Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: sIaQ30zxOh9RmlnnXMZsCt9RcpNKlQfU3zIOplKk/Xo=
Subject key identifier: 0D:08:47:A5:F9:72:A0:EE:44:3F:8D:DD:E9:F5:51:ED:78:5A:08:43
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019FAB2CA96EA05F1095A53C64ED1E810C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 19DF
Signing time: Wed 29 Jul 2026 00:00:58 +0000
Manifest this update: Wed 29 Jul 2026 00:00:58 +0000
Manifest next update: Thu 30 Jul 2026 00:00:58 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: sYXda+QCMMIQIROPtCZgdn41arrk0gtbnyaDQq9YQzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:a9:6e:a0:5f:10:95:a5:3c:64:ed:1e:81:0c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jul 29 00:00:58 2026 GMT
Not After : Jul 30 00:00:58 2026 GMT
Subject: CN=0d0847a5f972a0ee443f8ddde9f551ed785a0843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:8b:f6:17:89:d1:ed:fa:15:5c:50:6e:72:
cf:26:30:c6:d3:2a:81:68:2d:13:95:d1:bb:b6:0d:
6d:2f:fd:4f:cd:4b:e8:7e:7a:27:e8:20:63:32:99:
87:8a:89:64:95:91:ac:b5:ba:ea:8f:46:08:12:26:
f3:c1:45:fd:cc:ec:e7:d0:fb:27:14:c0:8d:2f:2c:
d7:88:37:ca:ac:89:27:2a:df:cd:16:c8:46:fe:ba:
4a:93:07:98:3b:99:ab:c2:c4:e9:a8:09:99:48:bc:
b1:7d:98:17:de:49:86:aa:2f:1c:a4:d9:f3:a2:f3:
b0:ef:ae:58:28:ef:06:53:97:5c:f5:82:6d:4e:58:
68:02:34:9a:d5:43:ec:ad:cb:f2:59:0d:a2:15:6a:
c1:87:56:50:0f:13:f0:ce:95:75:94:dd:b2:53:af:
8e:e8:27:f3:fd:85:e4:cc:51:92:81:91:df:b8:af:
b9:f8:75:f7:90:9f:a7:0b:30:fc:63:5c:84:43:ef:
5d:74:3d:5e:e5:32:7b:5b:a7:e5:06:c9:e8:50:59:
b2:ee:d0:0a:f7:90:99:c9:9a:d3:be:cf:00:92:43:
60:04:36:89:dc:a1:9c:a8:1a:f7:1a:9b:ba:57:bf:
2c:f4:1a:8c:48:20:62:5b:9b:ea:23:79:bd:d0:12:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:47:A5:F9:72:A0:EE:44:3F:8D:DD:E9:F5:51:ED:78:5A:08:43
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:aa:a5:16:20:42:79:70:81:a2:6e:ed:98:4b:93:0f:90:ff:
65:bc:c7:62:9b:08:7c:46:7b:38:90:be:90:bc:26:47:f9:a2:
dc:52:6c:d9:c2:92:37:1d:1c:ba:84:65:a7:e0:73:20:ea:da:
c7:d8:a8:12:ae:63:8f:17:d9:91:32:6d:2f:e4:ae:cc:6f:6a:
c2:be:a1:aa:ea:84:a4:44:3e:b1:5b:89:31:39:fc:84:6d:2f:
e9:2f:0b:b9:4b:71:37:53:44:ae:9e:58:67:3c:27:58:95:67:
3a:c7:4f:02:dd:b6:c0:dc:cb:20:8a:73:f7:57:32:6e:46:55:
bf:f9:eb:88:73:38:90:f6:4e:27:ae:f4:cd:51:58:65:25:78:
38:ac:5c:0f:74:e6:a0:6f:97:a4:24:ae:2b:af:d5:3b:11:ff:
08:c2:3d:c2:cb:a5:a5:cb:c6:f3:a6:8f:68:11:6f:fe:ae:b9:
e8:b5:fa:90:6f:1b:cd:d3:84:17:fd:79:0e:47:fc:4a:10:0f:
36:c2:57:04:b6:50:f3:2f:51:19:18:59:92:a8:fe:08:50:85:
c8:ef:41:14:d0:a9:04:fb:a8:6d:c8:b1:70:d5:20:6a:d2:53:
7c:da:5d:c2:7f:0e:4b:64:01:21:87:c0:79:94:b4:2c:e6:ca:
ea:37:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:01 2026 by rpki-client