Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: vM8kHeHDyZaWfvFbdrfQzc0B9k+YtnVhh4BzRDgYV3g=
Subject key identifier: E4:69:F2:62:0D:36:65:8B:02:34:FC:6A:00:E6:4F:F6:4E:B2:C2:46
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 019D2C2A98166846BAC4DBB388D2A79F90D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 22:01:21 +0000
Manifest this update: Thu 26 Mar 2026 22:01:21 +0000
Manifest next update: Fri 27 Mar 2026 22:01:21 +0000
Files and hashes: 1: 4SfojSm1O0yZDYuVtjhC0oqjoZo.roa (hash: q4mcTRajmA1x3P8ne7N/z6IxFaFTMj4qWNPcuiyXN+A=)
2: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: BLEd/R1qDOZ3X1C0tcpMSgSNqosu8NOBgQVDEv/fGyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:98:16:68:46:ba:c4:db:b3:88:d2:a7:9f:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Mar 26 22:01:21 2026 GMT
Not After : Mar 27 22:01:21 2026 GMT
Subject: CN=e469f2620d36658b0234fc6a00e64ff64eb2c246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:20:51:e7:91:4c:4f:a1:46:36:c3:bf:1a:
14:85:4a:3f:49:19:92:32:aa:ec:e5:81:c6:b5:a7:
35:e9:0a:06:a6:5b:53:ee:41:ef:62:fd:2e:5a:d0:
7e:4a:a1:f9:6f:2f:ef:7b:d3:fb:e7:a6:86:a3:53:
44:f7:60:32:3c:b7:3b:05:7c:97:df:da:1a:ef:72:
96:34:d6:67:4f:d2:38:a8:04:a2:1a:36:85:e5:f7:
f5:d1:d0:54:2a:62:7e:d8:c0:46:e0:cd:c2:3d:72:
5b:1b:1f:64:1f:d3:ba:0f:1e:79:20:bc:37:a3:bf:
13:22:c7:3c:ba:b5:7c:c8:91:e2:25:89:cd:7a:26:
1f:da:6e:71:35:91:25:66:45:6f:e1:a2:89:92:92:
f4:d7:9a:01:59:47:5a:9e:52:49:f6:a1:f4:52:14:
dd:08:65:5e:44:c0:6b:07:14:06:45:ac:61:4e:36:
92:b0:27:3e:2a:99:72:0c:10:d7:fb:d9:cc:e1:3a:
bc:11:32:59:76:45:a6:66:f1:50:4d:44:c9:08:93:
ba:3f:68:64:53:2e:55:1f:90:d5:05:32:40:4c:b0:
f5:a4:b1:0d:12:14:55:1e:f5:f6:69:e0:bf:27:4e:
7b:31:4f:6b:3f:96:34:11:79:dc:25:4f:ad:39:28:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:69:F2:62:0D:36:65:8B:02:34:FC:6A:00:E6:4F:F6:4E:B2:C2:46
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7a:06:94:9f:db:1d:93:4d:5f:80:79:cc:44:8a:14:f1:f9:
aa:9a:dc:14:53:62:4e:1c:ea:b4:d6:e2:c0:60:b2:6a:b4:83:
fc:7e:21:ef:9e:75:2d:a0:2e:8a:9e:4c:cd:ea:d8:d5:b2:60:
5a:f5:69:00:c1:11:71:7e:3d:1d:32:3f:0b:6f:19:0c:d5:95:
ff:0b:70:d5:28:e0:98:62:8e:d7:a2:2f:15:9d:65:a4:d1:b6:
6d:a7:f3:8c:60:fc:55:70:e1:29:14:58:58:00:ae:31:90:57:
7f:5c:04:2d:76:0d:ea:7c:24:c2:aa:55:a9:5e:2e:8c:57:11:
39:25:97:2d:c5:05:42:9c:6c:f2:0e:a0:10:c2:bd:df:2a:d6:
96:55:23:de:80:a6:49:69:88:2c:db:1e:c8:66:d0:3d:5e:30:
e0:d1:bb:5a:9d:c9:61:f3:10:22:e8:02:b0:04:f8:9d:28:c6:
46:22:ac:87:6e:39:c4:0a:ce:f5:1f:c8:f2:f8:92:23:a9:7e:
69:f9:7c:17:68:fb:46:86:40:22:27:f3:50:aa:ee:1f:b8:a8:
27:55:7f:97:76:44:21:75:17:2b:0d:5c:6b:69:a7:4e:5c:4a:
11:aa:cd:c7:82:56:ad:e4:9c:40:9a:68:8a:ff:ee:a7:d0:ae:
7f:d4:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:11:07 2026 by rpki-client