Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: almPkuCglbLJVo8VOVC+x8s5JRFiOtoAUOsDCcwcZ7k=
Subject key identifier: C4:EF:02:71:E0:AD:52:16:35:AB:67:7B:49:8F:59:31:5C:24:D7:47
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 019D284DE5AE62B855B46B37CD6D3D2F62CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 0472
Signing time: Thu 26 Mar 2026 04:01:26 +0000
Manifest this update: Thu 26 Mar 2026 04:01:26 +0000
Manifest next update: Fri 27 Mar 2026 04:01:26 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: Fe2AmbpYwA1gXf0sMFUlhBW/8rz0wpNQtVhuu+hukS4=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e5:ae:62:b8:55:b4:6b:37:cd:6d:3d:2f:62:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Mar 26 04:01:26 2026 GMT
Not After : Mar 27 04:01:26 2026 GMT
Subject: CN=c4ef0271e0ad521635ab677b498f59315c24d747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9a:96:6d:f5:a7:9a:4e:e6:d7:25:4e:03:53:
46:62:bf:98:fb:be:01:d5:9e:a7:aa:cc:19:79:7b:
63:44:24:fc:0b:37:8e:fb:96:12:f9:c3:0f:f7:11:
f4:3d:e9:65:9e:bf:52:04:36:d4:96:6a:07:16:d8:
e4:0b:22:d5:85:ad:f5:fa:2b:b1:25:30:12:0c:6e:
e3:90:35:93:54:d1:29:3c:02:cf:e6:34:8c:eb:83:
16:ef:cc:41:10:c8:dd:08:53:73:e2:a4:f6:e2:16:
fd:08:c6:d0:84:81:c8:73:d9:62:ec:95:0b:fc:4f:
40:93:3b:44:ab:54:46:46:c4:af:20:28:67:4b:0f:
94:78:e4:78:9c:ce:6c:f5:88:e9:17:b9:cb:e3:df:
6f:8d:69:9a:fd:a7:83:e2:b5:fc:c8:d9:02:e2:4b:
eb:aa:9b:7b:fb:6b:51:92:68:e4:51:cd:bc:e4:a1:
df:54:64:3c:41:05:04:ed:44:aa:b7:6a:46:14:c0:
92:ff:32:52:e2:c4:66:dc:e5:fe:9c:bf:78:2d:47:
4a:1e:5b:75:77:a8:1a:10:4f:ff:66:90:ef:fa:b7:
1e:94:72:bb:cc:64:ca:0f:40:8f:41:9c:1b:e5:11:
2d:9f:7b:2c:4e:61:0e:6f:58:d2:ef:78:43:28:ae:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EF:02:71:E0:AD:52:16:35:AB:67:7B:49:8F:59:31:5C:24:D7:47
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1b:30:3e:7b:8c:a7:79:70:da:cc:14:6c:49:b9:c3:8e:f4:
63:39:fe:14:07:c9:d0:a6:87:c9:78:c3:0d:2a:51:41:4e:52:
ed:a5:2c:19:1e:79:8a:2b:68:a7:14:01:d0:3c:3e:8d:e8:9f:
cd:7b:71:fe:8e:82:c8:24:5b:42:81:dc:9d:38:e8:94:fa:66:
66:f7:52:b7:74:b6:31:77:c6:76:80:2c:74:ff:4c:47:a3:00:
fe:49:4b:05:f2:47:92:90:5f:da:ea:b6:9c:93:12:2b:5a:bb:
e4:1d:7e:e5:77:39:66:ae:ad:16:ae:c0:eb:42:0c:81:8f:bc:
a4:42:df:47:9d:35:b8:aa:98:64:2a:34:f1:f7:ce:93:17:a6:
a1:7b:25:97:f1:a2:2c:2e:8e:50:61:aa:73:8a:bd:37:7d:88:
66:31:e0:c5:1d:e1:db:93:eb:d3:a4:c0:20:b9:ab:cb:49:01:
1c:32:43:33:c4:68:6f:b8:9f:6b:44:d8:f6:f3:8a:4c:32:63:
9a:91:bb:2e:73:41:76:09:e8:df:0a:c0:bc:55:0e:46:19:1d:
0b:cf:02:2a:02:5f:9e:1f:be:f8:e7:b7:66:91:96:f1:99:01:
8d:bc:79:66:f3:f0:28:28:35:16:9e:e7:d1:e6:0d:35:58:3f:
22:93:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:58 2026 by rpki-client