Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: Ot7mztibyZlfZTDOYmiXC83PS6gZHLDIxb5T8VQsdIw=
Subject key identifier: EE:6A:AC:9D:80:F2:20:CD:9C:39:78:D5:53:CC:9C:26:44:AA:3C:72
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019CAE6BD74EB23A768F2DCB2EDCD1B4D3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1853
Signing time: Mon 02 Mar 2026 12:00:28 +0000
Manifest this update: Mon 02 Mar 2026 12:00:28 +0000
Manifest next update: Tue 03 Mar 2026 12:00:28 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: d/GqgSi4w1N8W2bg6PyGSOuaX2As7PVrc6abJHyAmTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:d7:4e:b2:3a:76:8f:2d:cb:2e:dc:d1:b4:d3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Mar 2 12:00:28 2026 GMT
Not After : Mar 3 12:00:28 2026 GMT
Subject: CN=ee6aac9d80f220cd9c3978d553cc9c2644aa3c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:fb:dc:c9:b9:50:10:79:3f:82:3e:aa:76:
0d:4e:be:41:f8:1a:a6:73:d0:fc:b1:ed:d9:a3:28:
bb:ca:20:ac:c7:42:b7:c0:37:9b:e8:f8:35:2e:f4:
cd:70:e6:49:64:75:65:e2:e9:c8:a3:e3:a4:9d:9a:
2e:06:c3:87:65:c2:34:8e:88:46:52:76:ba:a6:91:
59:7b:ae:d6:95:93:78:4f:cb:58:b5:bb:dd:0c:79:
d5:90:4e:67:1f:ea:78:ec:86:77:38:47:cd:88:cd:
5e:76:b8:21:1e:7d:03:c8:53:0d:e8:b3:c4:06:84:
81:77:8d:f4:33:44:06:9d:41:e9:27:3a:b0:bc:fc:
8d:e0:af:94:ea:d8:50:38:b3:76:ca:a2:ca:37:bf:
d6:31:13:f7:1f:8b:fe:9d:d7:5c:db:b2:c4:84:88:
8c:0f:a2:c6:8b:dc:ce:51:ed:19:be:73:90:2f:0d:
76:2a:7c:be:ab:0b:d9:52:6c:81:d9:d2:9f:94:65:
35:5b:3b:96:f8:01:4b:61:39:73:ea:5c:ec:35:6f:
9f:9c:41:81:2e:cc:59:b8:3b:d3:b4:7a:bf:43:38:
52:5f:69:b9:4b:99:8a:a0:df:1d:0f:9a:b5:60:3a:
1c:a2:3a:2e:ec:99:41:0d:fd:57:cb:2b:ce:95:37:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:AC:9D:80:F2:20:CD:9C:39:78:D5:53:CC:9C:26:44:AA:3C:72
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:58:f2:9e:df:88:5c:43:ad:10:9e:d3:1d:9a:ce:98:21:3b:
48:0c:38:a9:7b:7b:7a:37:85:9f:9d:81:7a:97:84:6b:50:ac:
7e:94:c8:b7:6f:6f:50:b8:96:81:c9:4d:65:63:96:7b:87:fb:
07:fa:b7:f5:42:f1:a0:d9:2d:81:12:19:28:b2:05:06:7b:4c:
0f:de:d0:5c:49:ac:30:88:68:20:cc:60:7b:4c:9e:4e:76:7d:
67:00:e4:a5:f0:63:de:8e:f5:5f:1b:12:98:a2:5d:fa:f9:de:
4f:a2:66:dc:58:dc:98:41:4f:d0:4e:6a:0d:5b:88:60:d0:fd:
6a:17:1a:a0:44:a7:a8:a4:20:7f:6d:f4:e6:b7:d3:53:75:a0:
ab:84:4b:6f:49:92:d4:00:ca:dd:7d:b3:0a:16:4f:ab:f5:45:
fd:29:68:1a:97:96:ca:85:9c:12:21:83:3d:87:2b:99:8d:b4:
c7:00:4b:bf:14:ce:61:43:13:b3:3e:85:49:99:86:70:19:39:
b5:15:da:9a:b5:0e:46:29:fa:bd:66:3c:7e:01:e1:91:35:00:
f4:08:14:e9:86:db:b3:19:52:99:a3:83:c4:4d:d9:87:b4:e1:
54:25:8d:a6:26:ee:51:62:bf:93:ce:de:c2:19:e7:2f:42:b0:
ae:8c:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:41 2026 by rpki-client