Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: Xdj8cz0b99dwbvsh9l6j/jl6QLfdqoR8hrDrVMoW1M0=
Subject key identifier: 0C:90:63:1A:2B:56:CD:C6:40:FB:03:5A:F0:A6:90:3F:F3:13:80:0E
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 019CACB5479AFEC38729200AEFF16AD21100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 1499
Signing time: Mon 02 Mar 2026 04:01:27 +0000
Manifest this update: Mon 02 Mar 2026 04:01:27 +0000
Manifest next update: Tue 03 Mar 2026 04:01:27 +0000
Files and hashes: 1: 2QQChTDwIOQycovI2YsVvoZPz2I.roa (hash: CH9BbZ7Au7IxXqkLtHNUF65I74hoA0C1m5kNxLVSkng=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: RflEQczRZI1PYuTK7nAWQGJLcOXy4LMHNV4y9ZHjkHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:47:9a:fe:c3:87:29:20:0a:ef:f1:6a:d2:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Mar 2 04:01:27 2026 GMT
Not After : Mar 3 04:01:27 2026 GMT
Subject: CN=0c90631a2b56cdc640fb035af0a6903ff313800e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:7e:c3:5c:e6:b7:9e:86:88:33:10:4f:79:
6b:1b:03:dd:00:74:be:0e:55:a3:d1:5a:c7:bf:f9:
14:94:d7:3a:82:fd:ef:ef:4e:fa:da:e1:22:8a:77:
23:0a:95:e6:58:e4:ea:d0:68:4f:9e:2b:a6:dd:a8:
9d:6e:f8:af:af:91:33:97:41:96:bd:78:84:d5:66:
f8:b5:e1:27:8a:1c:67:96:8e:28:17:34:c3:ef:9f:
49:e9:79:0f:3d:16:98:f5:7b:04:86:bb:18:d9:b0:
57:f4:4b:e9:a6:da:92:0f:46:62:32:8a:b1:d8:61:
93:f8:23:85:36:53:85:01:57:8c:81:8c:61:08:c5:
63:b3:03:00:20:0f:3d:15:88:d5:13:26:7c:67:d7:
69:f2:00:09:96:d8:51:31:f8:f9:e1:f2:50:da:29:
57:f5:7b:72:16:c2:c2:96:56:d7:81:a0:c6:bc:47:
4d:5b:93:39:34:a2:df:87:fc:54:cb:46:33:8f:79:
e4:c8:24:a9:b0:bf:e5:af:30:30:68:95:95:7c:f7:
1a:19:e5:01:7f:8f:79:b8:bd:70:96:f7:eb:4b:b4:
a4:8b:b1:3e:b2:4a:97:ab:f5:d0:6b:c2:b7:37:36:
ac:de:35:28:fa:4d:53:0a:d4:dd:ab:d0:f9:32:ef:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:63:1A:2B:56:CD:C6:40:FB:03:5A:F0:A6:90:3F:F3:13:80:0E
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:81:28:bb:a6:3d:e3:80:54:25:52:64:07:78:08:ee:c6:12:
7d:ca:52:b9:cf:39:17:c2:26:c1:c1:70:09:7f:02:89:95:fe:
2d:30:80:bb:ef:63:ee:8f:c8:82:f7:36:57:df:60:2e:66:f1:
0d:10:ff:eb:11:9e:69:be:15:67:fe:c1:af:b3:90:25:78:ee:
d2:5a:b8:ca:d1:f0:45:fe:5a:32:58:5e:5c:a2:5b:c3:23:b3:
07:1c:9d:c4:18:31:b6:c4:45:e8:85:15:44:03:e6:34:9e:e2:
15:44:47:16:26:04:ae:9d:30:3d:66:5b:5b:b9:61:a7:11:8e:
43:ca:b9:db:f5:96:d2:ce:04:d3:99:51:20:08:a4:87:5b:1d:
24:ee:97:e7:27:f0:56:e3:bb:77:24:bf:6e:90:e7:ce:b8:6e:
c3:63:29:5b:f4:f8:47:0f:a0:2d:54:26:08:f1:2d:44:f8:5f:
b4:1a:48:7b:9e:be:a7:e0:9c:e0:59:87:44:a0:2e:e2:8e:5c:
6a:ad:ba:c2:08:77:f2:38:40:3c:60:e4:fa:1c:f6:b9:32:78:
d4:24:0e:57:ab:74:9d:7b:04:9d:24:35:c7:c9:00:1e:8f:da:
b1:3c:a6:d1:f7:2f:c0:bd:14:26:2c:80:81:ab:e8:81:aa:26:
1c:4b:59:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:41 2026 by rpki-client