Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: HOhp53HrjqACFevoPsKqpGxSeJYyXuUjwW7UXmNXEVU=
Subject key identifier: 04:A4:14:EC:4D:4A:01:E6:D4:57:07:29:15:F1:C6:BC:C9:F3:4B:31
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 019CAD59E9F15B96DB91081D2E0E92E04953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 07:01:16 +0000
Manifest this update: Mon 02 Mar 2026 07:01:16 +0000
Manifest next update: Tue 03 Mar 2026 07:01:16 +0000
Files and hashes: 1: f4AZIRtQB5gDNGTVG0SqDa4vmXo.roa (hash: 9ufERm7dPXdZ8JI0YQRXJwdfyWGQYDyrJB99NlaPj8c=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: uTz5neY/TpJxXPR4ORp2XC0/PB/gBPOFvuTdWQtNDZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:e9:f1:5b:96:db:91:08:1d:2e:0e:92:e0:49:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Mar 2 07:01:16 2026 GMT
Not After : Mar 3 07:01:16 2026 GMT
Subject: CN=04a414ec4d4a01e6d457072915f1c6bcc9f34b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:c7:58:a6:09:c5:56:f6:b6:f9:dd:9c:ca:
f0:d6:5f:ad:cf:59:6e:37:9a:fa:6c:11:2d:76:86:
b5:5f:43:59:a3:a9:ad:6d:60:f2:1a:ea:a3:e0:b0:
58:9f:91:eb:1b:49:1b:67:9a:ff:e0:c9:6f:9a:eb:
c9:7e:08:df:6f:7e:2c:ba:f6:a3:2d:e6:33:e9:a4:
3e:03:de:2f:7c:ea:ac:37:3c:07:7a:ba:b3:c6:78:
28:12:93:f1:54:f0:78:42:1d:5e:30:f5:c9:44:d2:
f8:24:8c:5e:6b:9f:b0:d1:5e:ac:4c:e9:3a:f2:c7:
bf:bb:27:3f:6d:59:63:d2:0c:f5:bb:df:b2:76:5a:
4e:2b:5c:25:2b:b5:8a:f4:43:58:92:b9:4b:36:50:
3a:35:2c:74:0d:3a:76:b7:9b:d0:7a:68:6e:47:65:
45:b9:8b:75:24:4a:40:f0:75:89:fa:2f:0d:d4:e4:
09:b6:81:cd:61:ae:d5:f6:8f:84:17:96:cd:bb:91:
28:62:94:48:27:b8:e2:f5:f6:60:8b:ea:0a:fd:67:
e1:e5:f5:0d:e8:3d:4e:87:de:1e:30:ca:3c:2b:d6:
e9:c1:a4:5a:19:dc:c7:c4:4e:1c:95:af:b6:e5:86:
e3:94:47:1c:c2:ea:a2:91:e9:99:83:0b:7c:aa:2c:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A4:14:EC:4D:4A:01:E6:D4:57:07:29:15:F1:C6:BC:C9:F3:4B:31
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5e:1c:5d:00:70:9e:1b:93:3b:d9:4e:cc:f6:db:da:4b:48:
27:09:33:b9:b8:fe:ed:cb:06:7b:81:8d:06:92:5e:17:04:0d:
1c:cc:5a:41:31:e0:98:bc:3f:3b:29:69:17:c8:2e:89:c0:13:
79:b9:df:e6:43:58:f4:29:b4:0b:c1:46:5d:d6:a0:02:0e:38:
a9:a8:c8:e9:e7:d3:b2:9c:ba:a1:ea:95:b8:be:05:32:a3:ed:
12:ce:5e:7d:9a:e9:ef:e5:74:86:ce:05:f1:a3:2d:24:d8:0c:
35:04:e4:16:04:66:46:4e:f2:9d:0c:b2:07:f3:23:da:33:f7:
40:f9:f6:7d:79:13:60:2e:26:29:3f:62:33:0f:40:83:54:b5:
48:b9:52:4b:31:d4:91:c4:ab:4d:30:ca:a9:e0:e0:f7:75:25:
37:ce:7b:be:f6:9a:0e:ee:f9:61:10:29:14:e2:98:b8:89:c2:
1e:ec:b4:5e:99:40:4d:d7:68:2a:04:03:71:bb:23:89:07:49:
1c:cc:87:85:6b:a8:07:c1:93:28:7e:d5:70:c4:83:93:97:e5:
ee:fd:b2:95:92:89:6c:34:b8:59:7d:a0:a7:d2:6d:22:cc:65:
a4:0e:2f:55:11:90:d4:53:2e:88:1f:cb:87:26:5e:54:cd:54:
8c:51:be:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:17 2026 by rpki-client