Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier: fJ6MW6QEFMvzxHi4YGUBM//yJQCDqgi582BiRkPA6JI=
Subject key identifier: 5F:8D:BB:1A:C0:AE:FD:51:25:5D:9B:1B:E5:1B:B4:DE:83:D7:9A:34
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer: /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial: 019D98BD2A1ED19989F94D0A45986CDE1F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number: 0797
Signing time: Fri 17 Apr 2026 00:00:27 +0000
Manifest this update: Fri 17 Apr 2026 00:00:27 +0000
Manifest next update: Sat 18 Apr 2026 00:00:27 +0000
Files and hashes: 1: bin4sOPD5OKGfACXCfj3DQEIKBY.roa (hash: VnhSf12ZJGOlUh0T6+7Mdxo6I0H2lB8E2bDRpPDL8BU=)
2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: xmksg9ZptWMrIhLeD+iYDvs8ypVPUJVn4GNuBuqBcOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:2a:1e:d1:99:89:f9:4d:0a:45:98:6c:de:1f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Validity
Not Before: Apr 17 00:00:27 2026 GMT
Not After : Apr 18 00:00:27 2026 GMT
Subject: CN=5f8dbb1ac0aefd51255d9b1be51bb4de83d79a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:16:ce:7c:88:0c:42:fb:c1:71:72:3b:3a:
27:04:b4:02:b2:c1:7e:61:48:8d:6e:e2:e7:d7:15:
3a:7d:88:f3:d9:02:fb:f4:aa:e1:54:5f:dc:44:3a:
90:bc:bb:0d:47:fa:d6:93:7d:4a:a5:ec:1e:c2:49:
c0:56:a8:8e:9e:cc:a4:c0:83:b6:f3:06:52:b2:44:
8b:4f:d2:ac:f4:e5:e3:43:7c:fe:31:40:b4:89:80:
81:c0:13:ec:60:68:8d:59:19:60:df:f1:ff:54:a2:
d0:f0:7a:1e:57:6e:39:d1:5c:89:c6:8f:e7:45:84:
4a:29:de:d3:b4:24:a2:fc:fd:35:22:6e:ba:8c:d0:
36:a9:6a:2d:ee:f5:70:d7:a3:51:f4:7c:ea:9d:c1:
70:39:73:71:bb:d6:49:c6:29:17:bb:61:20:53:91:
de:3d:5d:b2:5e:d5:c4:56:59:9d:48:80:70:7c:bd:
1b:87:46:e6:f9:46:28:99:66:7a:7c:79:17:f1:d8:
01:c1:c8:34:39:b3:22:ef:19:0a:5f:b7:93:21:02:
8d:ec:cf:ed:fa:51:87:b0:1b:d2:71:60:09:40:7f:
2c:b1:b8:18:f3:3b:b3:a3:cf:9c:8d:e5:d2:39:32:
49:f5:41:16:7d:12:fd:d5:0c:32:5f:18:ce:57:ab:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8D:BB:1A:C0:AE:FD:51:25:5D:9B:1B:E5:1B:B4:DE:83:D7:9A:34
X509v3 Authority Key Identifier:
keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:da:e9:fb:85:82:a2:44:74:eb:6b:d9:41:f6:3f:e4:a7:5b:
ed:df:25:9e:c3:bf:5f:5b:d9:80:84:f7:22:a5:5b:60:a4:b3:
de:6d:bb:20:b9:4f:dd:92:7f:a4:9e:7f:bb:99:1c:e8:3e:f4:
0e:0b:31:2f:92:ab:b8:41:7d:d3:dc:68:cc:73:69:3b:e7:d3:
b4:0d:dd:c9:ae:00:fa:2e:7a:0d:1a:32:81:4d:4d:4a:44:79:
44:36:5d:7f:da:61:70:c0:a9:f7:35:da:af:81:17:26:5e:2e:
01:9c:98:f1:63:7a:16:9c:ac:58:9f:f5:da:ab:80:41:13:14:
32:40:98:c4:21:b5:53:ec:ed:a4:42:e6:da:38:dd:c6:68:08:
da:85:e6:c2:ab:86:94:e5:68:41:b8:1d:cc:ce:64:2f:fd:a9:
43:c4:f8:a8:e3:ee:90:33:f3:7f:82:ca:93:47:24:da:0d:bf:
47:5e:df:08:28:64:ea:79:85:52:5b:2c:b7:fd:dc:63:9f:e7:
f2:e2:aa:f8:3d:9a:69:e6:5c:3f:a2:7b:83:c4:48:9e:1b:f0:
77:60:61:d3:6d:f5:f2:31:be:21:bc:d3:10:c7:96:68:da:f2:
1b:04:54:ea:d3:91:af:df:be:8a:e0:56:1c:56:89:cc:ad:83:
e6:2c:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:51 2026 by rpki-client