Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: DGDmGdrAgnR5bEMFoUfZmx78pCCnotB7FkkidE6YdRc=
Subject key identifier: 76:8A:08:3D:07:5E:91:2F:F4:CD:A9:10:2D:48:88:A3:1C:2E:A6:8E
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 01A10EBA143A2E79E4995117278828751DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 01:00:38 +0000
Manifest this update: Tue 06 Oct 2026 01:00:38 +0000
Manifest next update: Wed 07 Oct 2026 01:00:38 +0000
Files and hashes: 1: ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa (hash: wWznWI3pS+Ln2wiCRlmdeHQDHSW6bkqR14q4qqXsCjc=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: pss5GUbLSBMZ8tNEpSXoAo8zZQeco6kHxX1T3w65tgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:ba:14:3a:2e:79:e4:99:51:17:27:88:28:75:1d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Oct 6 01:00:38 2026 GMT
Not After : Oct 7 01:00:38 2026 GMT
Subject: CN=768a083d075e912ff4cda9102d4888a31c2ea68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:99:8b:b6:98:a1:37:51:16:b6:d6:78:a9:
e4:d7:25:e6:92:28:f4:bf:94:07:c2:78:4a:d3:96:
af:77:2c:c3:9b:41:ab:f7:9d:c7:8b:ae:51:a2:5d:
c5:03:03:72:46:b6:30:6c:6b:15:83:ba:e7:ec:d4:
66:e4:e3:a3:80:dd:55:83:30:f9:d9:fa:68:6c:50:
7f:be:87:f1:cf:05:bf:58:7d:bc:e9:3e:61:59:fd:
d0:6c:42:a6:3b:93:0d:42:97:70:3a:c2:ca:ab:d8:
25:c9:d8:18:58:cb:0e:4f:52:b4:ce:8b:80:98:4a:
36:e3:a7:f9:0d:ef:89:d7:11:1c:5d:90:9e:40:83:
03:ca:f5:71:dd:b8:96:19:e4:95:5d:33:f9:44:5e:
73:6c:04:9f:4e:fe:a0:c5:04:d2:46:74:88:7c:17:
57:92:78:aa:36:ab:1b:4f:ba:1c:ac:6a:9f:d5:fa:
72:71:8a:f7:57:ba:cf:7f:d3:db:a5:6e:dd:67:8f:
6c:35:80:3c:8b:fa:13:30:9d:a4:ba:28:c8:71:8d:
65:f3:7a:4e:2c:6b:de:e6:0f:c5:c3:6e:42:0f:35:
68:42:6d:cb:0c:05:85:2b:d7:7d:88:6f:03:90:4b:
1f:29:6a:88:7c:79:b3:fd:78:b4:fd:c7:64:67:d1:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8A:08:3D:07:5E:91:2F:F4:CD:A9:10:2D:48:88:A3:1C:2E:A6:8E
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:92:6c:e8:68:7d:7c:4c:54:2e:3a:4b:df:4d:1b:58:c8:e9:
36:ee:32:eb:04:8b:5d:50:ee:d4:19:11:e2:3e:2d:3f:38:45:
c5:09:22:61:17:c0:d4:03:cc:54:71:a2:fc:cb:68:03:9e:09:
0c:42:ea:51:a7:f6:e0:90:a9:d3:96:b0:2f:9e:86:9d:2a:53:
bf:4a:34:1d:7a:a3:c8:00:19:b9:b4:8c:d5:24:4a:85:5f:77:
7f:15:33:4e:50:0d:5b:91:97:d4:15:b2:68:5a:79:df:f5:8e:
66:0f:e7:8a:45:8a:90:64:21:5f:9d:44:2a:14:4b:b5:34:5d:
68:42:61:bf:3a:e9:79:9a:d3:f0:2b:1e:a5:22:e0:f5:21:bd:
1a:d2:7b:34:ca:42:25:7a:01:da:63:24:73:05:8d:27:70:78:
fd:e2:26:db:88:ce:0d:aa:a2:bc:9f:dc:a7:cb:77:d8:3a:aa:
29:a3:d8:c5:3b:f5:49:d8:f9:8f:ad:01:5e:ac:ed:e4:ca:df:
61:0a:af:0f:ab:c7:68:4b:06:5f:4b:84:af:7d:ec:cf:3d:65:
8c:32:b1:8d:af:67:4d:8d:56:9d:bf:19:cc:20:ee:d7:0f:a7:
05:8d:bc:ab:95:2b:d1:cd:89:c5:8a:af:4c:98:7b:60:58:e8:
bb:b2:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:52:29 2026 by rpki-client