Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: i3wvBAvISVylmiXg0lBVoY4U1hcS/BCb3niZEbEEFRU=
Subject key identifier: 70:18:2F:21:3A:45:FD:8D:CF:57:AC:E7:56:B7:D6:CA:CA:A4:5B:69
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019F9211C4C24F4EB366E6F1BDDCE1A88D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 03:01:05 +0000
Manifest this update: Fri 24 Jul 2026 03:01:05 +0000
Manifest next update: Sat 25 Jul 2026 03:01:05 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: vPQn1QIRHmEIYwxd9qa+Kwo282hp8NjmyM2wkRuWiYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:c4:c2:4f:4e:b3:66:e6:f1:bd:dc:e1:a8:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jul 24 03:01:05 2026 GMT
Not After : Jul 25 03:01:05 2026 GMT
Subject: CN=70182f213a45fd8dcf57ace756b7d6cacaa45b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:20:28:90:e4:d2:95:31:ec:5e:ba:4d:b5:
bc:5f:fd:da:b9:fc:31:0f:1a:a1:d3:d0:99:c9:c1:
4e:83:b7:96:e8:91:6b:a4:ed:20:e8:0d:6f:67:c0:
f6:78:cd:e4:02:b8:83:3b:00:16:08:e6:32:3f:dd:
6e:65:da:18:f3:04:1a:b5:68:2b:01:bb:b5:fe:f4:
39:e0:07:2b:5e:e9:1b:25:b6:97:78:ba:59:a6:34:
ea:72:1c:83:8c:f1:60:0d:9e:34:82:20:18:9a:21:
18:3f:86:fa:12:06:52:a9:5d:dc:fb:e8:2d:8e:42:
8c:b6:75:81:ad:d6:d9:5f:fc:9d:5d:f3:16:31:e6:
85:e8:ef:07:d0:dc:68:7a:f3:5f:79:16:db:9f:24:
cb:cd:ee:00:72:91:9d:bd:32:44:7b:ad:d6:9c:88:
ee:01:1d:f8:56:97:03:ab:84:a1:5d:7f:88:96:fe:
60:62:30:41:c1:35:93:b7:d5:c2:26:d8:a1:15:25:
19:d4:6c:02:ca:e3:0e:42:03:94:5e:d4:01:41:fc:
c6:6b:50:91:13:b4:4e:1d:0a:a2:51:63:56:2c:c8:
f4:ee:db:57:2b:bb:ec:01:d7:33:42:57:3c:c3:a1:
77:f2:77:d7:70:7f:99:53:f3:73:0b:a3:ff:67:0d:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:18:2F:21:3A:45:FD:8D:CF:57:AC:E7:56:B7:D6:CA:CA:A4:5B:69
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:02:e7:87:a9:86:d7:a3:07:5a:30:f5:9b:54:90:c5:24:cc:
37:6d:63:08:92:1b:33:4b:7f:f0:77:14:68:06:5b:76:d3:1f:
4a:1b:79:bf:57:7b:31:32:5b:8f:e1:bd:5b:e3:b9:5d:a4:50:
48:dc:05:c6:6c:9a:9d:4d:81:6c:45:1d:b8:49:de:65:cb:1a:
f0:61:08:89:fa:a6:ec:76:85:95:fd:0d:de:ee:5e:d2:69:77:
b9:88:08:49:1f:ef:7c:3a:9a:99:1a:07:68:69:7d:d3:8c:f5:
c4:d5:10:e5:3d:d7:af:67:6c:6b:e5:27:f5:f4:f0:ed:91:81:
c4:7f:8d:cd:06:6c:54:71:85:4b:1a:a6:ef:0b:e1:ae:dc:b2:
ce:09:aa:f1:f3:60:e2:74:41:b3:e2:5b:46:d0:2b:0c:58:31:
73:6e:e1:5c:7c:38:49:da:11:b3:04:79:78:3d:7b:4a:60:5c:
04:17:20:e0:87:9f:36:09:b2:15:f5:08:4f:ac:b1:55:66:43:
c8:90:88:85:48:6a:25:7e:a2:5c:ac:9f:54:42:bc:d5:9b:57:
23:0e:6c:ac:3f:19:bf:26:50:8e:5c:2f:5e:96:6c:20:c5:e0:
69:d3:e3:d0:ee:d1:98:d1:ac:aa:1c:13:ca:5d:ff:49:de:cc:
cc:ed:5f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:44:28 2026 by rpki-client