Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: 86YMeRwpZmS6SdJ3E+IeubVxlteb9B+MCMtaRl+A2J0=
Subject key identifier: 6A:17:2D:20:F8:B2:48:55:0C:5B:7B:B7:14:C4:AE:17:44:B1:CE:7E
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 019D9A3E4CC2CD23421B5E96B1323ECE0A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 08BD
Signing time: Fri 17 Apr 2026 07:01:07 +0000
Manifest this update: Fri 17 Apr 2026 07:01:07 +0000
Manifest next update: Sat 18 Apr 2026 07:01:07 +0000
Files and hashes: 1: EWYJbFjQX31oYWlD58OJv_l9B30.roa (hash: 2Mav6QQLVSCd9edMOwHxUMX2MqYRij3v85DASHfIvYU=)
2: nYyVLm0gMDde0qblfT3ncHKAnz8.roa (hash: jNbahQjR6FvDEsOWUHlprHyKe5vIEPV9UxOl9Q91iVk=)
3: ow6igTPRlqbGU9GWr5GsAICpDvc.roa (hash: M2OOGjwOx0AiSEzEWO1U/xWbG8Khv5JvliFIW9WxDrw=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: y+DoroBWh7ZbL+Wq5LHXyJGzUGfKe9ZiwYuuUeLgfIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:4c:c2:cd:23:42:1b:5e:96:b1:32:3e:ce:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Apr 17 07:01:07 2026 GMT
Not After : Apr 18 07:01:07 2026 GMT
Subject: CN=6a172d20f8b248550c5b7bb714c4ae1744b1ce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:c8:b5:b3:ac:89:65:7e:e0:95:8b:1f:15:
4b:57:66:b9:67:ea:57:6e:52:71:81:e5:43:ef:8d:
90:94:26:ea:b3:22:8d:e0:b0:d3:e9:b1:ce:0c:21:
60:95:f3:e3:d6:55:10:87:4a:07:95:35:d9:0f:08:
3d:5b:78:4f:d1:e4:02:9a:64:87:c5:8d:89:5b:d9:
da:e7:1f:2c:79:f8:ee:ed:69:2b:44:61:70:29:81:
15:ee:44:b6:28:ed:fe:4e:1a:99:bc:5d:a4:5d:7f:
c1:5f:64:e1:f3:36:c3:8c:cc:a5:49:e4:ba:01:bb:
24:f6:92:87:ef:e9:71:f1:5d:7c:f5:e9:85:ff:c4:
97:c9:dc:64:40:f8:34:d9:77:cf:3c:4e:9e:b1:ee:
3f:c4:5a:a2:6b:5f:86:ee:30:43:72:44:37:45:bb:
30:4c:f1:13:0b:61:66:e6:6a:a2:b7:c7:eb:18:47:
44:58:62:58:7e:e4:56:c0:a7:b4:af:51:2f:67:73:
f5:93:25:fb:29:51:f4:22:40:30:95:7d:66:4f:6d:
49:7e:a2:c4:0c:3c:1c:de:08:1b:6b:e2:3f:91:cf:
78:60:dc:ad:66:e7:1a:0b:6c:dc:9a:07:73:91:d0:
f1:07:20:89:fe:06:7a:49:51:3c:bc:94:05:0c:42:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:17:2D:20:F8:B2:48:55:0C:5B:7B:B7:14:C4:AE:17:44:B1:CE:7E
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:33:a1:dc:8b:1d:c1:2f:f7:1c:03:9f:49:78:a0:14:c8:0c:
ac:50:fa:af:b6:f2:62:60:11:44:11:5f:dd:08:b1:14:ab:80:
5c:9a:01:e1:e1:94:d9:8c:0e:ce:4d:0b:80:60:fe:31:63:ef:
ee:81:46:2a:e0:0c:77:ee:af:14:1b:8c:04:54:52:05:6e:40:
35:97:51:ee:61:be:0e:52:b8:6b:ff:e7:89:6d:ee:43:82:e7:
14:41:5a:11:a4:75:d4:d1:26:75:a6:91:f3:dd:b6:6d:49:bf:
d2:69:ae:23:5b:fb:8d:61:41:50:8d:60:51:9b:4c:2f:63:c9:
62:39:17:e4:15:e9:58:ef:1c:0a:c9:ed:93:b0:33:f1:7a:f3:
69:b3:94:d9:68:f9:6d:1e:fa:cf:f8:5a:a7:a2:d4:59:bd:e0:
14:d8:e3:26:1a:7d:d1:83:93:26:62:03:7d:44:28:e3:3b:7b:
f8:e4:5c:cb:a7:fa:b2:f3:ca:65:87:c9:ca:d4:9f:3d:36:e6:
6c:51:3c:33:c6:72:c4:8a:88:2a:a9:85:e3:4e:44:fa:88:62:
5a:17:b2:d5:b1:d1:96:06:b1:5e:29:b1:9c:21:d5:34:06:46:
fc:fe:52:2d:dc:ca:a7:ee:3e:2f:54:2f:c6:ca:23:64:dd:0c:
1c:62:c1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:33:41 2026 by rpki-client