Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: jNt9tGx/nH0ooLYcKsRTwgP5b4eOAgK+q/KdQQ1KMx4=
Subject key identifier: 07:80:EA:5C:27:F2:A6:D9:7E:99:51:52:0E:4E:F1:24:A7:8E:D9:CB
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 01A1126017AFF59D27596B59A7CC59E7C179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 1A90
Signing time: Tue 06 Oct 2026 18:00:49 +0000
Manifest this update: Tue 06 Oct 2026 18:00:49 +0000
Manifest next update: Wed 07 Oct 2026 18:00:49 +0000
Files and hashes: 1: Nx1ZmF0LLUBVNb7pg5SUQFqkEEo.roa (hash: 7h8Dusgv5GisCOAGKVB6gWNCmRgBLzLbZbpY03tENm0=)
2: jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa (hash: nFOTFG+7OrEIpqu+RBWcBN5R7HeTDegtuQdJz0N3Rss=)
3: q-cmnczAq_R4WQig-JxyBCeiu3E.roa (hash: QW62YPpx0nobzbNY1r86LME0OVZNaU0nQ5C4usrbmMM=)
4: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: W1npGHOkhe7lv2RF0GguT4ZzuMNKBgbUsJa7luYe8Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:60:17:af:f5:9d:27:59:6b:59:a7:cc:59:e7:c1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Oct 6 18:00:49 2026 GMT
Not After : Oct 7 18:00:49 2026 GMT
Subject: CN=0780ea5c27f2a6d97e9951520e4ef124a78ed9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:3b:3c:6b:a3:b6:2d:54:5a:16:9c:99:58:
62:48:fa:d0:09:e6:70:54:ea:7f:08:ae:f0:f4:57:
38:1a:31:ab:bf:ef:18:98:ba:89:7e:a4:57:14:0e:
39:42:d6:69:7d:d6:e2:6f:d2:3e:b8:2b:cf:de:92:
19:f5:f6:1f:44:c8:d4:0c:89:fa:90:df:a6:ce:cd:
dc:9f:31:2d:01:a5:46:67:32:27:15:2d:55:98:f4:
e4:c3:f1:68:25:25:2c:11:77:07:90:41:48:8a:66:
d8:bb:7b:81:0b:11:f6:df:53:e8:07:ec:a7:29:42:
fd:89:29:3c:6c:11:d7:bc:06:e3:6f:86:8f:35:48:
bd:2f:b1:77:68:70:1b:39:a0:0a:54:ca:fe:d4:5f:
87:f8:aa:97:76:bf:8f:9a:bb:ee:11:82:fd:5f:a6:
e6:80:44:ae:bb:95:d6:5e:cd:74:2c:8d:a5:26:b4:
93:94:2a:27:54:ba:af:da:4a:ae:84:9c:0d:24:f2:
73:01:0f:f6:96:47:ef:bb:35:d5:d5:78:16:19:fc:
4d:7b:ed:ea:0c:a7:21:f3:47:8e:6a:92:25:41:29:
37:b3:67:55:12:5c:0d:cb:16:9f:a0:dd:06:29:ff:
09:84:53:64:9c:be:a1:2b:e1:94:20:18:98:bd:f4:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:80:EA:5C:27:F2:A6:D9:7E:99:51:52:0E:4E:F1:24:A7:8E:D9:CB
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:64:6e:77:50:41:71:e6:1b:a9:a0:8f:fe:92:e3:ed:e0:1e:
fa:83:29:9b:b8:11:d0:07:9f:94:bc:28:69:50:af:b9:45:6e:
82:4e:b3:56:91:7f:de:44:99:7e:99:3a:2e:bf:70:f5:4e:6d:
c4:fa:e6:a2:69:e4:d9:d7:8a:e6:92:e5:8f:db:0c:68:1d:96:
c3:8f:e8:52:f1:04:e8:d3:bc:9f:25:0f:8f:c3:a8:d3:23:50:
ef:1b:7a:4c:7c:92:5c:f8:f6:69:b6:6c:a6:06:5c:42:0c:34:
22:ac:b8:d8:6f:89:f2:24:dd:6e:6b:a9:17:08:77:58:08:a5:
dc:60:dc:e7:bd:2c:46:00:e7:c2:3a:1a:f0:aa:72:09:75:77:
dd:0c:bd:9b:bd:72:22:62:4e:9a:22:21:b8:1d:10:92:ca:c1:
f5:56:90:27:27:5e:d8:e7:72:ae:15:5a:a2:e9:9e:12:e7:91:
9e:78:4f:ef:d5:62:4c:e2:79:bb:64:0f:95:2c:45:28:66:00:
7d:e8:23:52:a5:ab:e1:7d:66:ac:46:5d:97:05:e8:2b:10:9f:
1f:d2:1a:37:bf:d3:41:ef:48:d8:79:de:52:b9:55:13:e0:2a:
1b:d6:68:87:ab:7f:45:a9:f7:6d:3f:cc:fe:44:7f:e1:c1:18:
98:ee:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:57:08 2026 by rpki-client