Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: XB44yXSXH7lQiUqLgTrnfaOPrSa/y0xLatClqI7/ofQ=
Subject key identifier: CC:0B:93:83:51:31:BE:8B:DD:16:D6:D7:31:00:D1:3C:7A:7B:9F:AC
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 019D258410BB744152A83BBB9CDC29FADE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:01:45 +0000
Manifest this update: Wed 25 Mar 2026 15:01:45 +0000
Manifest next update: Thu 26 Mar 2026 15:01:45 +0000
Files and hashes: 1: 6H1pHroW_WpI3RuJ_XZZvGns_sM.roa (hash: NhpuQWl3vvTwNJCxL4zGLvg+GHPtSA273p3r0OlIk9U=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: xwExxWZfNBWSlkaOdwJiwJ06rb47VchFCeFy4pkbvvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:10:bb:74:41:52:a8:3b:bb:9c:dc:29:fa:de:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Mar 25 15:01:45 2026 GMT
Not After : Mar 26 15:01:45 2026 GMT
Subject: CN=cc0b93835131be8bdd16d6d73100d13c7a7b9fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:37:c8:a2:b6:c1:ef:6b:7e:d7:97:17:dd:
86:e3:2f:f2:ee:77:b1:9b:fe:fc:cc:3c:db:0f:5a:
e1:d3:23:1b:bf:74:c1:d3:96:e2:1b:52:d3:e8:b2:
63:95:f6:8f:76:fb:a1:f0:48:8e:fa:9f:a0:9d:a9:
22:5d:39:74:55:4f:cd:a1:8c:61:87:49:54:0a:90:
b8:07:1a:6a:8c:ca:4a:65:f2:ce:4f:77:e7:fc:10:
88:c0:3d:e2:9a:76:7f:75:cd:6e:fa:14:9e:20:db:
45:81:68:c8:e0:ab:d1:37:de:14:7f:ec:6f:9e:a4:
60:cd:7e:e9:cd:4e:1f:94:96:53:2c:be:39:2f:5a:
30:e4:1f:bc:56:4a:b7:fc:4a:f3:e8:15:87:ad:1c:
f4:a0:fb:8e:c3:5e:e6:b2:d4:eb:2f:0f:f3:ad:e2:
ca:5a:67:cf:bb:a2:c7:a9:c6:f7:d1:31:90:18:93:
64:40:d3:89:f3:3c:f0:05:30:31:92:85:b0:80:0d:
61:23:82:f6:76:38:ff:23:24:83:c8:55:a1:56:19:
d6:63:58:2c:34:31:ed:a4:67:50:ec:b0:c8:01:80:
8c:22:c5:a3:dc:ca:3a:1a:36:fd:99:e5:7d:7a:8e:
59:b7:ac:70:d4:e3:5b:40:69:05:39:04:c5:49:36:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:93:83:51:31:BE:8B:DD:16:D6:D7:31:00:D1:3C:7A:7B:9F:AC
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:45:40:98:d7:67:59:21:e9:c1:4f:ab:78:3d:27:72:b5:c1:
0f:d8:1b:ac:0e:54:74:3a:98:b5:49:a5:09:3c:64:41:73:7d:
a2:cf:0a:5e:6c:ee:06:ae:96:1e:d4:ce:2d:fa:1b:9e:d7:de:
69:97:38:5e:1a:c4:db:a6:62:a0:82:85:12:ae:f6:d7:b7:ce:
fd:5a:b0:9b:20:5d:03:4a:48:13:99:44:53:78:d1:ef:92:b3:
48:c5:8f:b6:69:50:68:68:95:ab:f8:f0:5a:70:06:d5:82:60:
43:db:47:a5:96:6e:47:1d:68:9e:ef:f2:5d:fe:3b:cc:68:73:
d3:72:9b:68:b9:80:c8:56:2f:36:a4:c4:72:3c:88:37:5a:aa:
f5:28:b8:b1:b7:4e:00:41:94:8d:ad:1b:29:18:55:44:68:36:
ae:cc:bb:55:15:f4:00:4a:7c:67:9b:87:09:22:4e:49:2f:9e:
18:7e:3f:bd:7b:64:7e:ad:60:de:0c:fc:1a:6c:22:e1:f2:80:
f5:a0:17:0f:2c:1e:00:5d:71:1f:79:1c:3e:04:11:76:84:2e:
d0:82:40:3b:c4:23:9e:14:38:9b:60:d2:b2:2a:a4:a2:be:c8:
14:80:25:96:df:e6:87:f3:50:43:fb:7c:09:b8:ec:17:fc:1e:
ab:2d:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:01 2026 by rpki-client