Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File: rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier: X6p9779zHFg7s6FAvOW5aiIYJN7wZhlhDqBQEcQr1Kg=
Subject key identifier: EF:FB:4D:40:B5:0C:11:4E:C0:A0:B6:1E:B6:5A:51:5D:CA:61:5B:44
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial: 019D9AAC14651C723001B6F467A1F9C63D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number: 0387
Signing time: Fri 17 Apr 2026 09:01:01 +0000
Manifest this update: Fri 17 Apr 2026 09:01:01 +0000
Manifest next update: Sat 18 Apr 2026 09:01:01 +0000
Files and hashes: 1: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (hash: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4=)
2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: o6Jx2r+JIXroXDpyy4+hn0qG/jCjQGigs6SvqMMtOxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:14:65:1c:72:30:01:b6:f4:67:a1:f9:c6:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Validity
Not Before: Apr 17 09:01:01 2026 GMT
Not After : Apr 18 09:01:01 2026 GMT
Subject: CN=effb4d40b50c114ec0a0b61eb65a515dca615b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:8c:f7:ac:aa:e8:2b:80:ed:16:d1:42:36:
c3:a4:5a:b0:3f:2b:50:0e:b6:e3:80:73:93:16:dd:
16:64:5a:e7:e4:1e:bb:0d:e9:ff:bf:ba:ca:f2:d8:
8d:ea:84:66:ae:60:7c:d1:38:8c:fb:35:2f:cb:84:
1c:ab:ae:06:75:87:a8:bf:db:95:e6:ec:07:cb:32:
83:f2:13:1d:fe:92:f4:e7:27:5d:e7:36:ac:2a:c4:
95:23:57:43:54:2f:22:3b:54:49:60:32:cb:b4:42:
a6:b1:ea:65:ae:cb:e7:73:40:c0:34:e4:58:fc:07:
f8:75:e0:d2:7a:3d:c7:3e:d9:35:be:ba:ad:3c:d6:
7d:ba:fb:58:10:3e:9b:2e:6c:10:8c:02:7e:8d:71:
50:f0:2a:d9:57:00:02:e6:83:6a:78:9b:a5:b9:4d:
a6:e8:61:08:e3:6f:92:f1:72:a0:7b:16:ab:d9:ec:
c5:33:fc:d4:cb:ef:66:db:67:71:e0:f5:81:88:4e:
70:d0:d2:c6:ff:41:96:33:e9:2c:97:bb:79:15:47:
0b:1c:22:ed:68:54:d5:d6:1f:01:e3:1a:c2:5d:c5:
95:4a:ba:80:df:98:8d:15:2d:0b:e4:53:a6:81:4b:
74:0c:25:b9:70:c2:54:5a:63:01:a9:ed:ad:56:91:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:4D:40:B5:0C:11:4E:C0:A0:B6:1E:B6:5A:51:5D:CA:61:5B:44
X509v3 Authority Key Identifier:
keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:13:5a:28:8b:f9:67:20:c2:12:4c:e8:9f:05:7a:13:1d:6d:
b5:03:94:28:1b:6f:22:e5:2a:73:15:38:a7:2a:70:4c:65:5f:
32:89:98:f1:09:22:1a:29:c7:83:83:d3:15:75:f3:b3:77:49:
58:16:f8:6c:8e:92:eb:a7:01:06:25:d5:02:ff:2f:e6:04:dd:
ed:81:bf:b0:28:38:50:9e:bf:be:03:a8:ee:62:0b:71:6b:25:
60:44:08:75:07:c5:4d:df:bb:04:bc:62:1d:97:4d:e7:b7:11:
b7:b1:60:58:02:54:c9:5f:2d:ba:fb:1b:d1:75:a1:10:4c:97:
6b:65:29:24:05:76:c9:7d:7e:b8:c6:d6:23:53:50:bf:48:37:
3a:64:bd:e4:40:e4:fb:e6:b6:61:10:aa:23:e3:6a:54:84:06:
84:cc:a7:7c:f1:cf:a9:7d:93:1b:96:44:4b:62:7a:85:ab:58:
56:70:d9:50:b7:f5:26:da:be:3f:8d:98:2b:25:c4:3e:bd:dd:
59:63:b5:d1:9a:45:d6:d9:ec:b8:ca:92:7a:a1:53:52:2c:f0:
d9:e9:13:6e:47:6d:ee:4c:0e:2d:42:38:70:18:ba:ae:10:7c:
94:53:b6:41:60:f2:94:9e:41:9f:72:1b:82:71:fc:1d:07:bd:
0e:6c:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:01:50 2026 by rpki-client