Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: yK7dBSyYDO2/5BtMxA5n9XSdfp73T/oHKK7TklgeQ00=
Subject key identifier: AA:B1:94:73:3D:C4:83:4F:0C:CB:03:77:AA:F0:D2:0C:7C:45:AD:05
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 019D2A3C1EE5D38026A4ADD6857A1B2E8B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0883
Signing time: Thu 26 Mar 2026 13:01:16 +0000
Manifest this update: Thu 26 Mar 2026 13:01:16 +0000
Manifest next update: Fri 27 Mar 2026 13:01:16 +0000
Files and hashes: 1: EWYJbFjQX31oYWlD58OJv_l9B30.roa (hash: 2Mav6QQLVSCd9edMOwHxUMX2MqYRij3v85DASHfIvYU=)
2: nYyVLm0gMDde0qblfT3ncHKAnz8.roa (hash: jNbahQjR6FvDEsOWUHlprHyKe5vIEPV9UxOl9Q91iVk=)
3: ow6igTPRlqbGU9GWr5GsAICpDvc.roa (hash: M2OOGjwOx0AiSEzEWO1U/xWbG8Khv5JvliFIW9WxDrw=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: UmHqhYJ0qwLlUPmf88+U//XEPjP6LE4Y2DNkBm0U62k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:1e:e5:d3:80:26:a4:ad:d6:85:7a:1b:2e:8b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Mar 26 13:01:16 2026 GMT
Not After : Mar 27 13:01:16 2026 GMT
Subject: CN=aab194733dc4834f0ccb0377aaf0d20c7c45ad05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:15:83:43:95:be:2f:d7:cb:10:6c:84:f1:
c6:33:e4:e2:93:a7:d1:26:cf:8f:be:80:5f:8e:1a:
e3:66:57:f6:5f:a1:b6:ee:28:79:8d:3a:4f:61:e1:
c8:14:4b:bc:35:1f:75:ca:9b:45:02:87:b7:3b:32:
3d:3f:f7:1d:85:38:c2:a1:95:1d:c0:10:f5:ab:65:
fd:2d:0e:33:23:31:91:7a:b2:cc:fc:8f:c9:16:e1:
f9:8b:26:4e:ad:cc:3b:dd:25:4e:64:1e:51:c1:78:
78:58:76:78:07:39:96:91:c3:b5:37:e0:3f:70:75:
79:23:e4:c6:c2:43:28:16:47:df:54:f2:a4:f8:dd:
9a:42:51:a3:5a:9a:41:d2:15:9c:df:3f:7c:d7:f5:
ab:a4:f4:45:64:15:04:9e:ee:d1:e5:c0:66:5e:0d:
a7:da:b8:b9:bb:d0:b6:2a:fe:e0:ea:73:f8:5a:d2:
12:a5:ed:a3:c3:72:ac:46:8d:d9:b0:63:96:c1:62:
b0:bf:88:92:0d:04:6d:93:e2:70:43:ee:f3:b9:54:
85:27:65:08:6b:f2:0c:c4:62:ed:3a:49:c3:36:cf:
28:c3:05:5f:12:76:06:75:ff:16:3d:c2:3d:17:ee:
dd:c1:bc:8a:27:25:c6:a4:4e:0a:fd:be:42:38:bd:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:94:73:3D:C4:83:4F:0C:CB:03:77:AA:F0:D2:0C:7C:45:AD:05
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:69:a5:4a:04:d6:56:c0:90:f8:ff:77:62:0b:17:d0:20:
37:e7:67:67:ec:13:04:b6:ac:53:23:bd:10:a4:66:b8:6e:8e:
b1:f1:96:24:b7:45:7c:ea:b8:82:08:9b:86:59:ca:ea:ba:50:
11:79:64:5e:05:eb:bc:7c:07:02:8d:f7:a5:ce:3f:1e:83:df:
1c:b6:7c:00:02:ab:f6:88:9c:e6:38:69:4e:9e:36:3f:44:6d:
06:e2:88:c4:50:44:57:c4:c1:e2:c3:19:dc:f6:ef:11:f6:58:
30:f7:41:ce:55:30:86:a7:d4:52:af:ad:43:40:40:d5:5f:cd:
6c:bc:e5:66:be:ea:e4:24:87:4c:a8:f3:be:98:d4:29:ea:ed:
eb:7d:d0:4a:ed:3a:14:51:e2:34:9e:e3:8a:65:45:67:64:a6:
b2:ae:ba:7b:48:92:05:3b:ad:98:be:04:57:2b:40:d2:e2:5b:
88:f0:1f:86:19:8c:54:09:18:a8:0e:49:6a:75:34:59:3b:de:
ac:2a:69:fe:be:c0:cd:6c:0e:78:ea:f1:42:0f:54:39:dc:f5:
80:a7:c9:cb:98:27:a6:b6:8a:a5:1e:1f:2e:8f:d9:0b:ee:0b:
5c:91:f7:a8:3d:ae:c7:22:8e:30:0e:f4:34:a0:44:ca:ab:fd:
e1:9d:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:33:38 2026 by rpki-client