Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: tm3iqXEXuHprIgb4LLY+yzmbsUI/tlt3tjyiCc0XH10=
Subject key identifier: 38:67:FC:9E:FB:4B:A2:56:E6:1D:2B:8C:6C:92:42:FE:48:8D:10:83
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 019D9AAB862C66BBA0EC6D49ED5F5A9C6451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 128D
Signing time: Fri 17 Apr 2026 09:00:25 +0000
Manifest this update: Fri 17 Apr 2026 09:00:25 +0000
Manifest next update: Sat 18 Apr 2026 09:00:25 +0000
Files and hashes: 1: Hs3ktAK06Dj681LT3K6I_ytQOww.roa (hash: wbOb5BXeVE4ZTQ/ou2jyGYitrKnVaEx90HF7mvuSF08=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: 1OzuszPeu72ihjcQJMbvjkfItCcgq1kZuHCXVbLfHFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:86:2c:66:bb:a0:ec:6d:49:ed:5f:5a:9c:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: Apr 17 09:00:25 2026 GMT
Not After : Apr 18 09:00:25 2026 GMT
Subject: CN=3867fc9efb4ba256e61d2b8c6c9242fe488d1083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:4c:9a:21:cd:ee:6b:cb:b8:a1:1c:92:6c:
6b:0b:c2:2c:28:85:5b:00:62:69:ff:07:14:97:f3:
7c:da:29:66:c2:e1:9b:e0:54:c5:d8:75:8c:6d:80:
7e:14:23:4d:8b:32:52:ab:6e:aa:65:0b:7d:bf:8d:
d6:81:b7:bd:23:0b:20:55:ae:cd:fb:48:db:54:76:
d4:d3:41:1e:68:05:d3:3b:95:ec:1f:40:eb:65:10:
46:0d:4d:4a:5a:5f:4a:7d:25:c8:5f:92:d0:68:38:
42:d0:48:f8:ad:e1:3a:5e:ca:3b:d7:e3:08:08:aa:
47:95:95:01:9c:d1:19:84:c8:be:11:a3:44:f9:32:
aa:26:b0:35:ee:54:5b:5e:08:fd:f3:a8:64:bc:a6:
34:bd:44:9d:3f:9e:e2:fa:15:6e:ee:34:95:a1:54:
49:9f:fb:d3:c7:e5:73:dd:b6:6e:57:7f:71:c6:15:
ea:64:ba:ad:71:9c:b1:20:4b:bc:65:26:3b:6b:8f:
0b:5b:e8:02:b9:80:b7:0e:50:3a:2c:8c:a0:c5:db:
03:8b:40:4d:44:e6:40:ad:67:7e:b8:78:8b:08:85:
90:b7:12:0d:5d:40:d0:1f:08:e9:42:bd:df:9a:22:
87:8f:ad:24:81:22:3d:78:07:f3:c9:3a:9f:b8:9b:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:67:FC:9E:FB:4B:A2:56:E6:1D:2B:8C:6C:92:42:FE:48:8D:10:83
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:9d:d0:8f:a5:12:32:a4:ed:cf:f3:b2:e5:81:63:60:60:
e4:9b:13:05:9c:32:20:de:95:4d:9a:5e:fb:01:e6:d1:fa:42:
36:d2:f9:d0:f1:41:1e:4e:62:a8:c4:b2:66:3a:d6:15:47:be:
c2:c5:99:19:7c:7f:f5:e1:d6:b7:49:61:49:27:34:e1:2f:6e:
3f:45:ea:ed:b6:0e:b1:e3:23:57:7b:51:37:94:cc:b9:5a:b7:
c9:86:96:37:ea:a3:32:3d:0a:b7:ea:aa:3b:b6:59:72:53:b9:
61:4d:ee:d8:8e:2d:5b:30:ca:44:33:df:d9:ea:c8:e3:c5:f9:
2b:f7:e9:46:c2:6e:44:8f:72:19:e4:2d:39:c1:b4:7a:d9:75:
0e:79:c0:e7:ff:90:31:dc:d2:80:3a:d5:af:25:29:85:7b:e4:
6e:03:5d:f2:1d:5a:70:44:30:fe:26:f0:f3:2b:22:86:b2:3d:
ea:06:9b:d9:36:f9:58:e2:9d:7b:5a:58:31:bb:c7:a8:12:cf:
66:10:52:7c:8b:77:8c:d7:58:41:ef:d7:98:1d:de:3c:eb:0d:
32:4f:7b:86:19:8a:8f:50:2a:0a:40:15:b2:ef:80:f4:45:24:
0c:b7:1c:8e:bb:1b:0f:1f:8b:b2:00:c4:cc:b2:21:3c:06:c0:
91:2b:b0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:57 2026 by rpki-client