Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
File: q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json)
Hash identifier: WvhvdZE/UgORSPujJQDID6Cg5jTKcS9HL0M1Wo3qess=
Subject key identifier: 10:37:67:E1:F4:05:42:AD:96:41:63:56:78:B9:50:31:6D:F4:43:F6
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial: 019D26284868FDE947D45B8D031337EA6F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
Manifest number: 0CEF
Signing time: Wed 25 Mar 2026 18:01:07 +0000
Manifest this update: Wed 25 Mar 2026 18:01:07 +0000
Manifest next update: Thu 26 Mar 2026 18:01:07 +0000
Files and hashes: 1: 9Be-VYTf9vY1XNIWBiOtqmqgeYY.roa (hash: PdlEhWVQheJNombtOvhcIE0GMdWAnH/pzA/LzYobY6I=)
2: LVcNRcoKynx-S9ayQ1euTJTQfyk.asa (hash: 1d6r/eVaHsXRHTlyLwHPVIg/m3kEQLjddf6CxXVVDCE=)
3: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: u796fBbK0jlou4GIeg2L6T//bUpp6xPv5/P9sqRQHH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:48:68:fd:e9:47:d4:5b:8d:03:13:37:ea:6f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Validity
Not Before: Mar 25 18:01:07 2026 GMT
Not After : Mar 26 18:01:07 2026 GMT
Subject: CN=103767e1f40542ad9641635678b950316df443f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:a6:c2:18:03:4d:c2:8c:8e:96:53:34:be:
9f:0f:ee:39:04:6d:e8:6a:90:9f:0c:bd:e0:db:c4:
cb:cf:e7:7f:d4:76:df:a6:17:b1:4e:be:a6:20:0a:
ad:15:4d:35:b6:64:4a:e3:2d:25:15:be:f0:b1:d8:
3d:38:af:8b:07:e9:d6:4a:4b:48:03:ad:2a:8c:64:
0b:79:0e:7f:3e:12:0c:b8:88:7b:f7:a0:d0:e7:d1:
a6:bd:2b:c3:15:db:44:0f:6f:da:d4:b7:c0:84:2b:
b2:cb:04:83:fe:4b:4d:a8:b9:9e:d1:e2:3e:7b:3e:
e3:c0:80:41:bf:62:cc:1d:57:b1:4a:b8:c6:0f:df:
0d:39:b7:2d:62:9d:72:ab:80:6c:de:9d:27:59:04:
55:29:97:c3:c8:e3:42:54:8a:56:46:4d:07:4d:22:
ca:21:01:fe:01:59:94:b5:6a:63:29:7d:66:fe:1a:
5e:cd:ec:ce:4b:21:49:59:e5:a6:1e:aa:e4:b4:ef:
c3:84:15:b8:93:92:79:94:98:72:ae:3a:21:a6:da:
0d:c4:8a:13:57:da:ea:8f:01:c8:28:2f:f8:8d:61:
df:99:9e:29:8a:d3:16:31:41:67:09:d5:08:00:53:
87:d1:3f:0c:ac:d6:51:05:c5:fd:03:3b:4c:da:42:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:37:67:E1:F4:05:42:AD:96:41:63:56:78:B9:50:31:6D:F4:43:F6
X509v3 Authority Key Identifier:
keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2e:d6:b4:6a:77:42:9f:7a:c9:e1:06:5e:eb:07:0f:a4:d7:
cf:56:0c:57:1e:95:91:69:36:c0:9a:85:07:c8:d6:55:0a:47:
61:b6:c9:f9:53:61:f3:66:26:c9:16:ca:e8:1a:76:c3:33:f5:
31:ca:7f:6a:bf:f4:76:7c:fe:89:00:a6:6e:0e:b3:6f:91:ab:
4a:d3:30:d5:1b:9d:37:31:81:06:09:cc:6e:fc:a7:a1:16:86:
2c:b4:42:97:a3:d3:e2:80:66:3c:24:41:8e:83:fa:1e:be:77:
cc:47:d1:ec:f7:6d:ae:18:40:aa:56:dd:d2:12:76:db:87:37:
92:33:0c:77:84:f7:6b:31:e4:bb:ce:8d:12:64:b4:c1:33:a2:
0d:2c:8f:e0:b4:c3:65:77:aa:9f:8a:10:a5:64:10:5f:ae:97:
7f:28:9f:96:e6:56:d4:61:c1:6e:71:25:64:81:29:93:8c:90:
80:f2:6c:45:bf:f9:4f:e2:e1:49:91:83:e8:a5:6e:1b:b3:7b:
4b:4a:c6:e5:90:e7:94:ef:80:bc:be:83:10:71:a7:a3:ad:1c:
d7:db:d0:e2:8a:87:a0:31:82:52:3f:ce:d8:83:da:96:ec:dc:
6f:76:92:8d:70:33:e6:1a:1c:34:d9:e4:5f:e2:be:04:04:80:
c6:b0:f7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:32:20 2026 by rpki-client