Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File: q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier: HquPwskVYFuvWfWFcDclprCG3D2x9/9qDiy/EgqC6lw=
Subject key identifier: 2E:5C:80:45:E9:D1:20:5E:08:7E:62:30:3C:4C:39:75:AC:20:9C:C5
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 019CA9EB0A652561174484CA2369DAFE810F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number: 0BCC
Signing time: Sun 01 Mar 2026 15:01:18 +0000
Manifest this update: Sun 01 Mar 2026 15:01:18 +0000
Manifest next update: Mon 02 Mar 2026 15:01:18 +0000
Files and hashes: 1: IQbpL4Pqq93ybQGV6ANNMbZ2iIo.roa (hash: PGBZA27UKVJdbgN0SEeBoj7RAPgQfESC+ab1mII1zDE=)
2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: LS9y63avN2UiwcKEVSXhPeHH4VASS7fahrjn+OfbHls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:0a:65:25:61:17:44:84:ca:23:69:da:fe:81:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Mar 1 15:01:18 2026 GMT
Not After : Mar 2 15:01:18 2026 GMT
Subject: CN=2e5c8045e9d1205e087e62303c4c3975ac209cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:20:23:a0:05:bc:8b:c0:e1:06:ea:bd:c8:
1d:ef:d4:47:bb:bd:cb:97:c0:78:33:6c:d7:67:1c:
ba:05:cb:c0:a0:f6:41:18:74:ec:da:37:89:4e:9c:
f5:a6:4f:b1:3f:7e:9c:1d:15:10:a3:30:f7:da:9e:
26:d6:a3:9e:93:3f:51:e8:d6:96:f9:ff:f5:86:b6:
1e:8d:e1:ec:5e:14:d4:49:c5:29:65:b0:e6:f0:5d:
04:6e:b3:bd:11:5b:18:84:2b:c3:ab:50:a9:77:a3:
d2:3c:53:e2:63:01:a0:cf:9f:43:f7:4d:46:6d:84:
96:90:b7:3e:c8:74:4b:3c:8c:3e:b2:33:41:01:16:
e7:dd:ec:3b:e3:46:70:6c:e3:22:66:cf:4e:74:f2:
09:02:46:2e:34:77:9a:5b:01:3d:8d:ba:54:9c:94:
e5:24:ba:9f:50:33:df:33:29:3a:5c:f8:12:f1:b5:
44:14:81:bb:7c:04:4c:41:f2:de:fb:e3:59:c4:84:
2f:28:41:2c:ec:aa:ff:14:f8:d6:c3:d4:36:df:65:
a5:5d:fd:17:67:13:42:ee:93:e5:51:02:54:54:f8:
80:96:2a:d9:a8:3b:05:30:59:55:8b:d6:dd:e4:40:
1e:c4:8d:aa:02:3e:7e:34:8a:97:c6:80:84:1c:92:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:80:45:E9:D1:20:5E:08:7E:62:30:3C:4C:39:75:AC:20:9C:C5
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e2:5f:90:85:d2:71:9b:39:8a:71:d9:e5:a3:24:e2:ed:5a:
1b:8f:cd:ca:75:fc:5b:25:0d:06:b9:17:fc:e8:5e:36:b0:3b:
91:ec:5f:5c:cd:54:85:17:68:42:bb:4d:7e:a7:e3:64:41:a9:
b7:03:6c:61:b7:68:10:9a:e1:9f:fa:52:5a:8f:8c:eb:34:6e:
e2:24:44:65:ab:66:d8:a3:f8:68:36:2d:0c:ed:8f:09:de:c0:
3f:32:52:e7:ba:bc:9d:76:51:24:63:e6:37:d2:59:88:5c:e5:
f7:0c:fb:cc:94:dd:f7:e3:8f:23:a8:d0:bb:a6:4d:5e:42:35:
1b:15:eb:42:09:8a:4f:2b:ee:98:5c:64:f2:7a:b7:86:bd:57:
98:94:4a:21:87:7e:0c:72:2e:c4:14:ec:66:8b:c3:bb:47:f1:
4b:91:cd:51:86:b9:b2:8f:52:2e:ca:cc:ed:9b:a0:60:d4:18:
0b:de:16:f7:c7:18:df:b6:ee:04:99:ce:d8:78:20:41:08:47:
18:04:b1:5b:3b:d4:2f:6b:8c:96:1b:f0:d7:e1:67:6a:9a:7e:
a0:ac:73:99:a0:76:4a:de:05:b0:c5:55:06:9e:c1:cf:2f:21:
69:d8:dc:3c:3d:7b:c8:02:1d:3d:c2:06:e2:84:f0:ab:f0:77:
6c:78:7f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:37 2026 by rpki-client