Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: 0H2R91BQOdh3xPY/Y8JI7iwa/3cubz8EvAFphIRwOjg=
Subject key identifier: AF:84:FE:7F:D3:36:39:D6:12:48:AC:94:D9:57:10:EA:E2:54:95:09
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 01A0C8FD2C8C980C4752E918B68F0E917329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1A73
Signing time: Tue 22 Sep 2026 12:00:30 +0000
Manifest this update: Tue 22 Sep 2026 12:00:30 +0000
Manifest next update: Wed 23 Sep 2026 12:00:30 +0000
Files and hashes: 1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: SeokBrOh+w/vV69qbBpnUWqBAJWEeLMcuxjbgI848Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:2c:8c:98:0c:47:52:e9:18:b6:8f:0e:91:73:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Sep 22 12:00:30 2026 GMT
Not After : Sep 23 12:00:30 2026 GMT
Subject: CN=af84fe7fd33639d61248ac94d95710eae2549509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:21:9c:31:ed:66:0d:3e:40:e3:81:40:ed:
fa:d4:33:59:2c:4c:c9:81:3a:4f:5b:e2:f0:d9:9a:
58:4b:e0:fe:54:ba:33:33:31:0a:38:79:2f:91:70:
e2:0e:f5:b5:50:80:c6:9f:de:5a:ba:c4:f0:fd:c2:
55:e9:c8:4d:2b:25:01:45:c1:e5:86:59:86:e4:9b:
a2:70:ee:15:a6:79:81:ff:5d:e0:34:9d:ab:c8:2d:
d7:74:a0:07:35:fc:83:be:50:4b:55:61:37:66:56:
7c:a3:68:62:b9:cf:4e:96:bc:d1:9a:82:02:51:23:
b0:95:42:65:c9:cc:86:8a:c1:5d:2a:27:b0:20:f3:
86:b9:f9:ca:87:af:5d:a5:2c:22:f8:2c:d0:11:ac:
d5:2d:c1:4b:e2:a5:c7:f4:7b:50:20:f5:b4:3b:42:
4e:75:50:8c:e0:ae:bf:79:de:8c:80:a6:4c:f7:35:
1b:31:ac:50:ed:cb:72:86:ea:93:bb:e4:6c:91:c3:
9b:32:30:34:45:b8:0c:b1:29:80:48:36:ff:99:54:
f3:e2:0a:86:dd:be:40:05:0d:df:55:84:b5:70:2a:
64:a2:f2:41:84:f6:26:99:5b:2c:41:db:8b:b8:6a:
51:61:fa:6c:4d:27:b2:86:8a:92:ca:bc:83:b5:e2:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:FE:7F:D3:36:39:D6:12:48:AC:94:D9:57:10:EA:E2:54:95:09
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:04:ce:48:26:60:51:13:05:be:66:77:17:ed:2a:9d:20:66:
b4:2d:52:47:0d:b0:cc:c0:5d:82:b3:cd:04:fe:30:4e:ad:80:
fd:cf:87:e5:69:dd:a4:9d:3a:77:5d:ed:b6:8b:a9:63:59:48:
bf:bc:92:5a:f0:81:04:66:a9:7f:a0:0e:97:2e:8f:8c:4b:7c:
4d:4f:37:24:93:6d:e4:83:57:1c:cf:ce:b5:a1:ed:76:83:58:
60:47:ea:8c:09:d1:39:e7:ff:4e:72:e7:13:ab:73:0b:97:42:
67:b2:84:a7:5f:c8:07:84:eb:b5:3e:92:91:6b:cc:dd:96:1c:
ea:a5:7e:d0:01:b0:f4:07:ed:70:67:25:ab:2a:98:86:5b:39:
a5:a4:0f:4f:96:fd:30:c6:4d:0b:60:b5:5d:f0:65:90:5a:a7:
df:b8:85:e1:57:84:d1:26:72:21:3c:5d:57:60:f7:bf:07:7b:
fb:2e:22:89:e1:f7:6a:26:5d:cb:84:13:0c:57:85:82:d1:1e:
55:b1:0e:8a:8e:23:d2:d6:64:e6:81:7a:81:dc:7d:38:7a:ef:
cc:fb:f1:ab:e7:24:0f:82:f1:80:a8:0e:b8:8f:4c:15:2c:c8:
a1:4f:8c:0b:91:2e:48:a8:49:5f:7e:91:62:32:00:11:b5:a5:
17:53:fa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:54 2026 by rpki-client