Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
File: q-FU0X720TcQvhRyrlfy0Datb9Q.mft (raw, json)
Hash identifier: JToBEU55QTEdK/cstyK49tCRjURizFGt7KXrzaGD7Ic=
Subject key identifier: 5D:DA:D1:B7:E8:BE:5C:94:9E:E1:BE:7B:FF:2A:33:6C:DA:8F:AC:2A
Authority key identifier: AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4
Certificate issuer: /CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
Certificate serial: 019D333F296DC5608F315FCBD0AB8A0BAC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
Manifest number: 77
Signing time: Sat 28 Mar 2026 07:01:10 +0000
Manifest this update: Sat 28 Mar 2026 07:01:10 +0000
Manifest next update: Sun 29 Mar 2026 07:01:10 +0000
Files and hashes: 1: q-FU0X720TcQvhRyrlfy0Datb9Q.crl (hash: 1LnmyPWM61PdyPKNwZ9zunTGiCfIeArRxr4CbobwGOc=)
2: zF2FGxoX0ZoqBJpAdIrHjnJr748.roa (hash: Or8elDoj8qDhg577TX6Kjac9Hx8P3Z6GCnTIDEkjYE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:29:6d:c5:60:8f:31:5f:cb:d0:ab:8a:0b:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
Validity
Not Before: Mar 28 07:01:10 2026 GMT
Not After : Mar 29 07:01:10 2026 GMT
Subject: CN=5ddad1b7e8be5c949ee1be7bff2a336cda8fac2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:47:8d:f7:19:c9:bd:93:5d:b7:22:5d:2c:
9e:a0:9c:6f:81:c3:5f:42:0f:d0:7a:16:31:e3:33:
d0:5a:d5:2f:1d:e2:c7:55:78:32:ab:6b:4d:09:9c:
e1:d7:5c:2d:23:81:3c:bf:94:77:04:4b:10:54:64:
1e:56:8c:37:34:fb:bd:d8:52:9b:d7:10:86:1d:c8:
f7:a3:6f:43:a4:0c:0b:46:e7:1f:20:5c:c5:27:3b:
43:3f:17:f0:c7:63:c7:12:46:2b:f1:b1:7f:66:89:
f8:fe:7a:83:13:ce:f7:e8:df:64:d0:ca:11:71:5f:
8e:be:9c:c5:90:9d:a4:ea:f2:c6:12:da:a1:d5:fe:
68:a4:bd:05:e1:10:b6:63:ff:a0:b5:b0:ea:31:37:
7a:3f:52:a8:63:50:c2:99:61:c1:9a:de:84:3a:fa:
c9:1a:ce:e9:19:a0:38:d5:06:90:45:8d:34:02:c9:
f2:38:7f:49:24:b7:5e:64:71:0e:95:2a:a0:a5:d1:
8e:41:f9:fa:d6:02:5b:f3:05:4d:96:24:12:14:9b:
5a:00:ac:59:c3:c6:53:6d:6d:8c:25:40:25:16:d9:
a0:1f:34:46:db:87:57:69:44:c2:44:bf:3f:85:be:
ad:ba:15:7b:af:be:74:b3:fa:2d:0b:fc:bb:3f:2f:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DA:D1:B7:E8:BE:5C:94:9E:E1:BE:7B:FF:2A:33:6C:DA:8F:AC:2A
X509v3 Authority Key Identifier:
keyid:AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:27:33:fd:ab:49:7c:f0:bf:03:51:0e:39:32:2f:0a:39:
6e:5b:e0:34:df:86:32:ee:ef:49:71:af:4c:b6:47:d7:af:13:
97:42:ae:b8:d9:12:33:11:56:f5:49:8b:fa:3d:e3:4b:56:46:
21:9b:f0:a1:c6:40:22:3a:d6:bb:30:1f:e7:0e:30:cb:26:d8:
e5:85:4c:92:36:56:3f:72:57:c9:da:db:03:7d:f4:13:41:5d:
59:e8:a2:88:34:b4:8c:9d:d3:b4:b4:a0:a8:af:30:a2:fc:29:
6d:2c:16:5d:ab:f1:30:07:44:43:90:e3:59:7d:eb:40:56:f1:
17:21:16:7f:cb:23:ca:36:46:bf:67:6a:d7:9e:6b:d3:71:b1:
d2:4f:24:cd:92:11:ab:90:0f:ec:16:72:d8:f5:2e:1a:39:b9:
1c:57:b1:b8:d2:1e:2d:aa:a4:f0:25:72:0a:44:30:fa:07:6d:
d4:ea:7e:b4:15:f9:a5:46:b5:d4:30:3e:a9:aa:98:8b:51:70:
d3:3c:9a:8f:69:3d:66:64:21:c3:4f:33:fd:fd:ce:27:42:2f:
f9:e2:6a:bc:85:bc:60:3e:93:be:4a:00:41:60:1d:ec:41:60:
4b:5c:f8:61:6d:62:b6:f0:3a:e9:7a:d2:d0:37:d0:bf:36:4c:
a9:74:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:28:05 2026 by rpki-client