Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: Cixw6Ay6TafMMtiH49tcLIETJV7KB+trr00yOe7SsnI=
Subject key identifier: 69:EC:4B:1F:13:9B:8B:2A:38:A4:BF:71:AC:F2:0A:40:5F:27:E2:74
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 019D2627FD227DCB4D564CC46BE75458F630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: Nx1ZmF0LLUBVNb7pg5SUQFqkEEo.roa (hash: 7h8Dusgv5GisCOAGKVB6gWNCmRgBLzLbZbpY03tENm0=)
2: jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa (hash: nFOTFG+7OrEIpqu+RBWcBN5R7HeTDegtuQdJz0N3Rss=)
3: q-cmnczAq_R4WQig-JxyBCeiu3E.roa (hash: QW62YPpx0nobzbNY1r86LME0OVZNaU0nQ5C4usrbmMM=)
4: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: MDi2hNxr8zPwZA4LJWBAUJcT2tX8r4JPXMbCI4TnZOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:fd:22:7d:cb:4d:56:4c:c4:6b:e7:54:58:f6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=69ec4b1f139b8b2a38a4bf71acf20a405f27e274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:cb:cc:e6:72:a5:cc:94:29:b4:c0:64:57:
80:50:74:b6:17:7b:58:9a:b0:25:ef:5e:3c:c1:aa:
bc:17:ac:10:30:72:42:91:70:28:34:d3:69:98:91:
45:b3:fe:ac:1c:e3:c7:76:2d:b3:95:ce:2f:e4:c4:
30:e8:1b:ac:48:4e:96:e0:53:66:7b:7a:a0:86:90:
87:dd:5c:76:e7:d6:ed:97:1f:62:d8:69:62:f9:fb:
a8:c5:1f:a2:26:19:8b:a9:a5:14:22:92:c3:e4:8e:
08:f9:d9:20:5b:7c:a6:1a:ab:fa:e1:ea:39:f4:1d:
84:7d:af:8a:95:d4:05:56:5b:6c:95:bd:21:fa:90:
6a:a6:be:d8:1c:cb:66:ea:ea:3b:17:6e:1c:d4:e4:
03:f2:29:71:a4:aa:c0:01:6e:0f:34:66:69:69:fc:
63:68:ed:8a:8a:97:65:6f:d5:d8:45:44:ba:c0:87:
08:f6:00:d2:59:81:1d:25:b6:80:2b:9f:3c:53:5e:
87:3f:76:d4:68:0b:4d:c3:59:54:b4:fc:73:b7:b1:
53:01:14:93:bc:f4:dd:35:78:f0:02:80:61:57:e0:
29:b6:a3:0f:1b:96:7b:0b:51:00:bf:e4:24:66:60:
2c:02:37:79:63:26:3f:d2:17:53:c7:2d:9e:1b:1a:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:4B:1F:13:9B:8B:2A:38:A4:BF:71:AC:F2:0A:40:5F:27:E2:74
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:59:c3:a8:b5:21:4e:86:73:51:73:4a:3d:00:b5:c7:0b:e2:
51:8e:eb:9f:b9:fb:e2:5a:d4:4a:f2:74:9b:86:62:de:5c:b7:
58:15:77:f2:4e:5e:8d:a4:6a:89:99:2f:2a:3b:ea:23:2d:43:
e5:6a:3a:6b:1a:1f:2f:18:ef:60:57:43:56:fc:30:9a:49:23:
c8:9c:00:fb:75:aa:97:fe:61:e3:41:34:e8:b5:8d:fd:a1:64:
5d:17:b1:a4:53:5e:31:c1:06:57:aa:50:f0:6b:7f:70:43:f1:
05:1f:82:96:de:57:65:99:fe:c6:eb:00:79:df:20:be:8a:6b:
16:31:e3:23:b5:c7:c9:59:de:99:82:17:27:01:18:3b:d3:10:
d4:8d:7d:ef:11:03:8c:28:32:6d:be:3b:c4:ff:5e:3a:d1:a6:
05:89:41:b8:ac:05:49:06:b3:81:97:ba:fd:8d:f6:af:a6:da:
34:91:93:cc:05:9b:64:aa:ac:16:cd:bd:7d:6a:4c:e4:58:6c:
ad:b6:a9:e1:2e:53:15:f6:48:1b:3a:ff:7c:6c:f7:12:77:f4:
fb:91:e8:0c:6d:d0:9e:d0:04:f0:f4:16:ee:2f:d1:bb:8a:4c:
29:bb:d7:6b:2d:f3:ee:fa:dd:62:31:49:b9:3c:e6:81:9d:d9:
fe:b7:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:40 2026 by rpki-client