Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: oAwApumI1rP148DdTEda2qDH1hOMrTEXBqmuzFeUMnY=
Subject key identifier: A4:21:C2:24:90:E0:4B:9A:EE:F3:80:AF:2B:63:A3:D4:AD:2D:C9:84
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 019D28BB359EB8191D97970BAD102B7431BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:50 +0000
Manifest this update: Thu 26 Mar 2026 06:00:50 +0000
Manifest next update: Fri 27 Mar 2026 06:00:50 +0000
Files and hashes: 1: Yrcgx8X9stHwgpCHDOsVbc1hluI.roa (hash: ECVF6igxy3y3LufgBVxh6FK9Aw/oP5gnb7fO7cFVtSs=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: 9QiO0f5yf9OGPYP0wabgcwIdNOVs4K7k6zMA5exqHDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:35:9e:b8:19:1d:97:97:0b:ad:10:2b:74:31:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Mar 26 06:00:50 2026 GMT
Not After : Mar 27 06:00:50 2026 GMT
Subject: CN=a421c22490e04b9aeef380af2b63a3d4ad2dc984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e8:c1:5e:cd:cb:1e:eb:aa:fa:9b:7a:14:3b:
7d:81:18:6f:a9:d0:33:68:c5:ad:af:16:09:9e:69:
50:cb:a3:5b:58:e8:2a:1e:4b:68:f1:a6:17:fa:af:
89:f7:e7:0a:b3:03:c0:a2:c8:f6:ce:26:2d:46:cc:
d7:c0:88:89:67:64:2b:e2:06:f8:07:b1:84:10:97:
f3:94:57:2c:55:aa:6c:0e:ce:b5:9d:bc:ac:c9:c9:
f7:15:50:67:77:c3:e5:ef:83:98:dc:34:b8:b5:3f:
af:bb:ea:5f:b5:f0:7a:3e:63:b3:dc:a7:64:c4:17:
e1:25:05:a6:ea:ba:64:49:cb:3e:06:cc:2f:d0:9b:
df:d4:48:de:41:c4:78:23:ed:af:b7:8d:dd:9d:4c:
35:49:3e:ff:03:fa:d9:9a:17:39:79:00:39:19:90:
cf:d0:7d:ec:d5:18:97:5d:b9:4d:5d:44:6b:5f:9d:
bd:cc:93:92:75:25:7d:f0:4f:7f:0e:aa:fb:f5:32:
62:d8:1e:dd:93:8c:4b:b7:93:47:96:e8:ae:e0:d0:
24:bc:b8:9a:f1:4c:4f:2b:35:0e:b1:9a:99:a2:6c:
ca:fb:40:09:77:fa:f4:76:a9:9e:5b:63:19:fe:53:
37:28:3c:d7:80:a4:0d:0f:61:28:24:be:ca:c5:6f:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:C2:24:90:E0:4B:9A:EE:F3:80:AF:2B:63:A3:D4:AD:2D:C9:84
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:06:0e:31:10:f9:4f:05:86:24:92:a9:f7:dc:15:49:00:f8:
18:83:bb:39:89:a6:02:8a:28:cd:c2:5e:02:38:24:12:f4:73:
ea:5a:96:8a:35:1d:13:4b:91:b4:c7:7a:64:ea:43:1b:ea:15:
c0:3f:ff:6c:1e:51:95:29:fd:26:32:9c:ea:fa:f5:bc:57:e9:
26:ce:65:98:7c:5a:42:c6:29:f5:97:f8:33:dd:1b:04:94:91:
7b:be:fd:f9:23:36:6e:4b:45:61:ee:58:d6:10:6f:74:07:d4:
0b:e9:3b:24:7e:cb:5a:a0:32:cb:35:1d:7b:3d:f4:98:ce:70:
73:6a:4c:28:61:67:fc:40:4c:a4:0f:83:55:d8:a7:32:a5:c3:
4b:6d:1c:c7:05:20:7e:98:5c:70:9d:29:04:38:a5:e2:c0:14:
e6:37:62:17:8b:2c:05:a5:80:6e:11:d1:f0:e6:3d:70:f9:2f:
c6:73:82:b9:69:e2:f7:fd:c7:aa:97:0e:f4:c5:4a:ee:e8:90:
5e:93:14:9f:16:c0:6f:e1:71:db:96:a8:a1:69:f7:26:b0:56:
e2:9a:89:0e:4e:3c:16:47:2f:16:6a:47:6b:c0:f4:a9:a1:bb:
69:bf:23:3b:fd:7a:bd:38:70:d2:f2:6b:ef:3e:67:f1:de:0c:
72:b3:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:42 2026 by rpki-client