Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: PDZdnb6LcNwyoy8qoNYI4GwgiNfybZ36p5s9P4rFs4c=
Subject key identifier: 7A:0F:C9:B6:47:2E:09:92:20:45:BA:A9:6A:3F:B7:0A:36:E2:84:C9
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 019E1DFE0F75B2F429F9935CBF0B94EC66FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0904
Signing time: Tue 12 May 2026 21:00:49 +0000
Manifest this update: Tue 12 May 2026 21:00:49 +0000
Manifest next update: Wed 13 May 2026 21:00:49 +0000
Files and hashes: 1: EWYJbFjQX31oYWlD58OJv_l9B30.roa (hash: 2Mav6QQLVSCd9edMOwHxUMX2MqYRij3v85DASHfIvYU=)
2: QmtTzyy0B6VINllZo5hoGV_0tME.roa (hash: Kss8BrAGEQwDauIv9e80R/ByqBQjOIdQoGwsK/YXN9o=)
3: nYyVLm0gMDde0qblfT3ncHKAnz8.roa (hash: jNbahQjR6FvDEsOWUHlprHyKe5vIEPV9UxOl9Q91iVk=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: Od1ssX1mXOeKmUpPtCDw/q4IwuSLVvmZOFJonYJegAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0f:75:b2:f4:29:f9:93:5c:bf:0b:94:ec:66:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: May 12 21:00:49 2026 GMT
Not After : May 13 21:00:49 2026 GMT
Subject: CN=7a0fc9b6472e09922045baa96a3fb70a36e284c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:51:3c:50:18:34:fb:4b:59:fc:6c:46:fe:
fa:b1:ee:bc:51:d0:1e:f9:d2:61:80:c3:bb:2a:95:
ae:4e:46:59:83:be:60:a0:eb:f9:c2:a3:18:15:49:
0c:50:bc:64:85:59:5c:15:96:a0:5e:6b:9b:cc:61:
10:39:ce:f4:54:ab:7f:1a:58:c2:aa:46:b2:ac:7d:
a7:29:94:ce:cb:6e:cb:b8:55:e4:3e:d7:22:43:da:
92:70:5f:5c:cd:f1:75:89:56:ab:ef:f3:7d:ee:7f:
b3:53:7a:69:d7:ac:fe:24:74:a8:b2:65:b7:db:89:
7b:07:d5:ba:4b:a5:bc:38:ee:65:da:8a:26:2f:c6:
1b:16:ba:28:30:6c:de:76:0d:28:8f:93:74:ca:19:
90:c2:57:78:7f:99:c6:5b:38:32:23:b8:57:6d:43:
58:11:09:c5:75:f9:02:61:92:82:1f:de:a3:cc:4d:
1a:f0:de:4a:a7:d0:75:7b:b4:0a:87:62:98:4b:30:
89:b6:73:77:61:53:75:a5:40:d8:d2:7c:93:34:b4:
01:94:4b:80:4f:7e:99:5e:2f:48:7a:ad:79:54:42:
ae:06:d2:01:ff:a4:3d:60:33:8b:da:a3:3b:33:79:
39:67:ff:e7:4b:36:db:a5:63:d3:f0:ac:54:ba:5a:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:C9:B6:47:2E:09:92:20:45:BA:A9:6A:3F:B7:0A:36:E2:84:C9
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:11:41:c3:d6:67:b5:f1:97:59:69:35:7d:1f:3d:23:88:39:
5f:2f:4d:cc:cb:0e:2f:b6:99:d3:81:32:21:ce:ba:70:9b:c5:
7a:d4:e0:44:8b:b1:11:4b:51:f7:a1:81:98:d6:40:2f:9a:4c:
31:be:0d:45:ed:5b:4b:a4:9c:68:9c:79:80:8b:04:c1:ad:3d:
92:91:91:63:4f:dc:6b:79:78:a4:9b:7b:46:43:6e:ba:70:a1:
f8:fb:09:33:ac:bf:73:ac:1f:ca:b3:b0:76:bf:b6:0a:90:f7:
f4:de:46:a1:d3:d3:9e:d0:96:4d:6a:1b:c1:f0:b2:6b:46:80:
e2:db:b5:3c:14:43:a4:5a:54:e2:87:28:bf:1c:0d:ee:83:9a:
c0:6d:2b:a5:c0:c3:55:ac:de:c4:b1:dc:57:b7:be:ee:96:c5:
30:e3:f3:f0:5b:f6:48:7f:0d:41:5e:30:1e:24:97:da:45:45:
f8:47:69:73:7f:01:18:22:7a:8f:24:c0:e6:e1:69:c9:25:e0:
d2:51:08:4a:2b:4a:26:4d:f4:76:83:d3:5f:3b:b0:4a:27:ba:
1c:f1:e4:24:67:01:14:36:b3:7b:f1:f3:d7:cf:cb:a4:a4:65:
81:27:74:22:d1:b8:a7:6a:d9:14:58:c0:1f:49:7b:04:0e:91:
06:8f:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:20 2026 by rpki-client