Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: 67b3XeVCE0X6hO5364n7CzA9Ku4/aMyXqUvQzNheLyE=
Subject key identifier: 38:5D:61:E2:E0:C8:E8:CB:D2:2F:E2:7D:53:EB:F0:1E:6D:AF:16:9C
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019D9B507059716511BEBEA2F0B18D509E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 1926
Signing time: Fri 17 Apr 2026 12:00:33 +0000
Manifest this update: Fri 17 Apr 2026 12:00:33 +0000
Manifest next update: Sat 18 Apr 2026 12:00:33 +0000
Files and hashes: 1: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: 6ey7XX04B4tiSonLYYRbXRxoWMS3qXV8KV1Lf+F0u98=)
2: seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (hash: ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:70:59:71:65:11:be:be:a2:f0:b1:8d:50:9e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Apr 17 12:00:33 2026 GMT
Not After : Apr 18 12:00:33 2026 GMT
Subject: CN=385d61e2e0c8e8cbd22fe27d53ebf01e6daf169c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:e0:23:82:59:c9:f1:aa:54:2e:9d:b1:e9:
98:ae:c1:e3:26:cf:51:ee:5a:a7:46:8a:02:36:5c:
3a:3c:24:e4:80:09:19:f5:8b:f8:be:f4:4e:a2:73:
42:de:41:1c:c1:32:31:67:90:c5:27:1f:6f:73:f0:
52:5a:ed:7a:e2:39:33:ac:8e:7c:df:d1:82:7b:ae:
0d:32:81:f1:de:db:91:ed:d6:68:81:41:f6:e4:12:
d7:9b:1e:df:17:19:d9:65:3c:c0:59:49:3c:25:3b:
a3:12:12:a2:ed:f3:bf:72:89:f2:fd:91:71:56:c6:
e4:98:60:68:94:b6:8f:d7:ce:f3:48:07:90:10:7c:
4f:06:b6:30:ca:cd:92:e6:f5:93:79:fe:d7:c1:ad:
06:b1:de:9a:fc:c9:62:cc:c4:03:e9:01:69:54:98:
ae:f2:20:2c:aa:d3:da:36:40:e0:ef:5b:1b:c9:e4:
e3:32:66:03:e8:5c:f7:ba:12:b7:05:1d:d7:1f:1b:
67:b6:05:c1:13:23:52:dc:74:61:07:56:ca:2f:fe:
b1:a9:14:f2:74:25:76:e3:e6:a6:f5:e2:b2:14:25:
55:f7:37:dd:5f:b3:88:f9:46:3e:27:83:ab:cd:d9:
e7:7f:db:3c:4b:d5:74:b3:7f:31:a2:ed:94:2d:1e:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5D:61:E2:E0:C8:E8:CB:D2:2F:E2:7D:53:EB:F0:1E:6D:AF:16:9C
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:66:64:a9:18:3e:59:bc:2b:8f:be:b1:1f:18:28:ea:9e:1d:
0a:0c:c1:35:72:7e:15:4d:e1:1f:45:30:94:86:e8:32:a1:42:
3b:f1:86:99:4b:44:55:11:9e:b8:62:0f:95:1b:b4:58:f7:af:
4a:eb:e7:8c:60:44:08:ea:be:01:9a:6a:f8:36:30:8a:ba:24:
4d:67:75:ac:ed:0e:7a:5b:43:e2:36:4d:1d:c5:a1:c8:d0:76:
a3:d1:e0:08:e0:7c:fd:ca:d2:ec:eb:a4:1a:e9:ba:75:2e:85:
f7:37:1e:f8:bf:14:84:30:1b:9d:79:39:fe:fa:0c:c1:93:df:
97:fd:a3:68:91:a4:19:06:c8:b7:b7:97:2d:a7:52:ff:db:42:
43:83:76:b5:7e:ed:94:ec:66:6a:29:f8:87:d2:ce:60:53:d2:
25:9a:4a:8f:e8:d5:23:47:de:bc:a8:6b:c7:50:8c:d5:28:57:
d3:19:17:57:05:31:15:c3:74:1c:90:4e:5d:2c:3c:5f:2e:ff:
10:89:1c:4c:c6:78:a5:9d:f4:9d:ed:74:ff:b7:34:bc:22:74:
9f:c8:24:a0:9e:70:dc:b8:4b:98:5b:f7:46:6d:de:4b:0d:2c:
f9:90:b0:8f:19:35:f0:8c:ec:99:dd:ba:ec:70:9d:71:46:2b:
4d:24:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:40 2026 by rpki-client