Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: CMDI6r+lVILEWHtMZYDlbTkkdDzXlHJBWhN5M5SFv7c=
Subject key identifier: 4F:C8:11:6C:CE:73:9E:5F:4A:AD:5A:5D:AD:BE:5D:BE:AF:AD:D2:1F
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 019D9818A8017D7099EF5440F971FE64601D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 18CC
Signing time: Thu 16 Apr 2026 21:00:45 +0000
Manifest this update: Thu 16 Apr 2026 21:00:45 +0000
Manifest next update: Fri 17 Apr 2026 21:00:45 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: 0mA/XVygIrgdYe/nnfH3K3y1mbZZWjKSgqw8Z16PzPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:a8:01:7d:70:99:ef:54:40:f9:71:fe:64:60:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Apr 16 21:00:45 2026 GMT
Not After : Apr 17 21:00:45 2026 GMT
Subject: CN=4fc8116cce739e5f4aad5a5dadbe5dbeafadd21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:29:04:53:47:3f:46:72:85:6f:84:34:8b:
0e:3d:fc:dc:50:e2:5c:88:7f:1c:8f:b2:60:9f:86:
c7:df:9a:99:31:e6:f4:21:6c:8a:a5:25:12:37:f4:
f8:df:55:3c:0d:10:0d:ca:68:4f:77:34:00:c7:b2:
63:2b:0a:f0:1b:d5:0e:4f:df:7f:c6:d2:e9:96:e8:
3d:18:f6:30:f4:ec:f2:6f:26:d7:85:cf:8d:41:d3:
8c:f8:f6:64:5f:df:be:55:2c:f4:45:35:a6:71:02:
ff:c7:0c:bd:57:96:2a:85:4c:e4:eb:2a:64:18:e4:
5b:c7:4c:f2:63:3d:d0:33:28:cd:11:5e:50:49:17:
18:30:89:cf:51:83:5a:d8:80:14:25:38:65:25:83:
ff:8c:15:ba:e6:fb:25:48:a4:93:08:e5:f1:d6:3b:
a1:33:73:01:bc:6a:f1:15:5f:29:f7:64:25:87:c8:
85:14:fe:ed:42:b6:dd:91:f3:69:ba:a3:fd:f1:fb:
18:e3:e4:25:30:52:d1:89:29:55:a4:bf:29:c3:96:
f0:ad:fa:04:5c:a1:0e:f4:29:9f:c4:98:7e:9c:71:
1e:a0:c9:f1:41:c1:dc:11:45:55:8d:da:21:bb:36:
35:d8:e6:24:bb:52:ac:7e:11:f7:77:de:56:dc:a8:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:11:6C:CE:73:9E:5F:4A:AD:5A:5D:AD:BE:5D:BE:AF:AD:D2:1F
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f9:06:e3:e6:ee:12:6d:94:c7:f0:5a:60:ef:83:a4:2d:3a:
db:2b:4f:24:5b:ed:a5:e9:b6:d8:08:75:3f:1d:14:3a:c0:c1:
4c:32:22:07:dd:64:8b:3f:03:ca:c3:9b:62:62:27:83:26:d4:
27:e1:a6:39:7d:9d:03:74:dd:9b:de:ea:c0:c4:a2:9f:f9:44:
ec:40:81:49:75:cd:0d:5e:8f:03:74:ed:88:e5:ce:94:c5:a0:
56:23:78:ef:c2:c2:37:75:88:43:fc:54:dd:8f:77:d0:62:b6:
6f:aa:0c:10:b5:03:a6:9e:73:ab:02:e4:7b:11:7b:83:98:46:
55:31:a7:67:a8:4d:f6:af:d6:dc:d8:d1:dc:cb:c7:39:c8:5f:
e7:86:5c:2c:27:f3:14:6b:a1:c7:d6:b6:5e:56:47:5c:d7:27:
4c:c0:e3:cc:d4:76:60:59:a7:ff:f4:10:72:8d:b8:4e:6c:90:
ae:67:4e:25:64:34:d9:ce:42:97:d8:ec:94:d6:8c:ec:bf:c6:
c3:5e:ca:5d:57:f1:df:be:d8:83:bc:72:9b:06:ad:19:a9:70:
01:f1:85:59:ea:b1:a7:d0:01:70:ee:0d:00:12:0e:0e:a0:87:
7c:e4:22:ff:be:56:d8:e8:f7:3d:4e:a1:6c:97:b8:e4:f2:42:
86:ab:61:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGKgBfXCZ71RA+XH+ZGAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw
YjAwOWIwHhcNMjYwNDE2MjEwMDQ1WhcNMjYwNDE3MjEwMDQ1WjAzMTEwLwYDVQQD
Eyg0ZmM4MTE2Y2NlNzM5ZTVmNGFhZDVhNWRhZGJlNWRiZWFmYWRkMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubUpBFNHP0ZyhW+ENIsOPfzcUOJc
iH8cj7Jgn4bH35qZMeb0IWyKpSUSN/T431U8DRANymhPdzQAx7JjKwrwG9UOT99/
xtLplug9GPYw9OzybybXhc+NQdOM+PZkX9++VSz0RTWmcQL/xwy9V5YqhUzk6ypk
GORbx0zyYz3QMyjNEV5QSRcYMInPUYNa2IAUJThlJYP/jBW65vslSKSTCOXx1juh
M3MBvGrxFV8p92Qlh8iFFP7tQrbdkfNpuqP98fsY4+QlMFLRiSlVpL8pw5bwrfoE
XKEO9CmfxJh+nHEeoMnxQcHcEUVVjdohuzY12OYku1KsfhH3d95W3Kgy2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/IEWzOc55fSq1aXa2+Xb6vrdIfMB8GA1UdIwQY
MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt
MjEzZDY0YmVmZjcxLzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx
LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPkG4+bu
Em2Ux/BaYO+DpC062ytPJFvtpem22Ah1Px0UOsDBTDIiB91kiz8DysObYmIngybU
J+GmOX2dA3Tdm97qwMSin/lE7ECBSXXNDV6PA3TtiOXOlMWgViN478LCN3WIQ/xU
3Y930GK2b6oMELUDpp5zqwLkexF7g5hGVTGnZ6hN9q/W3NjR3MvHOchf54ZcLCfz
FGuhx9a2XlZHXNcnTMDjzNR2YFmn//QQco24TmyQrmdOJWQ02c5Cl9jslNaM7L/G
w17KXVfx377Yg7xymwatGalwAfGFWeqxp9ABcO4NABIODqCHfOQi/75W2Oj3PU6h
bJe45PJChqth4A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:26 2026 by rpki-client