Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: 9Tb3zmRUVrE5jrFki9XYdXn+BA0Ip2vBWn249j7IG4Y=
Subject key identifier: D3:54:4E:B6:B7:15:6A:34:C6:0A:ED:97:CC:9A:0F:FE:98:15:18:6A
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 019D985032D439B5BA005EECEEBBC777E27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 08F0
Signing time: Thu 16 Apr 2026 22:01:25 +0000
Manifest this update: Thu 16 Apr 2026 22:01:25 +0000
Manifest next update: Fri 17 Apr 2026 22:01:25 +0000
Files and hashes: 1: IpDWhHDW_jjW4s7kmxssNqbsNL8.roa (hash: PZdGVIm+bNpQQVU0BxUiBJTaInqWv4810rxgD/JnG9o=)
2: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: iOuI2m3KEYh0M8lK9E8iNSq65+i1k/Lf9NhALiF1Ras=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:32:d4:39:b5:ba:00:5e:ec:ee:bb:c7:77:e2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Apr 16 22:01:25 2026 GMT
Not After : Apr 17 22:01:25 2026 GMT
Subject: CN=d3544eb6b7156a34c60aed97cc9a0ffe9815186a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:b8:43:7e:30:ff:02:06:2e:8c:fc:1c:92:
b5:f6:64:dd:33:b0:a5:da:a4:9f:c8:c9:af:06:da:
b5:fe:ba:9c:a9:85:05:8d:70:0f:fe:3f:95:64:57:
cf:87:f2:ce:c8:07:db:5d:3e:53:19:85:b9:c5:4d:
cc:a1:b8:08:b1:d5:b5:f4:fa:6f:c0:ed:2b:c3:6b:
3d:f9:49:f9:b5:19:eb:84:1b:cf:d4:2a:32:d8:3e:
ca:8e:be:01:a7:9a:16:ac:90:cb:32:53:92:33:65:
fd:bd:42:5e:51:08:71:9c:0d:b1:31:c4:92:0b:ce:
b9:a4:b9:b0:23:a9:84:af:a7:c0:3d:4b:a4:8a:12:
c6:ee:0e:ef:32:d8:d7:15:78:30:4b:52:e2:d4:d1:
3a:1d:5c:74:af:ea:d4:f0:61:7c:b2:3a:f3:47:21:
2e:e7:17:5d:b8:0a:cf:36:07:cd:91:ae:95:72:b7:
6c:27:cd:58:9c:48:07:67:ce:de:46:a8:b4:e0:0a:
64:9a:f3:e9:3c:a9:fd:8c:63:8e:e9:4f:ae:3b:42:
20:66:09:be:54:b1:52:71:58:9c:3e:43:ac:61:5a:
0f:56:43:63:69:46:26:7a:47:f0:5e:01:b6:84:ae:
55:fc:c2:ed:23:e8:cc:b7:b4:fb:87:ef:ad:23:e8:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:4E:B6:B7:15:6A:34:C6:0A:ED:97:CC:9A:0F:FE:98:15:18:6A
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:ab:00:03:f6:f1:0b:0a:cb:b7:55:f5:bf:f6:c8:81:4b:
b0:e6:79:c5:1f:10:0f:22:0b:66:94:f5:80:47:ab:52:0b:91:
e0:8f:de:59:f5:32:63:87:e5:23:e2:e7:ee:77:26:5d:48:0b:
9c:3a:f5:ff:7c:c6:e3:ff:eb:15:94:7e:71:28:4b:9c:bc:ce:
6e:42:07:bc:98:ad:30:45:16:c8:09:2d:13:a2:93:77:9f:5e:
22:02:2d:77:9f:81:da:c4:10:ff:da:4d:7a:f7:d9:94:33:b3:
68:b1:53:ff:e0:0a:0b:9d:9a:e7:5b:00:b6:88:44:b1:9b:d0:
9a:56:b4:9a:56:d6:4f:31:02:8e:4a:ab:07:72:46:7d:63:5e:
04:f6:a5:b8:5a:d6:46:70:c0:a8:0b:83:fc:35:00:11:ce:83:
b0:30:65:8e:6d:80:77:a8:ff:41:11:06:34:e7:d3:22:eb:ef:
04:cb:71:b4:75:ec:c2:0e:1a:ff:31:42:ae:2d:21:05:a2:ee:
34:84:57:c9:87:53:16:12:a9:1e:9c:a2:ab:94:f0:46:9e:e6:
42:db:17:2c:2b:89:db:67:83:fd:ea:b9:0e:23:58:eb:8c:60:
10:d8:c2:46:88:8b:3e:3d:de:ef:66:71:da:bc:36:a3:74:62:
54:b0:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:54 2026 by rpki-client