Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: DroC5jwvb1jWEZLI1mtc4jMKQwzA05ej1TsHifwy7mY=
Subject key identifier: 7E:99:A5:CD:B4:73:E7:80:5A:37:7F:37:C0:4E:8F:B3:7E:45:84:B9
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 019D9999088DCAFD849771492FC48345616E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 06FA
Signing time: Fri 17 Apr 2026 04:00:36 +0000
Manifest this update: Fri 17 Apr 2026 04:00:36 +0000
Manifest next update: Sat 18 Apr 2026 04:00:36 +0000
Files and hashes: 1: OEKZs0V1OvPJXM--EEoOQzvnjxU.roa (hash: IA4xXF3SM3MMssScw4atGZl6MKvdjLCpQTou+Su+nF0=)
2: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: A5LOrUm+HHYNOWa+0nHoOJGdxC0aTgMvGVO/KYJmLeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:08:8d:ca:fd:84:97:71:49:2f:c4:83:45:61:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Apr 17 04:00:36 2026 GMT
Not After : Apr 18 04:00:36 2026 GMT
Subject: CN=7e99a5cdb473e7805a377f37c04e8fb37e4584b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:8d:71:db:ff:22:5a:cd:ad:b1:f6:55:ff:
1f:3d:b2:2b:3d:18:65:51:ff:30:d6:68:c2:5a:59:
62:ca:68:9c:88:18:68:28:b9:68:4a:bc:d3:af:f9:
b4:94:e9:83:08:07:52:38:53:f9:ca:41:ec:cb:0c:
79:32:6c:e3:e7:c5:89:e7:87:18:dc:fd:5c:a1:a4:
2e:b6:98:a4:b3:03:99:a2:6b:68:f9:60:f8:4e:04:
87:5a:2f:da:f4:c1:0b:ff:7f:af:ec:bf:44:71:1c:
c0:e4:a0:b9:21:74:3b:9a:c3:e8:25:5b:52:f1:42:
28:b4:95:d1:e6:39:05:f7:3b:10:3f:62:ea:94:89:
2f:3e:97:28:82:2c:50:5b:c8:f5:59:27:4d:ef:48:
51:dc:c0:e1:0e:12:02:ac:67:a9:96:d2:c2:18:ac:
6c:58:f0:80:12:4a:29:2e:f4:06:30:86:99:f7:ad:
66:24:e5:64:be:21:e9:6b:8c:88:b8:42:82:e7:6d:
24:8e:e8:16:83:1c:0d:e7:df:c0:ee:d5:39:68:63:
ab:58:ac:88:82:99:96:8a:3b:c9:84:45:7d:d7:79:
2e:22:b5:02:0b:c3:9e:99:eb:0d:cc:8b:e7:73:fb:
95:59:b2:80:e7:d4:f1:28:21:1d:e0:84:14:81:66:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:99:A5:CD:B4:73:E7:80:5A:37:7F:37:C0:4E:8F:B3:7E:45:84:B9
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4a:cc:c0:c5:5b:1a:3b:6f:42:e3:6b:46:28:fa:3f:5f:ba:
22:8b:31:06:94:01:12:30:21:62:b5:8d:3f:2a:a0:c8:cc:1b:
5b:0e:5b:af:7e:03:71:4c:fb:46:af:c1:97:07:af:62:d2:77:
94:80:9f:69:b5:5e:b5:1f:d4:e2:5f:7f:3d:5d:b9:ae:ff:31:
5c:9b:1d:dd:75:35:53:ba:e4:66:de:c1:8b:55:49:ab:cd:79:
d7:e8:af:8d:37:1e:39:7d:7f:67:b1:70:c5:82:3c:b0:0f:96:
2a:c4:90:ac:73:95:43:50:cf:ca:97:f4:13:71:4d:71:7a:0a:
19:5d:2f:f3:da:ed:89:0e:f0:72:b0:33:f1:5c:9c:f1:0e:d3:
df:46:4e:a6:fe:0f:64:16:cb:1d:d5:f5:db:29:b7:06:e2:15:
39:03:f1:3d:ef:24:07:fe:85:76:d3:b5:15:83:ca:30:e5:dc:
63:c8:8e:15:56:33:75:16:f6:46:d6:86:07:65:38:10:12:73:
6f:44:2e:67:f8:ea:d2:50:55:da:93:da:d9:90:a4:0d:95:d8:
b0:12:65:5f:33:d2:12:70:2b:92:1b:f6:23:1d:b6:35:d7:9a:
0f:4c:57:a7:a5:f2:7a:57:9e:25:45:d1:09:1a:f2:0a:7a:ad:
3b:31:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:48 2026 by rpki-client