Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
File: q5ddtDeN_KfClTuG07GNyLIY7Gs.mft (raw, json)
Hash identifier: 969phLC5bl+ZmFvqUEA0/gD0E3+mkYGKU6SCLjGak2Y=
Subject key identifier: CB:52:96:78:95:CD:0C:6C:F7:9C:FD:D0:BD:08:99:1F:D8:3E:4C:99
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 019D28BBC9D2D772F1168C2956456DE5D2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
Manifest number: 100C
Signing time: Thu 26 Mar 2026 06:01:28 +0000
Manifest this update: Thu 26 Mar 2026 06:01:28 +0000
Manifest next update: Fri 27 Mar 2026 06:01:28 +0000
Files and hashes: 1: 5BkH_FT2kYT8Up6Mms34hWALsVk.roa (hash: A90bzGzBZRM1hyAV4+vbV6qC5gd9kZ3mdGVCsD3ltUI=)
2: bW01I_WsH-teQUBGCFJvPGXhqrI.roa (hash: 28v+sIH0m9Zb7wNIUnBkENs9h7Iz2/gM6ZfNDpHszko=)
3: q5ddtDeN_KfClTuG07GNyLIY7Gs.crl (hash: thcjQ95OMWyQmpBvw2/elFFOeZEbKJFsSpKvnzyRJCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c9:d2:d7:72:f1:16:8c:29:56:45:6d:e5:d2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Mar 26 06:01:28 2026 GMT
Not After : Mar 27 06:01:28 2026 GMT
Subject: CN=cb52967895cd0c6cf79cfdd0bd08991fd83e4c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:7c:67:aa:1f:f0:03:2d:9a:d8:56:64:ae:
21:a3:da:6e:17:9d:30:9d:6d:44:43:dc:d0:a1:d5:
7d:69:12:68:c5:09:df:2a:24:30:55:32:b3:13:cd:
3e:53:9e:f9:99:07:38:a7:44:9c:f8:bd:5b:34:c4:
f9:21:53:ab:2c:b4:c0:4a:ba:f2:37:26:e5:61:06:
0d:34:08:74:f7:90:8c:c3:c2:15:49:e6:07:8f:f9:
9f:af:1f:64:26:1a:2d:c7:3e:c7:3d:66:ea:1f:af:
07:9d:b7:d7:db:44:c3:06:ea:c7:dc:48:65:af:cb:
b9:c0:27:f0:10:3e:6f:7c:48:42:68:5d:87:b9:cc:
e7:27:33:30:95:7d:1e:4f:3e:36:52:e4:3e:fa:1d:
b8:94:47:17:0a:be:36:a1:0e:4b:3e:9e:f1:3a:9b:
10:34:3f:5f:91:39:c1:40:17:2b:8d:05:7e:c5:cc:
3d:30:9e:3e:67:13:bf:e0:6d:81:50:10:cf:03:aa:
a1:74:26:ce:14:02:38:c6:f6:bb:1e:0d:58:5d:63:
ba:f0:fa:52:ee:55:66:44:ef:bf:0d:30:9e:2b:1c:
bd:75:d3:d5:c5:94:f4:4e:6d:a5:3b:eb:47:f1:3f:
05:d2:26:5b:79:7e:01:5b:e4:6b:30:39:4f:13:8b:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:52:96:78:95:CD:0C:6C:F7:9C:FD:D0:BD:08:99:1F:D8:3E:4C:99
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:87:ac:70:d1:8e:bd:f7:ed:10:a7:48:b2:c7:ad:1d:5a:cd:
23:6b:15:35:58:38:e6:55:23:79:6a:33:ab:0a:a4:f1:bd:e4:
29:f7:7d:fa:19:77:46:90:08:c9:97:2e:f8:c5:67:92:fb:9d:
3f:c0:78:f8:48:dc:86:ab:58:df:00:e0:b9:ed:b5:aa:57:e9:
57:66:28:05:e6:93:6b:31:c3:39:40:14:c8:ca:8b:67:0f:5d:
6f:6f:f5:0d:25:1b:31:44:a1:5e:e3:e9:ff:ed:86:15:12:7c:
f7:e4:e5:03:9d:1f:80:bd:f1:69:0f:d8:4a:80:32:08:84:42:
39:88:f2:2e:7b:91:b5:30:72:26:94:1c:19:dc:49:bf:ee:31:
9f:0e:ce:00:78:51:61:22:2b:fa:39:d4:98:57:74:04:14:4f:
c7:05:ed:70:82:a0:2e:53:86:04:74:1d:03:ef:44:e0:d6:5d:
5f:2d:fd:f6:86:43:0b:12:a6:b9:93:fa:83:cc:5c:53:1d:9f:
92:5f:8d:fb:e3:03:d8:98:57:cc:08:06:c6:74:05:0e:d5:d7:
85:46:b2:2b:8c:8d:e8:e6:62:e6:4b:ac:0a:6a:c5:c5:83:ca:
ab:18:38:64:f5:c2:f8:83:bc:9c:62:3e:cf:bd:d8:44:ba:87:
88:94:b9:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou8nS13LxFowpVkVt5dK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTc1ZGI0Mzc4ZGZjYTdjMjk1M2I4NmQzYjE4ZGM4YjIx
OGVjNmIwHhcNMjYwMzI2MDYwMTI4WhcNMjYwMzI3MDYwMTI4WjAzMTEwLwYDVQQD
EyhjYjUyOTY3ODk1Y2QwYzZjZjc5Y2ZkZDBiZDA4OTkxZmQ4M2U0Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDB8Z6of8AMtmthWZK4ho9puF50w
nW1EQ9zQodV9aRJoxQnfKiQwVTKzE80+U575mQc4p0Sc+L1bNMT5IVOrLLTASrry
NyblYQYNNAh095CMw8IVSeYHj/mfrx9kJhotxz7HPWbqH68HnbfX20TDBurH3Ehl
r8u5wCfwED5vfEhCaF2HucznJzMwlX0eTz42UuQ++h24lEcXCr42oQ5LPp7xOpsQ
ND9fkTnBQBcrjQV+xcw9MJ4+ZxO/4G2BUBDPA6qhdCbOFAI4xva7Hg1YXWO68PpS
7lVmRO+/DTCeKxy9ddPVxZT0Tm2lO+tH8T8F0iZbeX4BW+RrMDlPE4sLnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtSlniVzQxs95z90L0ImR/YPkyZMB8GA1UdIwQY
MBaAFKuXXbQ3jfynwpU7htOxjciyGOxrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTIt
Y2RiZDU1NmUxNzQ5LzEvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTItY2RiZDU1NmUxNzQ5
LzEvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4escNGO
vfftEKdIssetHVrNI2sVNVg45lUjeWozqwqk8b3kKfd9+hl3RpAIyZcu+MVnkvud
P8B4+EjchqtY3wDgue21qlfpV2YoBeaTazHDOUAUyMqLZw9db2/1DSUbMUShXuPp
/+2GFRJ89+TlA50fgL3xaQ/YSoAyCIRCOYjyLnuRtTByJpQcGdxJv+4xnw7OAHhR
YSIr+jnUmFd0BBRPxwXtcIKgLlOGBHQdA+9E4NZdXy399oZDCxKmuZP6g8xcUx2f
kl+N++MD2JhXzAgGxnQFDtXXhUayK4yN6OZi5kusCmrFxYPKqxg4ZPXC+IO8nGI+
z73YRLqHiJS5hA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:48 2026 by rpki-client