Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: yIl6LX7wXZ5C85dHFmYoK+ApKD/QvUCoU2xYYBiUS3A=
Subject key identifier: 75:0C:05:19:18:83:53:7B:05:D8:10:4C:43:D6:14:41:C9:39:4E:B7
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019D262837DC5C359515C3B2D57213AA6CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1891
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: HtMeYzHyYDD+BuC8VyMMy1PMkgHzDZk7Zcaql/MoCik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:37:dc:5c:35:95:15:c3:b2:d5:72:13:aa:6c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=750c05191883537b05d8104c43d61441c9394eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:d8:d7:5e:0b:61:56:73:ff:18:d4:4e:1e:
02:d0:64:63:9b:a5:b0:e7:12:41:44:c5:65:fe:72:
83:23:b4:32:12:4c:99:0a:aa:b2:42:6f:7a:f3:a6:
2a:f6:18:0e:4e:c9:1b:35:45:17:57:1b:9c:78:fc:
d4:f7:6e:89:8f:a6:bd:4c:8c:76:52:e6:06:f4:93:
4b:58:7a:d6:8c:e4:eb:d1:ab:25:66:89:40:9e:95:
b3:58:88:89:db:d3:bc:00:35:cd:f4:ef:76:a1:b1:
71:d2:47:27:48:08:e3:fe:ee:d9:5d:93:c6:6c:ba:
94:c8:67:3c:9f:cc:c0:5e:0d:ff:06:24:41:df:c3:
88:31:15:62:14:13:df:44:b9:04:a2:c6:bd:8f:79:
ce:8c:c3:95:ae:23:a8:a2:3f:d4:0a:ee:23:aa:3e:
ed:40:08:a2:ae:7c:04:ab:ac:82:4f:8c:7b:41:f2:
e4:0f:98:7c:df:cd:d6:e6:4a:bb:36:1d:ee:7f:e9:
cc:7a:5a:93:8b:2d:23:fe:7f:55:d0:00:d4:b2:50:
6e:85:88:f8:a9:1d:1d:fa:9f:1f:c7:3f:cb:28:b3:
e0:df:5e:e4:75:56:e5:db:e4:9e:e1:76:fc:4f:7e:
7a:11:a1:fa:c1:50:3b:50:0c:61:cd:ee:86:6b:02:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0C:05:19:18:83:53:7B:05:D8:10:4C:43:D6:14:41:C9:39:4E:B7
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:03:e1:ab:9c:96:cc:45:cf:a3:25:04:8f:56:6d:00:a1:0b:
ec:3a:0c:67:33:14:ab:00:ea:17:22:89:0d:a5:97:68:da:ed:
e0:0c:d2:aa:0c:a9:19:b8:30:c6:c1:6b:22:ba:6e:f2:0f:66:
d2:56:45:9f:77:84:18:e9:b4:b3:c7:16:1e:2d:c5:35:b1:ec:
ff:ca:1a:21:c5:e4:4a:70:8b:81:43:e2:f4:41:7e:37:62:f5:
cb:fe:68:94:bc:83:be:85:9a:a0:19:b7:c1:b4:59:ae:4a:e7:
8b:64:44:c7:79:5d:ba:c6:e1:1b:e1:b0:43:1d:e4:d7:a0:28:
45:6f:c2:82:5c:93:f5:3e:97:03:f1:4e:61:8c:50:5f:93:fe:
9d:7b:73:22:6a:bc:2d:0d:08:fa:e2:14:f1:97:2d:ad:10:a1:
ea:b2:4f:e2:cd:32:ae:9b:25:c2:7b:8a:a0:c8:1d:1c:ce:1d:
2c:37:3b:dd:91:60:7a:05:31:21:97:d5:75:f9:26:44:9e:80:
22:f1:8d:6c:10:47:70:32:92:b6:be:13:73:90:9b:0b:ed:25:
6e:77:e8:f0:01:05:b4:49:c3:e0:d4:60:54:22:aa:4a:91:ea:
8c:2e:26:ad:93:5b:de:dd:88:98:e6:36:a8:b0:de:0f:13:7d:
3f:d7:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:50:44 2026 by rpki-client