Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
File: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft (raw, json)
Hash identifier: 8xbePuZu7TVc4fnj4yUjgIOklh7/wEXNicghrGlsC+I=
Subject key identifier: 85:6E:D2:12:0F:84:76:CA:90:87:DF:42:78:8F:AC:63:BC:6E:C9:1F
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Certificate issuer: /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial: 019D2A0507060571A5D038DF709A710DAC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:01:05 +0000
Manifest this update: Thu 26 Mar 2026 12:01:05 +0000
Manifest next update: Fri 27 Mar 2026 12:01:05 +0000
Files and hashes: 1: 4HGQ2m_tsGQ8bwCnPSXfEpO9HVQ.roa (hash: Q57pytqlVJrw0ni19UPnInhK5SASLjHDFcZbHb2XGnE=)
2: Dtb5L2i3F4bloLJfx5uawZqIkls.roa (hash: gjTGNWMLVvyGT9SUilWAhMd6bQfNZN+VjF9bv+zIY+Q=)
3: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl (hash: /RIRUTZTsSSJ9ecOp2VYZ5S4kwvKrmkSbU3s4WCbiOY=)
4: wCs9k6Mf4iHjjidVUpH6jUD59BE.roa (hash: 7sOLGSFd18txziMvutD89np8EpQNTpEhmRbFbF2gz54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:07:06:05:71:a5:d0:38:df:70:9a:71:0d:ac:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
Validity
Not Before: Mar 26 12:01:05 2026 GMT
Not After : Mar 27 12:01:05 2026 GMT
Subject: CN=856ed2120f8476ca9087df42788fac63bc6ec91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:94:46:22:cb:e0:98:b0:ba:de:60:c5:66:
f8:aa:cf:d2:bc:9c:4b:b8:3c:2e:a5:37:27:a4:ca:
bb:80:49:93:9d:57:4b:80:94:3a:08:06:da:84:c1:
9f:0a:a2:89:7d:a6:17:86:ae:af:c9:a5:f8:b4:7f:
63:6f:45:76:25:b2:9f:82:d1:ad:2a:f9:be:fd:90:
b8:db:d4:c1:43:1a:58:29:49:75:1a:35:91:9a:4a:
9e:92:56:45:8c:4d:a4:48:57:b3:2e:89:a5:ed:ad:
46:c7:e1:d3:9d:4e:ab:6e:05:a0:bd:de:30:51:55:
5b:aa:11:f6:db:64:72:08:c6:0d:8b:78:42:64:44:
ff:24:e5:ca:c8:98:60:95:05:2d:8a:26:ee:25:85:
3b:43:27:90:90:c5:7f:25:a6:e4:ec:be:89:51:6f:
5b:a6:9d:fa:07:e4:59:7e:6b:f0:b5:06:c1:b6:34:
1c:bf:fa:78:9c:9a:81:9a:57:bf:84:4b:46:2d:6c:
b3:05:7c:f6:b5:07:b2:64:52:25:e4:b3:b4:07:f9:
91:ae:e8:0e:b5:d1:7f:7e:cd:23:07:a8:53:7e:72:
25:f7:02:00:b9:03:c3:bc:2d:b4:7f:e3:c2:ec:ee:
77:40:e1:fe:1c:62:f9:78:b0:8b:e6:92:d8:b9:1f:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:D2:12:0F:84:76:CA:90:87:DF:42:78:8F:AC:63:BC:6E:C9:1F
X509v3 Authority Key Identifier:
keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a3:2d:a5:f3:0a:45:f7:9c:0d:a0:f2:2e:c6:7b:dc:bb:a8:
c2:ab:59:9d:d0:cc:e6:8b:23:34:f5:a3:9b:2c:b5:03:67:81:
01:d8:51:cf:cb:ed:95:74:5a:bd:96:3e:3c:19:b8:d2:67:ee:
47:8f:14:2e:af:82:8f:6a:43:f1:b2:e3:a9:02:3b:9d:04:1e:
fe:d9:c0:3b:e7:47:de:59:53:bb:50:e1:9f:01:74:bd:9f:5e:
31:4c:19:f7:3b:b6:ff:69:88:66:8e:e8:ba:43:2c:05:e4:3b:
73:8c:cd:60:fe:98:c9:24:09:50:8b:dc:72:12:f1:af:04:bc:
63:ab:86:9d:59:83:48:f1:1d:8f:cb:04:be:fc:ca:14:38:a4:
cb:77:4d:0b:47:22:63:b3:2f:1c:77:f7:dc:f5:62:a1:64:63:
75:aa:be:a7:ec:fc:3f:63:9d:72:ae:57:6f:2b:8d:9e:a4:27:
c3:eb:3f:44:f0:d9:c3:c6:21:22:98:d0:e2:18:92:22:30:1d:
84:29:25:92:d1:3a:a5:0e:aa:d8:57:b6:40:34:18:c1:32:e4:
6c:14:e5:f6:e3:98:76:5f:6e:0f:72:19:95:4c:04:e5:b5:49:
b3:0e:a3:7e:5c:03:7e:8f:11:26:40:6b:40:04:e0:86:62:79:
8c:31:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:39 2026 by rpki-client