Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: Yn60DCWbNlrAnkl16QE6RoOEpEmmIghRm8wyPIz+JjA=
Subject key identifier: 12:42:02:15:F9:F1:83:7E:D0:2B:CD:78:72:2C:EE:7B:78:EE:C2:D0
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019E1E34CD22898F641DE904CF835BFF9F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 22:00:37 +0000
Manifest this update: Tue 12 May 2026 22:00:37 +0000
Manifest next update: Wed 13 May 2026 22:00:37 +0000
Files and hashes: 1: kEStRgFFvUE-F5ouVzsvLSOaSko.roa (hash: CPss/SLu7PEcptxsMsF+R9khBX0xPafGY3ozU4mC0YU=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: D6mTxqUUkkyCHjfaYA5ZdTWuyv4T/GM5h7XzCgBp2d8=)
3: ybcCspNcqCQ33fBea-dujuXdvYA.roa (hash: VgxSvwLJO5sqIYu59D65/gIjVJTVHdASRnQ/3xkt0AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:cd:22:89:8f:64:1d:e9:04:cf:83:5b:ff:9f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: May 12 22:00:37 2026 GMT
Not After : May 13 22:00:37 2026 GMT
Subject: CN=12420215f9f1837ed02bcd78722cee7b78eec2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:98:ae:f5:94:bb:4a:32:0a:91:7f:88:8e:
40:1c:72:ab:f4:f9:4e:3e:24:14:3e:e5:74:9a:aa:
3e:fe:94:8d:a0:0e:a8:b8:4e:2e:95:14:cf:cf:73:
cc:87:8d:62:ab:db:e6:03:2a:8a:63:21:fe:b6:51:
4f:8c:15:ae:98:2d:f1:0b:fb:38:84:36:e1:e8:d6:
f3:59:90:db:2e:6a:13:43:b5:b9:ca:83:0f:7d:c7:
63:41:5a:72:06:07:e6:d0:20:a9:40:12:e4:e5:74:
33:e7:bd:be:e9:54:a6:bd:e5:19:74:95:bf:79:da:
98:56:7b:b1:1b:b5:8b:f2:7a:2f:26:39:00:49:e8:
67:f1:1e:46:cc:bd:c7:fe:6d:63:10:30:21:5a:7f:
e9:01:c9:db:f8:00:3c:dd:39:ec:8a:56:d3:81:b9:
cd:7d:af:64:05:ca:91:ab:19:57:be:0c:23:84:95:
bf:ae:41:ab:92:42:30:ce:45:8c:7e:b4:2a:36:a7:
cc:07:2d:8c:cf:cb:11:c5:c0:54:5a:61:5a:2a:00:
2c:8c:84:f5:41:55:c2:31:e3:0f:0a:be:39:5f:d4:
47:3e:bf:89:ed:e7:ad:b5:ac:c0:35:c4:6d:ba:31:
e2:42:3e:52:79:3a:ac:a4:bc:18:bf:30:b9:d8:c8:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:02:15:F9:F1:83:7E:D0:2B:CD:78:72:2C:EE:7B:78:EE:C2:D0
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6e:95:a5:78:80:39:ae:29:42:42:ed:ac:c4:b0:5b:08:fa:
6f:d4:a4:ae:61:c2:a7:2d:2d:81:4f:76:e7:44:3e:78:fc:9c:
14:62:3c:17:42:7f:21:8e:a8:77:9d:87:5e:27:e8:4f:b3:5f:
68:e2:87:77:04:1a:a2:08:59:83:cb:e5:85:ac:59:e8:63:03:
5c:cc:a1:9f:b5:b3:f9:7b:61:f4:86:f9:5d:d6:08:1b:38:60:
24:5c:9d:3f:a4:48:12:b5:7b:37:1f:0d:2a:04:6b:40:0e:ae:
da:89:62:6f:8e:3a:bc:04:73:0c:27:c0:7b:ea:3e:65:63:60:
c2:7c:69:cf:44:e7:07:c2:10:4f:00:62:67:45:bd:df:8d:ba:
bd:8a:0c:9e:1d:e8:ca:ca:25:26:37:1a:65:b1:3e:26:75:4e:
66:11:fc:89:de:74:ec:0c:3f:2b:d2:56:f1:6c:93:2c:6d:6d:
d2:ae:db:24:f8:75:10:65:0f:bf:c0:c4:96:0c:b0:72:33:91:
ac:6a:9e:db:80:66:87:17:de:d1:69:e3:e5:08:fe:ab:d6:30:
00:6b:d7:5d:44:7a:f4:68:2d:64:ae:c4:43:61:5b:83:c6:63:
05:6f:8b:e3:43:b1:dd:30:d0:64:64:db:4a:32:25:93:06:29:
57:33:48:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:37 2026 by rpki-client