Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: A9LYkOjkVDfcdKXmswT/8cN0LUjVefuxF7rl3aVLMNc=
Subject key identifier: FF:81:11:58:1E:81:AC:55:33:23:8B:DB:EC:10:40:56:5F:4B:52:A5
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 019D37F73DA9F85C2F19E8B77E45C87AA837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: 1-NlXpS8qOmzJQxvh3Vemv6GfalE.roa (hash: HTFIVkm2pfbCpKdVoGWwpPhxe9WRjwNhw3rsgiBHLbE=)
2: 75AwziJR5w1JmorjN6nm2vuye_U.roa (hash: P4Uobg4aZmz71V7WcJ/2A9j6g9mMLhAaqFQfuo24nE4=)
3: S4NA7oSGgXey3Rldy_KPITNHmFc.roa (hash: pctvbrfIhJmWDmoaj1TcgltdORT390IlR3CQ4CeTHxA=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: U3Qjwgyf6Q+5PuDUMb0rAx2fflrKl9N6if6P8hbXrjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3d:a9:f8:5c:2f:19:e8:b7:7e:45:c8:7a:a8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=ff8111581e81ac5533238bdbec1040565f4b52a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:ae:3d:d3:0f:51:dd:75:1c:fd:0a:5b:fb:
44:aa:55:f7:b6:17:5f:34:b4:fe:ae:c0:5a:52:dd:
16:aa:0c:db:76:ea:09:4e:54:4c:61:a2:b7:b6:b7:
c1:e2:b8:eb:5b:7a:4c:09:fd:ae:76:ed:d7:03:2e:
9d:f7:2c:da:89:29:1f:3e:45:b0:8d:ba:9b:45:f4:
18:ad:9a:84:15:9f:48:b1:e6:f4:12:38:a8:2a:1a:
37:da:5f:63:40:4d:00:e6:07:f6:99:10:4d:fb:44:
ba:c0:82:04:38:b6:ce:c6:53:e7:2b:eb:06:5c:fc:
b3:70:7d:8e:d0:b2:84:a2:a2:97:d0:ad:4f:a3:eb:
88:67:c5:bd:f5:55:aa:68:30:bd:2b:92:22:e8:3e:
1d:12:3c:dc:de:fe:8d:78:a0:af:1b:78:34:49:d3:
06:2d:ca:fc:d7:f5:60:da:52:54:a3:e2:17:e6:6d:
3d:b8:da:f1:9e:2e:28:83:0a:c6:1b:67:97:d2:4d:
65:c8:ae:7e:0e:53:7d:82:61:d6:79:3d:ab:67:ae:
23:ce:68:25:3b:06:98:f7:f2:d9:fc:7d:e9:45:2b:
f4:02:6d:0e:30:7e:7a:c4:63:75:0b:4c:b1:7b:3b:
0a:c6:34:c9:92:b6:0f:67:6b:eb:50:3f:0f:95:c2:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:81:11:58:1E:81:AC:55:33:23:8B:DB:EC:10:40:56:5F:4B:52:A5
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1b:d2:42:0e:6e:62:39:06:95:2d:1a:cc:7a:4a:9b:52:d2:
18:50:8b:a5:55:b6:e5:ad:30:c7:0f:43:35:2a:11:60:02:fa:
8f:3c:e5:f1:9e:fd:ed:9f:8e:f7:63:de:8f:50:5b:16:d4:e5:
57:dc:2c:7c:7f:65:c7:3a:ca:7f:2f:08:53:66:87:14:2b:7a:
11:80:6c:a9:58:20:7c:92:49:42:20:d4:99:38:44:b3:09:22:
e0:fc:6f:b3:9c:80:2f:fb:70:0b:c8:f5:21:6e:ef:ec:52:06:
3e:02:4a:fb:27:c1:9f:ad:36:18:9e:41:d0:4e:bf:39:e3:18:
a8:e4:4c:ec:0c:23:2a:07:0f:ba:31:e1:77:25:42:e1:be:59:
89:c6:5b:d8:61:49:86:5b:20:2b:f2:1f:a1:93:ef:70:a9:e8:
3b:94:d4:a1:da:b8:b0:57:49:1e:b7:77:2b:ea:4f:f0:c6:06:
7b:4f:96:f5:cb:f1:39:41:35:be:4e:f4:62:a5:78:b3:30:e4:
fa:c1:d2:71:2c:ed:16:da:8b:98:e2:0e:fa:28:94:92:47:1f:
9e:9e:50:3b:96:cb:cc:2c:9b:fb:12:c0:0c:79:bf:dd:67:5a:
c9:5e:da:3a:8f:56:dd:c5:90:c6:42:17:23:d0:95:e2:4d:58:
15:32:47:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039z2p+FwvGei3fkXIeqg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl
ZTQ2MzYwHhcNMjYwMzI5MDUwMDQzWhcNMjYwMzMwMDUwMDQzWjAzMTEwLwYDVQQD
EyhmZjgxMTE1ODFlODFhYzU1MzMyMzhiZGJlYzEwNDA1NjVmNGI1MmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+iuPdMPUd11HP0KW/tEqlX3thdf
NLT+rsBaUt0WqgzbduoJTlRMYaK3trfB4rjrW3pMCf2udu3XAy6d9yzaiSkfPkWw
jbqbRfQYrZqEFZ9Iseb0EjioKho32l9jQE0A5gf2mRBN+0S6wIIEOLbOxlPnK+sG
XPyzcH2O0LKEoqKX0K1Po+uIZ8W99VWqaDC9K5Ii6D4dEjzc3v6NeKCvG3g0SdMG
Lcr81/Vg2lJUo+IX5m09uNrxni4ogwrGG2eX0k1lyK5+DlN9gmHWeT2rZ64jzmgl
OwaY9/LZ/H3pRSv0Am0OMH56xGN1C0yxezsKxjTJkrYPZ2vrUD8PlcLfwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+BEVgegaxVMyOL2+wQQFZfS1KlMB8GA1UdIwQY
MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt
Mjc1MjQyYWE2Nzc1LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQtMjc1MjQyYWE2Nzc1
LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRvSQg5u
YjkGlS0azHpKm1LSGFCLpVW25a0wxw9DNSoRYAL6jzzl8Z797Z+O92Pej1BbFtTl
V9wsfH9lxzrKfy8IU2aHFCt6EYBsqVggfJJJQiDUmThEswki4Pxvs5yAL/twC8j1
IW7v7FIGPgJK+yfBn602GJ5B0E6/OeMYqORM7AwjKgcPujHhdyVC4b5ZicZb2GFJ
hlsgK/IfoZPvcKnoO5TUodq4sFdJHrd3K+pP8MYGe0+W9cvxOUE1vk70YqV4szDk
+sHScSztFtqLmOIO+iiUkkcfnp5QO5bLzCyb+xLADHm/3WdayV7aOo9W3cWQxkIX
I9CV4k1YFTJHvA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:21 2026 by rpki-client