Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File: q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier: qDHowaalzUfWNKtQS45ev7zuQJcUbXxdYqzrzSTv8Vk=
Subject key identifier: 8F:BB:5E:C5:63:20:7F:C2:3A:60:8E:AF:EA:AD:17:31:10:C7:88:DE
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 019D28F28ED5DA9E1CD56F34011195C3FCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number: 1533
Signing time: Thu 26 Mar 2026 07:01:17 +0000
Manifest this update: Thu 26 Mar 2026 07:01:17 +0000
Manifest next update: Fri 27 Mar 2026 07:01:17 +0000
Files and hashes: 1: 4uNnt1OJCwXtGEItgS6NtJuR4oA.roa (hash: gAZN3s4yjtn5ayJ9SQSEa16uGCJ0bKN5TqseIGhBElA=)
2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: 2MRktyveRP2uOOZt//pAKh24bAcaHMgqgjwZYSgKtlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8e:d5:da:9e:1c:d5:6f:34:01:11:95:c3:fc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Mar 26 07:01:17 2026 GMT
Not After : Mar 27 07:01:17 2026 GMT
Subject: CN=8fbb5ec563207fc23a608eafeaad173110c788de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:f0:2f:80:be:56:cd:a9:4c:24:59:2d:2a:
4c:f0:e5:71:b5:5e:4a:42:65:a6:35:ae:8c:75:6b:
fc:05:88:24:e2:8f:07:ae:c8:d9:0b:67:ec:c2:be:
b4:e5:6e:f6:68:99:4a:d0:a0:ed:76:8d:95:fa:71:
d0:73:6b:47:2e:af:03:bd:e8:e5:87:7d:28:0e:23:
14:21:26:9b:32:be:d7:14:b4:e9:4f:96:44:7e:59:
1d:d5:76:81:d3:af:af:b4:8c:0b:c8:65:7d:cd:10:
59:61:bd:1b:6a:46:ff:95:f0:65:51:7f:07:46:80:
16:2b:6a:1e:18:08:99:29:21:de:1d:81:d1:39:43:
1b:b9:73:c1:5e:cd:50:5f:32:51:5c:d7:79:79:5a:
5d:82:7d:cb:1e:13:9f:0c:f7:45:40:0b:d2:16:d7:
51:03:c7:43:c5:6a:46:bf:1b:c2:6d:25:e0:10:24:
d0:61:99:51:75:02:6a:fc:f1:f5:61:a7:19:4d:90:
30:48:39:ff:60:1b:ed:7c:02:8e:5f:e3:b0:7a:e2:
5e:d2:51:40:17:da:8a:d5:db:9d:77:fd:cc:a9:4e:
4b:ef:50:8c:69:e0:e1:20:e3:4d:8b:a1:c2:f3:dc:
99:d5:b9:78:7a:82:2b:e8:41:a0:64:35:cb:cf:96:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:5E:C5:63:20:7F:C2:3A:60:8E:AF:EA:AD:17:31:10:C7:88:DE
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:39:a1:8b:29:33:81:cf:50:0b:03:7f:ef:80:f7:12:b5:ad:
18:ba:d8:46:f2:73:53:9d:48:0a:94:97:8f:3c:d2:f6:14:71:
57:b4:e2:22:4f:37:64:1a:6d:12:f5:5a:32:54:60:39:d8:de:
b9:56:d4:ef:4c:24:9a:3d:97:43:7e:23:a7:8b:f0:c2:d6:23:
11:60:34:ac:46:88:7e:39:df:82:d0:ad:85:d2:22:f1:df:04:
06:1e:6f:cc:31:8d:ff:f8:68:81:d0:3b:37:1b:d8:d3:97:08:
87:17:50:fc:7b:98:d4:03:81:93:1d:95:8d:32:8e:31:24:cc:
db:bc:52:19:02:8a:9c:04:dd:61:ce:e0:77:b8:2c:71:c5:a3:
6c:45:2b:33:e0:8e:44:b2:e0:3a:b9:8b:dd:43:7a:31:4e:48:
4b:60:0c:85:00:7f:a0:71:13:8d:c2:19:48:2e:28:d1:71:26:
b4:42:18:57:45:f8:1e:28:9d:07:6c:d2:99:9d:1f:f7:3e:6e:
e7:b2:89:9f:46:f8:e9:c6:4e:9e:c8:0a:b5:ae:2e:46:ba:19:
00:a4:e9:fb:4a:ae:36:72:6e:12:c5:73:5c:01:8e:2a:fd:9a:
a9:58:bb:ed:4f:f0:8c:1d:23:10:a2:3a:22:dd:bc:4d:31:0c:
50:9c:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:14 2026 by rpki-client