Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: kJp8wVqdy8jKSjo3XXl0u2+4QkM8S38Q13t9F1BwR6I=
Subject key identifier: 0F:B7:9A:78:DE:97:2B:68:23:DB:45:1A:50:C1:31:B2:2F:C9:53:24
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 019D2583C0C2365E98A26F6AD84FAC9C5EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 0752
Signing time: Wed 25 Mar 2026 15:01:24 +0000
Manifest this update: Wed 25 Mar 2026 15:01:24 +0000
Manifest next update: Thu 26 Mar 2026 15:01:24 +0000
Files and hashes: 1: CaTSYTlklPzPsh9aXKnEhvNOdQk.roa (hash: Yu5TNxvfV86Q2+HBX8uXoTCoY5GYvgt5wYG6MqwG8M0=)
2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: oFM8MVOWaAOfXZNOICMdKGf5X3DUHMAqD5/OOkkWI2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c0:c2:36:5e:98:a2:6f:6a:d8:4f:ac:9c:5e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Mar 25 15:01:24 2026 GMT
Not After : Mar 26 15:01:24 2026 GMT
Subject: CN=0fb79a78de972b6823db451a50c131b22fc95324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:4a:73:02:db:ed:32:17:48:80:59:7a:05:
2f:70:03:cd:7c:5a:0d:7d:44:7b:4f:b5:4b:5b:d3:
ca:fc:a0:2e:fc:e3:1a:a9:be:03:b2:65:e6:4d:13:
7a:e1:ca:d8:0c:aa:d1:a0:c7:e1:2c:ac:ca:5e:90:
3d:dc:7c:58:c3:0b:52:ef:8d:6a:29:21:25:3b:bb:
b4:d6:2b:55:c7:8b:12:51:92:a8:00:65:2d:be:67:
07:76:65:23:60:33:4e:c5:46:57:98:8f:6c:52:7c:
e1:5e:96:a3:b6:79:5c:49:39:a9:ac:a3:3c:b2:f2:
ba:0c:44:7a:ed:23:e2:34:4c:c3:b0:b2:67:c9:49:
f8:36:45:b8:69:a7:0d:fa:fa:b2:2a:fe:10:c0:ff:
f1:49:93:80:5e:58:98:a2:70:c2:63:d5:03:53:70:
0e:69:be:68:b6:d4:9a:1f:2b:3f:63:4a:11:4f:e3:
9b:dc:40:18:1a:4e:f6:d6:25:38:2c:92:f4:8b:22:
f1:60:b8:82:7e:cd:d1:7e:72:d6:ac:47:2d:5e:e9:
ee:4b:f5:89:8f:9f:a5:c9:6a:f2:85:f5:f4:9b:3f:
88:0b:ed:02:c4:a2:c3:2c:e9:0d:8c:9a:19:7a:45:
14:47:dd:9e:7d:68:77:c9:05:9d:2e:22:ea:56:4f:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B7:9A:78:DE:97:2B:68:23:DB:45:1A:50:C1:31:B2:2F:C9:53:24
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:de:63:c0:40:73:84:e1:ee:15:be:71:0f:76:38:ec:12:7e:
22:ce:ff:ba:98:71:24:9a:f9:35:1a:63:f6:a0:30:ec:b2:0e:
ae:d7:6b:18:aa:fe:7c:b8:a4:14:11:2f:28:d3:92:99:58:6f:
2f:fc:49:2e:a1:ef:61:c0:f2:d8:ba:21:b8:b5:5b:3d:5e:ec:
7b:20:e6:a0:e0:4d:ce:d3:c2:08:6f:80:e6:63:aa:d6:79:3b:
95:f9:db:6f:9c:4d:0d:a8:58:f6:16:cd:c9:20:c5:06:02:ce:
00:4c:0a:56:0c:db:47:45:ba:c7:b6:de:ba:15:68:39:3b:3b:
f0:5d:58:7b:35:fe:28:7b:ed:84:bd:3e:b8:73:42:e7:fa:ba:
87:16:bd:f1:f2:8b:d3:24:d3:a3:48:f8:27:5b:07:bd:67:20:
5b:04:6f:60:b2:b3:d9:16:11:20:d8:b7:1d:48:b4:8e:95:79:
70:0f:4e:0a:31:55:35:87:46:83:58:f2:ba:b7:d6:b1:e5:f1:
d7:7c:ae:40:b1:a9:52:2d:c5:98:72:a3:2a:d7:d6:60:34:c9:
61:c5:ea:19:a0:27:57:7e:66:dc:59:76:09:42:91:65:54:23:
15:b5:d8:b9:48:7d:52:aa:93:f3:b9:05:49:d2:89:ca:69:b2:
54:7e:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:56 2026 by rpki-client