Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: bKBGDtZ12p0G9VyAC8/RzgKNWQO8xHKBP8KPx4emtoc=
Subject key identifier: D6:5F:81:9F:99:7C:EA:08:BC:2D:DC:14:C5:11:61:21:A2:C2:09:6C
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 01A105135025CD71E67716C09B0FCB17047D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 1A87
Signing time: Sun 04 Oct 2026 04:01:53 +0000
Manifest this update: Sun 04 Oct 2026 04:01:53 +0000
Manifest next update: Mon 05 Oct 2026 04:01:53 +0000
Files and hashes: 1: 4SfojSm1O0yZDYuVtjhC0oqjoZo.roa (hash: q4mcTRajmA1x3P8ne7N/z6IxFaFTMj4qWNPcuiyXN+A=)
2: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: 5mc1g/e6loQFZZB+8X3u+V+R9XRMOQdnBanPudy4Ejw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:13:50:25:cd:71:e6:77:16:c0:9b:0f:cb:17:04:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Oct 4 04:01:53 2026 GMT
Not After : Oct 5 04:01:53 2026 GMT
Subject: CN=d65f819f997cea08bc2ddc14c5116121a2c2096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:27:9b:36:a3:7a:10:44:33:41:dc:ba:07:
c1:a6:3d:96:6c:34:75:97:c7:5d:ab:02:ec:ae:a2:
19:ac:3c:29:72:fd:e0:00:c5:6d:a7:77:0d:f4:42:
74:07:5c:f2:2c:c0:e3:1c:64:5e:d3:3c:7a:49:4c:
89:06:d6:93:18:c7:41:34:30:d8:bf:16:a4:5e:d2:
3e:92:a2:24:1f:1c:40:94:60:19:74:fe:fd:53:17:
82:7b:7d:90:2e:9f:0a:6f:f8:ee:31:aa:75:77:f5:
e4:28:cb:79:36:a7:67:1e:a5:b4:67:29:d4:5b:d2:
b8:5f:03:77:7a:d5:e8:bd:ac:f2:a3:62:85:fd:5b:
cf:85:78:19:2c:b4:f0:88:da:06:c8:86:13:39:52:
66:58:4e:20:94:0e:ca:23:ee:9a:3f:c1:f2:ed:02:
8d:9c:a4:fd:93:36:5c:07:6e:37:f7:c0:0b:44:ce:
ee:70:0a:6e:20:77:2c:73:4e:ea:6b:0d:8b:90:c0:
ee:b1:d3:8e:af:07:45:04:43:73:00:19:ee:47:66:
24:6f:3c:b2:91:6e:9b:e1:ad:10:df:56:79:24:cb:
63:d8:fe:ad:de:21:ed:4c:cb:fd:6c:06:4a:00:81:
55:2c:16:b9:2a:d5:35:25:de:1d:8b:09:13:b0:4d:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:81:9F:99:7C:EA:08:BC:2D:DC:14:C5:11:61:21:A2:C2:09:6C
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:73:01:76:75:97:06:d3:40:5a:85:fe:09:09:17:02:94:bf:
66:73:30:d5:3f:75:a7:63:1b:46:ce:b4:89:49:29:43:6d:bd:
bf:62:bb:5c:e4:23:15:73:a1:7f:de:62:71:94:d9:c0:56:75:
64:f6:3c:11:a2:af:cb:22:a7:7b:70:8f:f6:29:9c:2e:43:63:
78:e4:63:c2:48:a3:c7:1b:c9:c0:95:62:35:ff:65:e9:09:aa:
e3:46:ac:13:13:8f:3b:f4:36:7b:95:5d:71:a7:14:e1:b4:84:
d7:de:67:e8:12:e3:a0:8d:7d:0d:4a:0a:86:fc:92:9a:c7:1a:
3f:5c:40:ee:e0:f0:5f:da:89:39:ad:fd:fe:cd:ed:7f:26:e5:
8d:4b:9d:90:66:3f:26:80:6f:fb:b3:89:3e:5b:46:aa:72:82:
b6:79:51:b2:6c:67:65:6c:a6:75:cb:b7:93:46:9d:db:fe:ab:
18:89:37:a9:8c:15:e2:03:7e:a8:3d:8f:bb:7f:1f:02:94:0f:
07:17:79:2c:e8:c8:c5:91:cc:eb:0e:50:13:aa:c0:6a:37:19:
e7:30:1a:4b:20:f0:77:50:8f:53:6b:94:fe:0d:e2:7c:dd:c1:
67:09:3e:c2:e2:81:7e:61:40:cf:b2:05:33:a4:a3:8a:11:57:
9a:55:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:12:38 2026 by rpki-client