Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: PAsbS33P1cAQ8V0HruN4DKEeaCw3OeyASQb8xJYPwss=
Subject key identifier: 87:C9:4B:D1:C3:D9:12:19:5E:1B:53:DB:A2:7A:A8:A8:5A:0B:EC:AE
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 019D26CCDE70D621C8C4E43FE4C99DDC662E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 1251
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: Hs3ktAK06Dj681LT3K6I_ytQOww.roa (hash: wbOb5BXeVE4ZTQ/ou2jyGYitrKnVaEx90HF7mvuSF08=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: e9Y+oAlCr6qVTjIe0J+AyymrRoZjK6LI5sdBkRiB5jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:de:70:d6:21:c8:c4:e4:3f:e4:c9:9d:dc:66:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=87c94bd1c3d912195e1b53dba27aa8a85a0becae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:f7:c0:c9:20:f8:00:37:c1:3d:23:08:80:
a1:2e:bd:23:ad:9a:02:c2:68:cc:9a:b4:ec:db:de:
7d:8d:c5:65:ce:cb:39:0d:42:a4:2e:3d:cb:fb:08:
9d:81:b4:e6:da:68:42:46:35:f2:72:0a:7e:e5:67:
1e:54:30:74:cb:74:ba:b7:1e:0d:f0:53:e1:20:d1:
bf:ab:4b:1e:be:fc:7a:bb:a5:d2:b4:cd:83:18:95:
49:15:bc:8b:97:d8:b0:78:e7:88:25:bd:a9:73:35:
bf:55:1a:1d:c9:67:8d:01:95:b3:46:a3:ea:57:42:
4d:0a:86:d2:5e:52:08:80:16:35:87:a8:f1:c4:34:
2e:c3:5f:89:74:8b:be:51:8c:15:24:76:70:b7:a6:
7e:1f:31:45:8d:94:8c:14:76:7f:74:c8:25:27:35:
fc:00:2e:54:d1:92:be:eb:ba:aa:7c:7b:0b:17:a3:
74:20:06:30:16:9d:3d:e4:82:3f:5b:af:7c:46:0b:
f9:43:77:8c:85:f9:96:2c:98:aa:05:c8:cd:54:88:
a0:bd:8e:fd:c6:68:b4:65:4f:74:0e:b3:c4:25:20:
6d:cb:28:70:36:90:ff:51:df:1a:0f:59:8f:46:cf:
e9:93:50:fb:d4:25:c9:8b:e3:08:26:59:75:c4:ec:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:4B:D1:C3:D9:12:19:5E:1B:53:DB:A2:7A:A8:A8:5A:0B:EC:AE
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f8:a5:9e:69:30:12:9d:0e:5c:c7:77:b5:8e:59:01:1c:01:
b0:46:37:53:a7:28:25:cd:6a:71:75:f9:f6:d0:02:53:bb:a1:
1d:b5:93:ca:9c:b3:bd:27:c0:bb:b0:29:ce:4e:3c:3b:0f:8b:
dc:a3:51:2f:2e:08:7f:9f:23:58:e3:60:01:fd:e1:c8:7b:6c:
e2:a5:12:cf:d9:d0:5e:fc:74:f0:56:a6:1e:dd:c9:03:31:6c:
ab:90:21:4e:43:d6:ae:21:f5:04:24:d5:5e:ba:3e:66:0d:38:
16:a9:77:94:6d:c8:ab:ee:68:ee:77:8c:af:92:dc:7c:31:f1:
f8:d2:fd:da:71:90:ab:4a:e7:00:14:70:ac:b9:8f:5a:60:f4:
00:bf:5c:6e:5a:fe:77:d1:dc:ff:7c:d9:51:13:9f:27:ef:a1:
11:b0:f1:aa:43:29:71:11:2b:77:3e:de:9d:fe:f1:60:bb:ac:
3e:6b:c8:5c:17:36:0c:e3:32:9f:f4:fb:7e:53:3f:4a:b8:9f:
5e:89:f0:09:3a:42:06:84:3a:4f:6c:51:3b:7c:6c:ba:93:20:
6c:f0:8e:4a:3b:fe:35:5a:50:e2:bd:35:18:45:6d:27:85:37:
e5:28:9e:e7:b3:36:a5:6a:3e:76:93:17:d4:f2:bf:62:ef:44:
34:5c:8e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:15 2026 by rpki-client