Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: IKqa529FQzzi5IY81PX2JysrLug5EfHSuLJesxjLM3k=
Subject key identifier: 21:2B:0A:89:89:03:01:60:93:EA:C4:96:AA:8D:A4:03:28:BF:97:FD
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 019D26967D2E6217DCE6B23D9D692A9E599A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:01:29 +0000
Manifest this update: Wed 25 Mar 2026 20:01:29 +0000
Manifest next update: Thu 26 Mar 2026 20:01:29 +0000
Files and hashes: 1: 1-NlXpS8qOmzJQxvh3Vemv6GfalE.roa (hash: HTFIVkm2pfbCpKdVoGWwpPhxe9WRjwNhw3rsgiBHLbE=)
2: 75AwziJR5w1JmorjN6nm2vuye_U.roa (hash: P4Uobg4aZmz71V7WcJ/2A9j6g9mMLhAaqFQfuo24nE4=)
3: S4NA7oSGgXey3Rldy_KPITNHmFc.roa (hash: pctvbrfIhJmWDmoaj1TcgltdORT390IlR3CQ4CeTHxA=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: jp6K8GNgBCzv4Fa+7Yr8G018jbwrvZ1HKp3dJ7PUgzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:7d:2e:62:17:dc:e6:b2:3d:9d:69:2a:9e:59:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Mar 25 20:01:29 2026 GMT
Not After : Mar 26 20:01:29 2026 GMT
Subject: CN=212b0a898903016093eac496aa8da40328bf97fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:2c:ae:f3:53:17:a0:92:c7:a7:34:ac:69:
4e:59:2b:96:5c:e5:a4:c5:e3:e9:74:04:9c:3f:ce:
5e:0c:ed:f3:78:86:4e:f7:b3:ce:47:95:24:7e:49:
f2:2f:f1:09:0b:6c:1b:a4:6d:d7:10:06:23:ed:e0:
24:62:51:00:90:d1:c6:d5:b5:ea:bb:a6:69:a6:9c:
fa:24:9b:0b:37:a2:23:87:8c:80:81:ef:c7:23:80:
fc:5b:07:b2:82:62:f4:3a:36:26:d6:74:7d:14:df:
d9:bf:4e:89:9d:23:f2:57:3c:20:e0:94:aa:a0:13:
29:7f:81:6c:41:85:ef:c2:ff:07:41:f3:92:63:21:
b1:12:a8:f7:86:fa:24:0b:38:e6:82:5a:ac:ad:27:
4b:8d:0f:82:68:48:6c:c5:f2:49:20:6e:a7:eb:56:
2b:ab:44:c3:d1:3c:03:58:ce:c8:6b:ac:94:c6:87:
8c:f3:67:c7:71:ad:68:b9:07:58:dc:ca:83:0b:2f:
7c:b8:73:bd:bc:9b:68:e8:64:28:12:31:d1:fd:8b:
cf:89:f1:e7:6b:2c:c6:bf:31:50:37:34:05:8a:d0:
4c:8f:eb:dc:51:54:16:f0:6d:77:30:78:5a:f6:eb:
7d:3e:f2:08:06:2f:82:f5:85:34:a8:4d:4e:77:14:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:0A:89:89:03:01:60:93:EA:C4:96:AA:8D:A4:03:28:BF:97:FD
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6f:4b:b8:b5:3c:dd:50:ba:56:03:9c:b0:9b:38:a3:70:ec:
2d:fb:07:8e:d8:ad:44:e9:ba:7f:43:e5:e0:e2:2c:5b:e2:a7:
9d:88:23:1d:95:e0:1e:73:20:36:85:3b:6e:e8:a0:77:37:de:
cf:1d:87:e4:32:ec:14:36:49:36:18:40:a4:59:29:4f:e9:4a:
f5:03:39:f5:b6:7a:ee:fc:b9:5b:d3:aa:2b:86:bf:77:55:20:
12:94:b4:fe:7e:ea:46:33:1a:d4:b8:bd:eb:81:04:eb:bc:c4:
86:f7:e6:13:ee:38:f2:a6:50:64:f8:9b:e4:12:e7:a3:53:7a:
24:e5:f2:e1:04:a4:ef:99:3c:48:48:a5:f6:49:25:f4:c7:00:
7a:c7:31:cc:29:f1:02:46:84:51:97:37:05:2b:a9:21:e3:8c:
ad:1d:0e:69:9f:cb:0c:35:c8:63:b4:0e:13:0a:65:d0:dd:ed:
eb:88:bb:ba:d1:9e:c7:7b:95:69:6b:70:9f:5a:05:a2:a1:1f:
1c:6e:08:3a:46:8e:6f:46:1f:3c:3f:5a:f0:ac:56:1e:e7:2b:
52:7e:fe:92:64:c6:3d:c5:53:86:3d:55:65:3b:d6:d3:a3:7d:
34:7e:17:d6:3a:4c:4a:0e:8f:89:72:01:3f:5a:15:4f:1e:e5:
48:b4:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:15 2026 by rpki-client