:32:93:9a:d6:76:1f:fb:fe:a5:8d:39:ad:fd:
1a:34:fe:d7:12:65:d3:b5:6f:86:09:3e:6d:d2:6c:
3d:87:1e:ec:69:e4:7c:d2:76:32:63:fa:d1:52:5a:
06:b3:41:4a:ad:f3:34:71:63:a4:cb:15:99:c1:94:
8e:29:e1:b8:67:98:4d:22:52:0d:a5:62:59:6e:bb:
87:51:5f:b8:58:ac:13:b1:28:3d:36:b7:15:3a:b0:
15:02:f7:ec:51:01:e2:f1:dd:48:ce:44:f1:df:79:
8d:50:5f:ce:2a:c9:ae:40:b0:67:56:d0:af:bd:b1:
c7:29:31:62:cf:09:e6:a9:e0:a5:d0:84:a5:b2:32:
c6:55:20:26:95:62:5e:08:7a:e0:46:37:74:93:f2:
28:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:45:5C:0E:BE:2F:9C:49:CB:6A:CF:22:C8:61:BA:01:07:1F:5A
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1b:38:bc:1f:66:14:df:90:85:92:0c:1e:fe:ae:a1:49:36:
88:e7:bf:38:15:f4:09:8d:ab:60:23:14:20:a6:ce:30:3a:bc:
ec:c4:d4:77:b4:ec:ea:b3:5b:c4:b1:9e:2b:2d:eb:09:73:e7:
73:08:8a:6c:7b:be:98:d1:04:70:64:ec:50:15:ba:e6:da:69:
c5:65:4f:d4:28:4f:b6:59:be:73:e4:7f:99:ba:8f:9c:cb:c7:
ae:5e:75:01:f1:be:57:8d:3d:e6:a9:4b:4c:5e:04:e0:f2:3c:
6d:6f:84:fe:d4:bb:ae:5c:8e:86:de:e7:50:dc:fa:8d:4c:a6:
cb:c0:51:4f:3d:3f:55:8d:14:14:5e:fa:64:23:c1:d2:f7:44:
f9:64:ac:94:6a:04:0c:ab:cc:df:18:42:a8:80:f0:1d:69:a6:
68:92:f6:2c:fc:5c:6b:ac:ca:35:8a:0e:b7:ab:f7:e2:41:83:
a3:98:89:c0:d2:6a:b8:5b:19:bd:9b:4f:37:0c:04:0f:71:36:
a8:d4:7f:e7:42:12:db:39:c1:e4:a5:06:04:9f:69:78:94:f3:
75:26:a5:47:7f:0d:ad:a2:2f:26:aa:7e:38:e0:d5:98:a2:d6:
8a:92:6c:31:75:a1:ae:2e:45:37:a4:fe:eb:a7:04:cb:c9:20:
a9:f2:b6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:32 2026 by rpki-client