Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: gCch8RPm9t0p+I8KXwyfHXuZG6fand2yDTyoBastM4M=
Subject key identifier: 59:43:FF:19:76:A5:D0:E6:F1:74:D1:64:82:A1:6E:6C:7F:51:D2:19
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 019D26285609F7B515430A8C95859E732051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 18:01:10 +0000
Manifest this update: Wed 25 Mar 2026 18:01:10 +0000
Manifest next update: Thu 26 Mar 2026 18:01:10 +0000
Files and hashes: 1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: xqDaJ0M2j3rYjK2B2OX1aQCUwatmQTtklSLSIFq416c=)
2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:56:09:f7:b5:15:43:0a:8c:95:85:9e:73:20:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Mar 25 18:01:10 2026 GMT
Not After : Mar 26 18:01:10 2026 GMT
Subject: CN=5943ff1976a5d0e6f174d16482a16e6c7f51d219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:54:92:ed:da:8d:3b:f4:8b:49:13:f1:9d:
d7:02:03:d4:a3:2b:37:0e:2c:75:91:d0:fb:81:a3:
2c:d4:fc:af:67:96:09:38:38:55:17:6e:2e:91:1b:
00:d9:d8:3b:08:65:b9:eb:eb:70:78:95:23:b0:cd:
33:93:a9:9f:84:ab:a7:ca:af:af:b3:3d:ea:d9:3f:
f1:50:ea:fe:95:84:24:dc:c9:7e:30:4b:17:ee:50:
22:14:97:8e:56:de:31:57:8b:d0:c5:2b:91:f2:61:
03:96:f7:40:39:c8:f0:92:36:56:ee:85:e7:31:3d:
1f:1b:27:06:d3:d8:a9:c1:76:5e:1e:1e:de:de:3b:
9a:0c:f6:54:fe:6b:5a:b2:36:50:34:8a:6f:41:3d:
f9:be:bb:db:0c:c3:36:8a:07:be:04:07:f5:95:48:
54:b3:ce:1c:21:f4:e0:19:1a:5d:9d:f5:92:ee:67:
34:53:8a:93:ea:65:2d:87:a4:19:2d:f6:1c:f5:bc:
ee:0b:2e:73:2d:85:76:b8:50:12:7a:69:38:28:04:
dc:d5:47:06:2c:dd:5a:09:bb:a0:ea:f3:0f:f4:db:
5c:ed:f6:6d:2e:90:3d:3c:72:b3:ed:88:f0:36:41:
c7:a4:76:bc:77:c9:76:74:b1:c9:fe:65:e9:55:88:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:43:FF:19:76:A5:D0:E6:F1:74:D1:64:82:A1:6E:6C:7F:51:D2:19
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:98:c2:79:b1:fe:8a:33:82:71:37:79:fb:70:69:5b:4e:85:
b1:a1:6e:4e:17:7f:37:e6:ad:73:e5:7c:af:83:65:06:3b:39:
f8:91:86:76:76:d5:11:6e:d7:75:1e:5f:46:cf:28:c5:fd:25:
c3:14:bb:8a:24:58:e9:fb:fe:4e:d4:a7:1b:26:14:fa:94:94:
7d:ae:ab:ac:4b:a7:de:0e:5d:4d:89:ba:bc:34:40:37:b2:06:
2e:a9:84:70:d2:9e:0b:06:fc:28:6e:af:65:f6:95:d4:b8:8c:
d1:fd:be:f8:30:f6:8b:e8:98:eb:a0:62:a8:be:52:23:4f:1d:
56:01:02:93:5b:30:79:45:a9:de:2c:d7:0f:dc:9f:ec:93:91:
90:d1:e6:b4:20:f0:94:5b:5c:6d:f7:a8:85:22:59:92:ca:2e:
d4:40:e0:69:ef:1e:ca:37:2b:c9:6c:f6:ee:69:21:d5:60:b6:
6d:56:74:3e:32:9e:0d:cc:e7:fc:eb:0e:64:3b:bc:30:aa:9a:
55:24:89:dd:64:d9:c8:b8:bd:f6:4a:69:3b:d6:7b:35:1b:05:
d9:99:c3:c3:6c:25:5b:01:02:ae:29:22:15:e0:23:47:77:ef:
af:ac:be:64:de:6d:5a:21:ce:5a:03:e7:d8:12:4b:fb:23:18:
5f:22:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:30 2026 by rpki-client