Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: CeQkD1CAb+8TLNAaYaQUt9UJ5xYei2OqbR0ScLyW/QA=
Subject key identifier: 00:CB:25:0C:4B:41:67:D6:83:EB:34:47:58:67:62:3C:5A:8C:14:52
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 019D2961A80C666B55CE2647CA53876A0742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 0C0E
Signing time: Thu 26 Mar 2026 09:02:38 +0000
Manifest this update: Thu 26 Mar 2026 09:02:38 +0000
Manifest next update: Fri 27 Mar 2026 09:02:38 +0000
Files and hashes: 1: IQbpL4Pqq93ybQGV6ANNMbZ2iIo.roa (hash: PGBZA27UKVJdbgN0SEeBoj7RAPgQfESC+ab1mII1zDE=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: l1oMHiiffS/cLrp/C8/A/j3FoPyC4YjoK88CO2G21P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a8:0c:66:6b:55:ce:26:47:ca:53:87:6a:07:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Mar 26 09:02:38 2026 GMT
Not After : Mar 27 09:02:38 2026 GMT
Subject: CN=00cb250c4b4167d683eb34475867623c5a8c1452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:27:9f:ac:1b:52:13:93:05:c2:f7:bf:a4:
49:85:29:9d:17:2b:70:11:60:c4:d5:be:1d:f6:6d:
03:ce:76:a8:19:c9:d3:2a:c8:8f:ba:e8:57:90:6c:
0f:57:e1:9d:67:da:54:8d:39:c8:1d:66:20:ea:59:
3c:cd:06:96:8c:60:fa:b6:47:e8:9e:fb:ab:24:b1:
37:6b:9a:23:71:67:9b:9c:d4:f3:44:97:f4:83:f3:
bf:2e:33:73:f3:fb:2a:7d:f5:7c:32:7c:7f:f8:c0:
3d:80:33:11:fd:7e:84:6b:ff:13:09:73:c7:89:0a:
2c:1b:21:9f:9c:73:47:2b:9f:e9:fe:95:16:35:36:
55:47:cb:50:5c:0b:46:2c:16:cc:83:f4:69:fb:dc:
47:ac:d5:06:c0:f5:0d:6f:6a:1d:6f:02:b4:0d:73:
5b:8e:3d:11:df:13:67:e8:c8:21:85:c9:e9:0b:04:
69:24:75:cf:29:d6:17:30:72:7e:19:5d:77:2c:d3:
c5:3c:e3:ba:78:93:50:97:ca:cd:74:55:9f:95:62:
46:ff:4a:88:45:b4:1f:cc:0c:4e:03:9a:02:ad:c2:
46:d8:c5:20:82:0b:65:23:be:e7:60:c9:10:dc:bb:
c4:76:20:35:75:60:2d:45:aa:dc:1d:c2:78:a5:b3:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:25:0C:4B:41:67:D6:83:EB:34:47:58:67:62:3C:5A:8C:14:52
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:90:df:21:4a:2f:9d:4a:e8:b9:81:01:a0:33:a9:5d:39:60:
41:6d:d4:8c:b2:9d:f9:c5:c0:18:95:89:e6:e3:e0:a8:b7:9c:
d2:f0:05:fc:9a:ae:23:c6:1c:d1:a4:e1:83:57:80:b0:f8:34:
a4:c2:8f:fb:88:56:c3:3e:a7:16:10:15:1b:db:eb:b0:d1:97:
1a:35:9e:bf:4b:65:f5:4c:7b:da:bd:ac:e7:89:3e:f3:24:15:
d9:df:93:55:84:75:bc:fa:b8:a4:31:aa:14:37:70:5a:fb:0a:
85:92:47:39:de:57:de:5c:de:71:d5:ff:ff:18:ff:1b:0d:d9:
b2:50:40:62:c6:ed:c4:a7:80:fc:e5:e7:15:c3:92:eb:bd:00:
18:f8:0b:99:7b:3f:d8:96:37:3c:7b:b3:b8:2c:26:48:ac:05:
f0:c8:80:e1:b5:9c:b9:24:31:e1:3c:1a:e7:49:70:3c:6a:d9:
7a:a6:c7:cf:de:01:b7:82:14:95:80:b5:fb:ba:18:57:cb:8f:
cb:3b:14:f4:f9:83:85:7b:7d:19:b9:4c:37:ae:8f:dc:74:11:
fa:a3:24:0e:78:e3:a7:0d:e8:53:64:3a:c8:f7:8b:dd:45:09:
2e:f6:ea:f1:1b:de:4b:33:61:0c:e8:81:08:24:da:7f:fc:15:
b9:9d:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:32 2026 by rpki-client