Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: Lk+P5yVm28500LC3cxE4FHf4QnaATaUrDUNOSElpsu4=
Subject key identifier: 94:AF:78:B9:B5:47:26:D8:7F:41:04:31:E5:A5:AD:A4:C6:A1:91:0F
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 019D28F23B38FC262308040075DA5906BC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:00:56 +0000
Manifest this update: Thu 26 Mar 2026 07:00:56 +0000
Manifest next update: Fri 27 Mar 2026 07:00:56 +0000
Files and hashes: 1: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: StIzOqkpqQRy1PPcL1gTwTH1zID9OHfYadcL8G528Uc=)
2: tQeq3gyDlggE_iMVfQtijaWolKE.roa (hash: +8U51vzZRoC0d7LUoiUC8rmqZBGQmF1Hqr6UPr/Xav8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:3b:38:fc:26:23:08:04:00:75:da:59:06:bc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Mar 26 07:00:56 2026 GMT
Not After : Mar 27 07:00:56 2026 GMT
Subject: CN=94af78b9b54726d87f410431e5a5ada4c6a1910f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:aa:a1:e2:a2:68:7f:c0:f9:30:6e:54:a0:
08:b4:62:69:31:23:b2:be:1e:09:08:d4:94:45:3d:
08:0c:76:fc:f7:cf:d3:c9:b9:62:b7:4f:3b:00:a4:
9a:99:b0:66:60:1b:ec:fc:ff:ac:e6:3b:a5:eb:c7:
57:77:e5:6c:4b:50:3d:88:6e:03:03:55:01:d1:ab:
65:fe:c5:b4:44:0e:d5:95:1d:39:06:cf:ab:b7:cb:
7b:1d:95:db:31:5a:b7:0d:10:93:2f:f7:88:41:13:
20:21:c3:74:0e:21:c7:cf:8e:2d:af:3c:cd:28:0a:
65:86:d0:97:1a:af:1c:72:d8:3e:1e:01:42:73:91:
bd:ba:44:f3:2d:63:fe:28:2a:26:bd:da:25:a0:0a:
fb:2b:cf:54:9e:69:18:2c:ae:7e:ef:64:01:8a:0f:
86:9d:06:ba:84:62:fc:6a:9b:c6:3e:2b:8d:cd:62:
d2:df:bf:92:b2:b7:eb:f6:b6:5e:37:85:0b:0d:a1:
45:6f:26:22:0e:72:c2:34:81:d0:0b:c3:0e:18:7c:
e0:af:19:15:29:e7:2f:cf:c9:3d:5b:1e:51:29:cc:
68:6e:0c:0d:48:75:8d:2a:db:a3:9a:24:e6:a0:e8:
b5:fb:5d:de:52:f6:d8:d1:51:7a:d6:90:ea:86:ac:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AF:78:B9:B5:47:26:D8:7F:41:04:31:E5:A5:AD:A4:C6:A1:91:0F
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:18:c9:ff:7a:4b:00:13:bd:88:a0:16:b5:2e:78:c6:ef:5e:
bd:7b:1b:af:e7:2f:11:4c:6c:9c:30:6b:7f:c0:34:e9:4f:3f:
0a:ce:ae:ce:6c:d1:7c:8b:9c:d3:8f:a8:ee:56:f1:02:42:ea:
f3:90:79:2e:14:72:a3:bb:25:c7:ae:03:a3:43:8c:fe:2c:5f:
fd:e9:51:b2:26:9f:56:ff:ea:dc:d1:e2:0b:33:40:3e:c4:d1:
e6:19:f6:fd:16:a8:b2:8e:ca:26:a7:44:0d:ff:70:fd:52:3f:
ee:db:09:42:a2:ff:27:aa:a4:62:0d:24:78:4a:85:be:76:c7:
37:74:5b:01:ce:83:b4:fc:82:62:64:62:38:91:45:9d:d3:5d:
61:15:a4:fc:09:f9:bc:4f:d0:83:84:55:d1:45:c4:82:bc:d0:
b3:b0:0d:f4:1a:f9:9a:35:ee:b9:e9:96:e1:2c:9f:87:c3:7b:
a7:b8:21:2a:fa:1a:66:cf:18:67:a1:cc:36:ca:ae:6e:b0:bb:
32:c8:78:6e:ef:05:31:a6:7e:70:e4:80:79:47:9b:d9:60:98:
ec:e9:24:02:ed:fd:6f:17:79:db:5f:a6:3d:fb:a9:31:dc:71:
bb:3c:36:e1:e3:55:ec:2a:57:31:ed:25:24:df:6d:50:89:ce:
11:7a:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:39 2026 by rpki-client