Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: wI57IrCknrx8MCqS9qaCf8Rdnf1GXaPVQTx49ytX92o=
Subject key identifier: 9C:3D:DD:B7:04:24:FF:3E:8F:A8:08:70:5A:C2:B8:AB:54:0A:D8:EA
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 019D984FA4640024BB20C8BB344B0EF0622B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 1513
Signing time: Thu 16 Apr 2026 22:00:49 +0000
Manifest this update: Thu 16 Apr 2026 22:00:49 +0000
Manifest next update: Fri 17 Apr 2026 22:00:49 +0000
Files and hashes: 1: 2QQChTDwIOQycovI2YsVvoZPz2I.roa (hash: CH9BbZ7Au7IxXqkLtHNUF65I74hoA0C1m5kNxLVSkng=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: rz9s02yo2khjrgzAd9EwS4heqtoQoBos1PYPrsLfS38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a4:64:00:24:bb:20:c8:bb:34:4b:0e:f0:62:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Apr 16 22:00:49 2026 GMT
Not After : Apr 17 22:00:49 2026 GMT
Subject: CN=9c3dddb70424ff3e8fa808705ac2b8ab540ad8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:12:be:80:a5:c2:ff:4b:bd:81:4e:90:8c:
fa:21:0f:f1:d5:73:b9:80:64:b8:68:b9:8b:b7:55:
ee:4f:de:0a:91:17:f6:da:39:ca:19:15:1b:79:49:
fc:2e:40:a5:08:09:f4:33:a4:d5:1e:a9:27:d0:5a:
11:bb:66:65:86:74:f5:d2:09:ee:fb:e4:3a:d6:ba:
70:37:b8:41:aa:b2:97:16:e0:05:6e:9d:9a:b7:21:
74:83:a1:49:b9:6e:de:74:a9:9d:dc:45:5f:24:1c:
3a:38:7f:96:00:8c:d8:eb:af:9e:36:87:89:d8:9e:
93:e6:00:83:e9:2c:9e:03:a5:3f:64:51:6c:d5:a3:
6c:fb:66:ff:21:b9:0b:9d:59:0d:18:8a:d7:e1:3a:
77:67:0b:7d:17:be:ca:a4:d9:35:40:ef:d1:37:bf:
9f:37:d7:13:dd:e2:72:a0:ec:e3:80:e9:48:04:c5:
c2:e0:3d:37:8d:9d:8f:2c:d5:28:68:38:76:4d:d5:
77:2b:33:d0:3f:3d:22:4b:39:87:2a:28:31:2c:be:
48:7b:70:57:1f:ec:b7:8d:03:85:a9:2c:42:89:a1:
65:52:fa:26:96:64:8d:72:c5:86:47:8c:26:85:07:
ae:85:bb:cc:70:42:c8:a4:ee:af:80:b8:cd:02:3b:
fc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3D:DD:B7:04:24:FF:3E:8F:A8:08:70:5A:C2:B8:AB:54:0A:D8:EA
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c8:65:dd:7a:42:23:ea:8e:b5:60:1e:ab:2f:9b:21:4c:a3:
66:8b:0f:71:e1:de:ef:fd:59:a2:3c:d7:ef:36:ec:62:11:a2:
fc:28:1e:a5:a8:89:6c:43:3e:49:c5:7a:8a:9d:26:72:66:7b:
51:5b:fe:a7:bc:be:49:d9:53:37:3f:ec:f3:3c:7a:af:62:3c:
e8:df:5b:e7:1e:50:64:78:18:da:64:75:74:8f:d5:d8:3c:5b:
90:38:e0:07:d8:a7:51:28:d9:dc:51:28:14:26:5a:3f:48:2f:
f4:69:84:12:31:9e:5e:72:72:02:c4:e3:d2:fa:4e:9a:8c:3c:
26:ec:b8:9f:be:99:df:b4:18:94:96:3f:bd:d4:73:95:e1:8f:
ee:d9:e7:04:ea:6d:ff:f1:1a:11:65:5e:54:7e:4e:3a:58:6d:
2b:8c:29:89:01:f6:90:ce:7e:1b:0d:c5:fe:66:85:ac:71:61:
9a:55:ec:91:f4:30:2b:3e:2d:8a:db:2f:91:f4:7d:4e:d3:84:
e3:c2:05:82:5d:43:b4:a0:48:87:9d:51:e1:72:cd:3f:ad:c1:
da:fc:0f:36:36:46:f2:7f:a8:f9:20:b6:4d:8d:fd:d5:1c:fc:
4e:85:06:42:3c:3a:72:b1:73:c1:13:94:6a:da:ab:e1:4f:81:
f3:18:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:43 2026 by rpki-client