Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: fEYH2e2pO00HJjnyo9RZGWLaeK8pkmqF+96VCtsz+6I=
Subject key identifier: B8:0A:47:23:FC:A9:4E:CA:6E:77:B1:D9:A6:4B:57:92:CF:4A:B6:6D
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019EC17F6752BF0D9F28A7BDD19A5F0F871B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1966
Signing time: Sat 13 Jun 2026 15:00:12 +0000
Manifest this update: Sat 13 Jun 2026 15:00:12 +0000
Manifest next update: Sun 14 Jun 2026 15:00:12 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: StSqE3UPdahCBzfuQbjtK/LAT9DHj9Yx7jfwUqzarK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:67:52:bf:0d:9f:28:a7:bd:d1:9a:5f:0f:87:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jun 13 15:00:12 2026 GMT
Not After : Jun 14 15:00:12 2026 GMT
Subject: CN=b80a4723fca94eca6e77b1d9a64b5792cf4ab66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:e7:a9:ad:7a:75:b6:a8:e8:b3:ed:42:75:
3f:2b:4a:e5:99:cb:87:89:d8:b2:10:79:15:dd:fd:
9f:3f:e5:97:7c:2c:51:fe:78:08:61:7c:ba:1c:9c:
77:03:73:47:1d:e1:80:ba:b0:fe:8c:8a:06:81:62:
fc:45:1b:b3:91:73:c3:35:4f:ce:41:96:2f:ef:4c:
a5:58:d3:ae:e6:03:18:08:22:ef:59:4c:d5:03:a3:
d8:5f:65:e0:57:f5:92:26:90:c2:aa:9c:d6:8c:3f:
6d:f1:0f:d1:f7:68:8e:0a:1a:0f:5b:9e:20:52:e6:
48:7f:0b:51:0f:e9:e2:ae:d3:22:ef:f4:67:1b:d7:
bc:07:70:09:73:8a:41:b7:e7:65:a9:45:3b:fd:f0:
d1:a1:04:6a:4c:fe:07:d9:87:99:e1:d3:c1:62:bc:
0b:df:a4:d4:61:bd:25:49:94:e2:e7:24:dc:8d:fc:
0b:77:cc:da:54:0c:60:4b:e6:68:76:a4:cb:65:eb:
e0:bb:2d:47:d2:de:b2:78:c3:ea:b5:7b:bf:cb:ba:
62:a4:79:11:d2:04:f9:6d:a9:2f:f8:35:d0:c7:ff:
ec:0c:d5:f2:1f:f2:ae:5e:1d:16:e2:b6:67:11:ad:
28:f6:26:ae:65:8f:f0:4c:71:20:4d:1d:e3:d6:27:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0A:47:23:FC:A9:4E:CA:6E:77:B1:D9:A6:4B:57:92:CF:4A:B6:6D
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:82:01:41:cb:b9:69:e5:2b:ce:2c:e1:79:4a:69:6a:cb:48:
44:a1:82:cf:02:40:61:ff:56:b8:b7:ad:00:2b:20:fd:9f:2e:
36:c4:15:c1:80:03:19:4e:97:22:f0:65:e5:1e:6d:c3:9a:20:
cb:8f:57:5d:1d:c9:70:e1:4e:1c:0d:1f:36:7e:0f:5b:0c:84:
38:ab:f7:6e:fe:6e:b7:83:be:0e:c5:ba:89:70:b8:ef:87:fe:
58:3f:46:a8:3f:57:3c:70:30:ea:82:64:e0:3a:78:47:7d:89:
49:ca:46:8b:f2:ca:2e:2d:23:13:2b:e8:72:18:54:6e:67:dd:
69:bc:00:f0:81:8e:40:b6:74:85:9f:97:53:00:89:a5:f0:44:
e8:b4:6f:22:83:12:a4:d1:e2:e7:24:5d:3e:6b:df:24:02:4a:
fa:fd:48:9a:4b:aa:89:d8:62:15:07:de:c7:3c:61:2c:b4:dd:
c9:be:9a:57:cb:f4:b6:fc:9f:79:82:b0:95:c0:cf:1a:89:bc:
01:ee:d3:86:a9:a4:3a:fe:ac:83:8a:b2:af:0e:0b:de:6a:79:
ef:b2:b9:ba:d2:a6:21:b9:17:70:80:48:f9:21:5b:e4:45:6f:
43:a7:5a:bc:f2:4c:e1:10:b2:f4:6d:d9:c4:5b:33:40:c0:e2:
d5:6d:fd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:08:54 2026 by rpki-client