Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: 8ZixIxDPaT+Gvv33Xi4WHDHUpLJzO8LDeEeL0yzCZaw=
Subject key identifier: 05:DC:B3:C4:21:21:AF:E4:ED:DD:6E:76:36:5C:2C:EC:AE:92:9C:59
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019D98F4ACAD8E901D36B1B4FB9D6E486DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:04 +0000
Manifest this update: Fri 17 Apr 2026 01:01:04 +0000
Manifest next update: Sat 18 Apr 2026 01:01:04 +0000
Files and hashes: 1: kEStRgFFvUE-F5ouVzsvLSOaSko.roa (hash: CPss/SLu7PEcptxsMsF+R9khBX0xPafGY3ozU4mC0YU=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: Ig40apT3fYnMZlH8N1ciPitIA2iI04wUcpLbFpEiUxs=)
3: ybcCspNcqCQ33fBea-dujuXdvYA.roa (hash: VgxSvwLJO5sqIYu59D65/gIjVJTVHdASRnQ/3xkt0AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ac:ad:8e:90:1d:36:b1:b4:fb:9d:6e:48:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Apr 17 01:01:04 2026 GMT
Not After : Apr 18 01:01:04 2026 GMT
Subject: CN=05dcb3c42121afe4eddd6e76365c2cecae929c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:2b:f4:1d:59:2e:dd:05:31:1e:36:16:b3:
c3:94:7c:ca:59:0d:15:5d:9a:a9:e5:41:19:aa:87:
83:6c:79:8d:5b:28:b4:c5:26:d4:0f:00:67:ed:3b:
88:c2:d1:ea:34:90:09:84:f0:7f:0d:f1:22:ba:0c:
f4:b9:67:f4:9b:95:c1:b6:5b:c8:5e:66:51:54:52:
da:6d:69:13:b8:5a:95:71:3e:2c:44:09:48:cc:6b:
08:f4:51:bf:86:11:89:c1:10:a4:d0:1e:56:56:d2:
5d:c4:2f:a5:2f:89:d6:12:db:71:02:ae:55:bd:7b:
f9:a0:d2:69:4e:de:50:df:ec:06:32:63:7f:e8:59:
20:b5:d7:e6:7f:8b:5b:62:cb:48:7d:06:12:88:30:
70:14:84:ef:00:60:9d:19:91:d1:d7:ea:88:8c:1d:
8f:26:17:75:f8:11:0b:10:d1:bc:4e:4a:de:70:3a:
de:18:5b:8a:07:a3:97:72:e6:8b:5a:d6:44:d5:14:
17:85:65:f3:72:9a:89:65:c8:e4:5a:a1:01:84:e1:
6d:f8:dc:e3:d0:23:c1:e8:2b:35:e0:f0:c3:5b:ff:
be:06:d1:8a:63:b5:70:49:42:78:23:57:ea:cc:66:
d4:9f:c9:c7:7d:02:ce:f1:62:02:59:63:27:0b:e9:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:B3:C4:21:21:AF:E4:ED:DD:6E:76:36:5C:2C:EC:AE:92:9C:59
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cf:33:ae:71:bf:eb:1c:ee:dc:b9:e9:02:78:fe:33:bf:e4:
af:86:05:f4:a7:0f:d3:3b:5a:1e:19:6f:5d:88:67:1e:a4:3b:
9e:34:60:a3:fd:91:d4:3e:8f:45:5b:d4:7d:05:a1:17:4e:12:
cc:4d:3a:86:da:6e:a4:fc:ea:e1:da:97:31:35:02:b1:8b:8f:
2d:ea:70:a7:f2:87:9b:f0:99:c9:a5:06:6a:f3:c3:4a:ff:66:
a7:7d:bf:7d:4a:2c:2e:32:09:17:99:b9:e7:db:73:02:8b:07:
50:0c:15:8f:5c:b2:d9:6a:d6:55:38:5a:95:9d:d0:9f:6a:e2:
56:f8:fc:1e:c0:1c:41:f8:e2:47:a5:48:3e:78:2d:1a:69:0b:
ad:e3:60:8a:7c:67:64:e6:a0:5b:0f:db:a9:48:ed:33:ef:f8:
f5:c2:ac:bb:56:db:1a:8a:63:d6:f8:73:75:89:b7:aa:8a:b2:
c0:1a:da:08:16:10:d8:4f:fc:db:1f:fb:ba:ae:44:3a:6b:16:
ce:27:bd:8f:1c:b4:a6:15:bb:c5:1a:ca:4c:b1:a2:5b:67:9f:
d2:87:b4:01:e4:13:6f:a3:9a:1b:8c:ed:86:cf:43:6e:42:b5:
04:c0:ba:c3:c8:e1:27:8d:4f:72:68:02:c0:08:9e:1f:15:4b:
84:f6:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:27 2026 by rpki-client