Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
File: q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft (raw, json)
Hash identifier: 5gTRBR5Fd8xYRGf1zmZ+fvrXP8Gcebo2d37NWfN00H0=
Subject key identifier: CC:63:70:B6:00:04:E6:62:D1:88:D8:4E:83:A0:D4:53:43:55:E8:90
Authority key identifier: AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12
Certificate issuer: /CN=ababd67e3e108c19f34fc00c76c6005993233512
Certificate serial: 019CA90EC406A0A3A2470365FC2E7D548506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
Manifest number: 71
Signing time: Sun 01 Mar 2026 11:00:42 +0000
Manifest this update: Sun 01 Mar 2026 11:00:42 +0000
Manifest next update: Mon 02 Mar 2026 11:00:42 +0000
Files and hashes: 1: 7OQN7r5DJUM5siG_lWgqrJZ8eZU.asa (hash: CMQHPUDAYob7IJjdHsUOnORXcTlXuEsyaurp+mS4Rxk=)
2: Sh_0eGA4pFFGTsJ_JR1HATFe-Tw.roa (hash: C9qojbsI3Xlw6OIL8wWbpyEwtHBl4MzqP3Rqmjk310k=)
3: q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl (hash: 2stf07YCLm/8J/IMdkSvk18Ooza2ZpylCgnrwqEj7/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:c4:06:a0:a3:a2:47:03:65:fc:2e:7d:54:85:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ababd67e3e108c19f34fc00c76c6005993233512
Validity
Not Before: Mar 1 11:00:42 2026 GMT
Not After : Mar 2 11:00:42 2026 GMT
Subject: CN=cc6370b60004e662d188d84e83a0d4534355e890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:61:2b:2e:3a:0c:f2:a8:b4:f2:2b:5f:7d:
2f:25:89:78:1a:20:50:6a:8f:8d:70:d9:5d:ed:27:
06:37:ce:9b:b2:38:11:4a:88:79:a8:1c:2a:3d:f8:
73:23:e7:f4:7c:c0:6f:05:b6:d4:9e:bb:d9:c2:6e:
d1:f0:6e:41:bd:ca:9b:fb:d2:6e:ce:ed:f8:aa:51:
96:d2:5d:95:b5:28:0a:d7:71:b7:e6:64:7c:42:a1:
68:54:2f:56:ec:15:e7:35:07:21:b5:94:26:9d:03:
b3:06:5a:67:f5:1c:a9:50:88:35:fd:41:6d:1f:d2:
f3:d4:92:06:74:70:9f:07:ad:b7:fb:52:15:4c:ba:
4d:d0:41:e7:7d:fb:78:c8:96:97:74:0a:bf:e4:ea:
5e:d3:e3:95:13:82:8a:1b:1f:7b:85:c0:92:2e:20:
f8:d0:13:5a:88:8f:50:5d:10:f5:6f:d5:44:15:38:
10:d4:ad:b0:c9:60:ad:ee:bf:1a:39:ad:cc:4d:cb:
1e:54:6f:52:42:6b:d3:05:f3:e2:a8:d7:76:12:4e:
fa:fb:d8:78:a5:a6:e3:e7:6e:34:1e:0c:92:dd:7d:
6e:4a:b9:39:78:5d:f6:d8:38:a0:3c:0b:8e:74:33:
60:70:b1:5d:32:ec:7d:1a:c9:81:a5:9c:84:59:8e:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:63:70:B6:00:04:E6:62:D1:88:D8:4E:83:A0:D4:53:43:55:E8:90
X509v3 Authority Key Identifier:
keyid:AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ae:2e:04:1d:86:15:04:48:c8:6b:a3:ad:f4:87:53:9f:45:
17:db:d8:67:c6:a9:91:f2:ac:a3:7e:26:de:8f:7f:21:74:ac:
2e:b4:b8:08:20:65:cd:51:5b:95:61:3d:31:ff:ca:1a:e6:df:
92:80:9c:cf:b2:3b:a9:97:40:77:c5:bc:6c:b0:b3:92:f0:99:
b8:08:3e:39:24:db:f1:98:32:1a:2d:70:4e:1d:ec:a7:17:b2:
ed:41:75:6b:df:a4:83:1e:97:b4:71:61:ef:a4:03:5d:7e:29:
61:02:24:dc:57:07:bb:b7:e8:47:83:d9:64:41:5b:77:e7:55:
73:82:fc:a1:7c:1c:8a:cd:3c:1b:03:83:47:bf:01:e9:bd:24:
a0:f4:17:24:84:e5:68:01:3b:f0:59:e4:dc:38:c5:13:de:ef:
35:54:d1:54:d5:09:f5:4a:3b:fb:1f:06:fb:f8:6c:7b:28:ea:
d4:dc:8e:13:2f:cb:5c:7f:90:73:20:90:2f:e3:92:af:26:0c:
32:62:ce:30:17:51:e6:e2:00:ff:6b:37:bb:01:23:a6:92:30:
91:0b:2d:1b:25:ae:a5:9b:ac:e4:ad:6f:a2:6f:d8:49:55:2d:
09:10:a9:27:3a:b3:db:ff:10:88:e8:0b:85:6a:16:29:63:a6:
b4:c8:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:43 2026 by rpki-client