Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: hbgdNRcAOc7gVWtO+EmAaOvYWMkzb+jDdd+l72hvh6s=
Subject key identifier: CB:FC:B2:CE:91:F0:48:9F:F3:61:71:67:76:AC:AB:2D:C7:23:58:9C
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 019E216DCDCF2AF8374069BE6728194D8973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 13:01:44 +0000
Manifest this update: Wed 13 May 2026 13:01:44 +0000
Manifest next update: Thu 14 May 2026 13:01:44 +0000
Files and hashes: 1: 4SfojSm1O0yZDYuVtjhC0oqjoZo.roa (hash: q4mcTRajmA1x3P8ne7N/z6IxFaFTMj4qWNPcuiyXN+A=)
2: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: JdLy+Hef8O5j0cunLacetUk65erbgD5sZs+DJzPGNMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:cd:cf:2a:f8:37:40:69:be:67:28:19:4d:89:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: May 13 13:01:44 2026 GMT
Not After : May 14 13:01:44 2026 GMT
Subject: CN=cbfcb2ce91f0489ff361716776acab2dc723589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:58:39:a1:20:67:e8:8a:61:c5:2f:51:9f:
77:74:43:3c:9b:63:73:69:c6:b7:93:43:43:60:32:
c9:31:df:6d:28:33:e9:33:0f:d0:26:47:2f:b2:79:
56:98:5a:f4:0f:57:ff:dc:e0:fb:25:f4:eb:09:b8:
52:0b:5f:e8:0f:8f:7c:ca:c8:fa:63:8c:4b:ee:ea:
c1:71:25:47:e9:1f:22:21:0d:06:7e:3d:13:f2:73:
65:d1:5b:9c:b7:8b:c3:86:76:64:48:bc:81:3d:30:
f2:47:da:b7:d5:6b:32:df:a7:82:bb:48:51:70:03:
1c:75:fe:80:73:48:55:99:6b:c9:a5:6e:48:85:29:
fe:d3:e5:c1:6e:ef:73:d8:91:21:6e:75:eb:95:fd:
2e:7d:48:48:66:ad:4a:c5:b3:75:b2:78:d6:44:57:
bc:7e:4b:c6:9c:71:cd:e3:f9:2c:46:4f:26:0b:d4:
2a:07:f3:54:d5:7a:1d:a0:e3:ae:3a:21:29:97:b0:
18:76:76:19:96:9e:09:19:b3:c1:5d:01:64:39:15:
55:d4:68:4f:4b:c3:29:69:a1:b0:f3:22:98:58:da:
a4:35:60:cb:ec:0d:b6:6c:6b:20:5e:0a:78:4c:c5:
e6:fe:e2:2f:3d:a7:b1:f0:f2:db:8f:b7:ff:6b:31:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:B2:CE:91:F0:48:9F:F3:61:71:67:76:AC:AB:2D:C7:23:58:9C
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:04:cf:2f:9a:69:67:41:56:15:7d:ae:67:f7:8e:9e:a7:
76:fd:dc:2e:49:d0:f9:b8:02:9f:4c:4a:75:f4:ef:a7:2f:77:
ae:2d:35:08:6f:de:5c:6a:10:84:a8:21:a7:83:d1:ef:98:8e:
54:9f:be:4d:75:02:64:aa:64:f8:5c:ad:0e:5c:a0:d1:ae:c1:
38:b8:53:3b:2a:03:a2:28:c2:ed:20:b5:e8:4f:39:cd:c1:94:
08:5f:f0:7b:88:87:80:83:94:16:ef:24:f4:d7:d6:92:87:0b:
a3:71:d5:32:46:2e:03:77:b2:d4:22:71:1b:22:b3:86:0f:83:
4d:6f:fa:77:1c:12:6f:61:db:d7:41:ef:a5:b6:6c:fb:ab:05:
00:d4:97:f1:89:63:16:d4:43:31:04:41:6d:d7:15:31:cc:56:
c4:72:cb:d7:17:d6:bd:87:0a:63:ff:64:11:38:bc:80:22:35:
50:58:2c:76:c2:47:2a:b1:b1:4f:37:c5:8a:50:b1:c5:2e:3c:
00:ff:41:46:8e:36:69:1c:82:66:e7:ad:be:7c:c8:a9:8e:ae:
7e:14:fc:78:59:55:46:f2:98:e2:95:ba:f2:6f:29:32:94:df:
f9:8d:9b:b5:a8:14:82:93:62:b7:8b:4a:51:49:9d:df:2e:c3:
66:8a:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:51:02 2026 by rpki-client