Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: Ph1mBLPlxncuwrU+UlvV2f+LpaMYsj2iLx7/5cNbdkQ=
Subject key identifier: A5:38:BB:CD:DA:FD:00:2F:18:1F:5A:11:02:BE:13:28:5B:69:D0:98
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019E1F47D1611280D3AE09CEC6BAE0E5182D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1912
Signing time: Wed 13 May 2026 03:01:00 +0000
Manifest this update: Wed 13 May 2026 03:01:00 +0000
Manifest next update: Thu 14 May 2026 03:01:00 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: 4R4EAxZJAR256xMZh3B5RjdQLwlKJUGQH39yde/opvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:d1:61:12:80:d3:ae:09:ce:c6:ba:e0:e5:18:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: May 13 03:01:00 2026 GMT
Not After : May 14 03:01:00 2026 GMT
Subject: CN=a538bbcddafd002f181f5a1102be13285b69d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:88:4a:76:cd:ae:3b:9d:b9:fe:1c:2a:34:
6f:a2:9f:63:a9:d8:4b:b8:60:e5:93:5a:de:cc:3b:
e0:a4:00:5b:8b:56:87:a1:9a:c0:5c:33:3b:cc:e6:
87:01:32:e6:a7:80:0c:10:68:3b:da:3e:e3:d4:43:
3a:fa:37:7a:a1:ee:00:0a:d5:18:0c:7d:82:ea:4d:
b2:f0:50:8c:4b:78:bf:a2:28:69:56:55:10:49:3b:
d8:76:5b:16:47:42:9a:0a:12:d9:38:c2:73:33:b2:
83:cf:d7:c4:59:6d:c9:4e:a9:ee:06:56:ce:40:2c:
cc:78:63:fa:4d:15:00:e8:9d:cd:9f:28:02:e6:8b:
3d:f0:1e:6b:cc:03:6a:1b:e4:6b:66:55:c2:45:6b:
48:b8:36:4b:d1:85:cf:c6:ee:be:fe:5e:66:6f:ef:
6f:8e:45:5a:0e:86:1e:19:65:3c:83:6b:9b:25:58:
44:fd:6f:27:c5:c8:6d:ad:80:2e:0b:34:b5:d6:59:
d3:92:ad:de:e6:12:83:ed:ce:16:20:82:85:04:9e:
32:c5:a6:3a:21:34:5e:7e:19:8e:d8:5a:92:04:e8:
9c:c1:1b:f9:ba:ab:b5:ba:a9:59:31:92:7d:a4:69:
fc:7c:f2:d5:33:31:68:b7:e1:b5:71:6a:f1:d0:4d:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:BB:CD:DA:FD:00:2F:18:1F:5A:11:02:BE:13:28:5B:69:D0:98
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:47:cd:b9:ad:90:74:69:cd:9b:26:63:69:17:33:32:98:82:
5e:07:cb:f9:85:20:57:82:e7:70:04:1e:ea:2e:c0:e0:65:54:
70:ac:b8:88:8a:06:ad:d2:e8:59:ad:bd:e9:34:07:d3:42:60:
03:70:77:af:ff:5a:f4:0b:60:ad:fd:d1:b8:73:1d:3a:0d:3f:
30:fa:fb:e4:2b:b0:8c:58:3c:49:96:ee:35:f7:6a:a4:ad:d8:
46:d4:fa:86:fa:e5:04:77:26:a9:8b:3b:ab:36:5b:f1:8b:ef:
cb:66:96:47:3b:25:ed:d1:1c:39:73:41:2a:99:fb:4a:3d:cb:
fc:a0:25:96:af:02:a3:12:6d:65:ca:2b:ba:13:6b:fc:4a:c2:
21:ec:e0:9c:36:b8:0d:4b:08:73:08:3f:fe:81:12:42:45:10:
20:d5:3e:1f:da:ca:9b:59:4e:38:00:84:a9:a6:38:f9:2f:f8:
39:1c:62:62:e6:85:14:de:94:91:51:f2:52:bd:24:f2:54:e2:
dc:b6:90:73:e1:93:e3:40:8a:c3:3d:37:cf:3e:96:57:f6:e6:
ce:64:51:3c:71:54:cd:e0:7e:bb:ba:e3:54:11:e3:88:95:a7:
8b:3b:f4:91:c7:28:83:55:98:b9:b7:ed:6c:d0:e2:dc:81:82:
fb:46:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:36 2026 by rpki-client