Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: 6TkLXW+tYRs8QaWLxG/C7nn7iB7oeLkFRHeSrXm7OE0=
Subject key identifier: 61:A3:9D:CA:9A:BC:8F:D7:D1:A9:17:F8:E5:EE:CE:E3:7B:13:E2:F2
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 019CAA8FEA6B55B3BE8CC4203298B4F37956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: VRm1qJLP206HyHS+YLnXCEINV8xcTK8Mx6AHsEyh6d4=)
2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ea:6b:55:b3:be:8c:c4:20:32:98:b4:f3:79:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=61a39dca9abc8fd7d1a917f8e5eecee37b13e2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:86:59:f0:c7:81:3e:0d:5c:b1:57:e1:b3:
25:7c:2e:18:e5:09:8d:c3:45:b1:53:4b:7a:8c:1f:
1c:5d:5a:ce:ca:9a:bc:31:97:db:ed:3c:c0:f4:ef:
0b:2c:d6:fd:cb:cc:3e:fc:d5:4a:d4:64:7e:7b:f5:
49:a5:92:6e:60:89:51:e3:e6:43:37:0e:f4:fb:88:
c0:41:91:07:12:45:56:06:82:a2:23:f3:eb:7d:7c:
26:94:56:97:83:0e:62:8e:66:b4:60:71:7d:79:53:
e5:89:83:c2:3f:08:0a:28:8a:45:00:f5:9b:56:5e:
a8:b6:58:4a:47:08:2a:6e:f4:1f:d4:c6:8b:63:72:
33:4b:53:21:32:b4:17:de:e8:78:8d:39:00:bd:ff:
9a:99:67:cb:15:47:c9:1b:85:4c:52:75:7a:79:98:
24:c0:f2:07:f4:cd:0a:ec:f7:12:9e:67:aa:3d:65:
cd:83:95:93:8b:ef:8c:02:43:67:19:1c:7d:ae:3b:
92:f7:3a:89:62:0b:45:e6:85:bb:13:41:71:43:43:
77:44:9b:65:b0:fc:bf:95:59:e2:37:95:41:7d:10:
6a:5b:7e:1f:59:81:94:b1:6b:9a:d5:db:e0:95:22:
df:f3:82:f5:2d:88:98:dc:21:7a:b5:4d:8a:d5:97:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:9D:CA:9A:BC:8F:D7:D1:A9:17:F8:E5:EE:CE:E3:7B:13:E2:F2
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:24:25:07:94:c5:dc:5b:b3:44:ad:88:a9:5d:18:78:d6:ef:
6a:3f:4b:8a:4a:e7:ed:9f:3a:b3:dd:5e:0a:b7:28:be:aa:ba:
0b:68:8a:ab:ae:20:da:3d:c4:08:25:18:24:00:20:3a:87:c0:
5f:51:bf:90:df:b1:85:11:b4:97:01:4e:76:c0:1b:d2:0d:56:
17:50:f7:bd:3b:e8:be:e7:90:aa:97:b2:d3:7c:bf:59:fd:1e:
9a:5b:ce:06:ea:d6:e8:38:ae:e7:db:72:3c:81:b9:b2:9b:bf:
1b:30:70:21:79:91:3b:f2:c7:2c:c9:6a:fd:3b:39:05:68:4d:
47:74:bc:9b:6f:13:57:3a:00:bb:ec:61:cf:12:0d:d7:ce:d4:
02:b0:0e:50:c5:3b:1f:08:97:de:49:18:f9:2d:f7:4b:f8:35:
d9:3a:0a:cd:b0:be:ea:7c:cb:72:40:99:7d:b2:c3:e6:67:1f:
01:cb:c1:ba:b1:16:8d:c6:ed:19:45:e5:65:67:e0:21:06:4c:
2b:e8:63:0d:04:44:ce:81:3e:98:f8:53:fd:2c:96:df:36:06:
b6:11:c9:a5:b7:15:3d:fb:39:bd:cb:62:87:7f:56:82:8f:94:
99:3d:80:cf:82:76:a2:2d:19:b2:9b:49:af:c8:7e:bc:1a:7f:
10:cf:7f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:29 2026 by rpki-client