Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: LY/WAoNrWojvPN8ypLPRVv/NtzUyGYSN0kuJNIm+mtc=
Subject key identifier: CB:AE:12:61:7C:43:F0:58:C7:3D:29:54:C0:13:05:1B:58:9D:6C:23
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 019CADC79D0299E9D99D70E710513F01DFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 0714
Signing time: Mon 02 Mar 2026 09:01:05 +0000
Manifest this update: Mon 02 Mar 2026 09:01:05 +0000
Manifest next update: Tue 03 Mar 2026 09:01:05 +0000
Files and hashes: 1: CaTSYTlklPzPsh9aXKnEhvNOdQk.roa (hash: Yu5TNxvfV86Q2+HBX8uXoTCoY5GYvgt5wYG6MqwG8M0=)
2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: W+hERSIou37fcijufJYONwK8NZitImzpz0HReozeato=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:9d:02:99:e9:d9:9d:70:e7:10:51:3f:01:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Mar 2 09:01:05 2026 GMT
Not After : Mar 3 09:01:05 2026 GMT
Subject: CN=cbae12617c43f058c73d2954c013051b589d6c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:10:0b:5a:10:7d:70:ff:71:68:a6:16:32:
54:b5:60:b2:54:94:d4:b7:79:5e:ca:a2:27:7f:44:
6f:d5:9d:2f:3b:0c:81:91:51:32:28:fa:fc:c4:c7:
f9:d8:51:73:1c:e6:9e:96:93:9f:02:a2:57:33:fe:
b2:40:de:03:03:7d:b4:10:f9:ac:2c:58:6c:66:7c:
b0:cd:77:2a:bf:a6:c4:c0:1f:c8:be:15:bc:ce:25:
79:97:39:68:6e:04:d8:b2:a2:ed:9f:40:62:ff:7f:
78:62:98:1e:7c:6c:74:ab:3b:12:a8:a7:9c:ba:85:
63:6f:da:a8:b2:22:ae:bb:d5:b8:29:cd:75:39:09:
0d:6e:b1:8e:b3:07:33:2e:96:1a:fb:36:dd:46:da:
83:9b:7f:73:ac:32:a6:d1:23:57:83:e1:c2:54:76:
b6:9c:3d:36:6b:89:9e:dd:42:4c:63:ba:74:a4:f7:
34:c7:af:a2:6f:8a:43:c7:d8:49:73:ad:03:c2:10:
63:db:ca:7b:df:f0:b8:ca:52:48:04:53:95:82:82:
72:cc:1e:86:e1:8c:8a:f4:48:fc:b0:85:64:57:b4:
66:98:75:69:7d:a0:dd:be:e4:75:1c:18:68:2a:d3:
9f:bf:86:7e:a0:bb:25:ef:43:af:86:19:76:76:e3:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:12:61:7C:43:F0:58:C7:3D:29:54:C0:13:05:1B:58:9D:6C:23
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5e:fa:a2:91:a2:86:96:6c:2e:87:e9:67:dd:bb:68:61:8b:
51:77:6f:a2:82:c0:3a:bd:40:e5:c1:7c:f1:e2:8a:3d:ff:c8:
de:af:a9:1c:7d:c5:c6:1a:6d:68:7f:4c:a3:22:86:7c:39:12:
e4:3e:23:8b:ac:83:4f:da:79:ce:68:8b:be:d5:2f:45:4e:15:
cc:ee:c0:74:c4:06:1a:89:08:3a:80:0e:23:f3:dd:9e:0f:8f:
ab:35:fc:d3:77:6f:65:82:57:26:d0:10:b3:b1:72:79:4f:9e:
92:af:f7:cd:0b:48:19:e5:ab:d0:4c:e5:0e:c3:51:34:a7:fe:
91:e0:f5:ed:fe:37:39:67:6e:0c:46:39:b7:5e:83:d6:74:ea:
74:cf:1e:49:0c:81:06:6d:f9:1d:d8:d7:09:84:3e:19:c7:3c:
91:9a:53:c2:5d:f4:e7:b3:d0:cb:91:a1:96:d7:5a:a7:c7:c2:
77:40:32:c5:17:90:4c:93:a9:c9:8c:fb:09:28:9b:86:d3:ad:
46:22:a2:46:9c:f9:41:37:9f:67:f2:7c:6c:08:ae:44:ea:c5:
7b:b1:0a:6e:e2:c5:20:70:33:53:a2:9a:43:73:18:b2:e6:a6:
12:18:8b:86:df:a5:1c:24:64:0a:03:72:78:58:09:f1:81:49:
f2:3c:73:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:45 2026 by rpki-client