Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: b0m/v5i0St8tjKCilwpvCw2T0Kchwj2sYz1cnaJq3QQ=
Subject key identifier: E0:91:A3:F1:DE:18:A9:9C:44:19:AC:E3:D0:58:4B:55:B4:2A:23:37
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 01A0E43E4B69E3BF0A3485F08CA294B08B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 19:01:22 +0000
Manifest this update: Sun 27 Sep 2026 19:01:22 +0000
Manifest next update: Mon 28 Sep 2026 19:01:22 +0000
Files and hashes: 1: ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa (hash: wWznWI3pS+Ln2wiCRlmdeHQDHSW6bkqR14q4qqXsCjc=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: ho1VhZy2wszsd563MBV4QLDLseanMjrApuF6a39g2VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:4b:69:e3:bf:0a:34:85:f0:8c:a2:94:b0:8b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Sep 27 19:01:22 2026 GMT
Not After : Sep 28 19:01:22 2026 GMT
Subject: CN=e091a3f1de18a99c4419ace3d0584b55b42a2337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:04:8d:d3:da:6b:07:bd:1a:d9:1c:6f:dd:
fb:67:68:f9:e0:26:d6:76:d5:d9:f9:dd:84:ac:54:
f3:f3:39:28:ac:b1:36:ea:75:a4:25:9d:8f:41:e7:
86:71:a5:67:32:78:f2:5b:1c:a2:88:09:53:4e:1c:
2d:98:c5:80:ce:35:1e:5a:db:64:16:4d:a4:ae:93:
44:69:45:46:d6:97:75:7a:83:ca:a6:c7:16:74:e6:
e4:62:24:fa:7f:ba:ae:c0:64:83:cd:40:fd:c8:44:
44:30:5e:45:b5:29:ab:52:99:b9:49:3c:aa:de:0b:
43:c2:19:6e:a8:84:5e:49:df:38:3e:d7:78:0e:35:
89:f2:2c:2b:a3:c9:3f:4a:42:82:a6:7f:92:18:79:
12:af:dd:cf:60:00:d6:08:5b:8a:3d:67:78:7e:47:
a3:a3:f4:63:be:ab:b4:44:68:1d:e3:f9:0f:db:24:
60:6a:94:f4:51:b2:e9:96:d2:a2:6f:e9:c5:31:93:
d9:39:b0:ff:1c:a5:7c:10:bd:d9:c0:31:e1:c7:fe:
0b:57:4f:c2:ae:de:a1:be:a0:71:31:91:5d:83:fc:
cc:7d:2b:a6:4e:4e:58:97:2e:b7:14:38:91:73:22:
db:04:15:3f:e4:cc:3d:9e:af:d8:11:90:7a:07:b1:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:A3:F1:DE:18:A9:9C:44:19:AC:E3:D0:58:4B:55:B4:2A:23:37
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1e:f2:f5:95:e4:30:e8:eb:53:d7:a3:be:e4:aa:93:a2:58:
a6:30:67:86:62:6b:5f:bc:02:54:62:12:63:ed:bf:f8:f9:d6:
4d:46:ed:d3:f0:cf:e5:bc:07:8e:e6:7c:fd:27:05:44:99:87:
b0:6f:94:43:29:69:fb:2b:01:57:2d:92:c0:52:e6:e7:21:56:
7d:ff:12:46:b7:27:cd:8b:a4:4b:c0:d9:0c:3c:9e:bb:91:48:
98:b6:11:b1:a3:6b:e2:18:89:68:5c:9d:c4:f6:2c:b3:c5:f4:
0b:a6:99:6f:f2:6d:e5:bc:fb:7b:02:dd:98:9a:e6:29:35:e3:
5a:44:63:ed:2b:27:cd:4e:fe:85:a4:84:33:da:02:bb:cd:9d:
a8:1d:72:00:3d:fb:07:03:62:6e:ce:cb:11:91:49:68:6a:fa:
59:ba:4e:ab:b7:1d:55:63:03:7e:39:83:bf:aa:fa:4a:c2:5a:
da:85:f6:fd:b8:35:55:bb:c6:7c:3d:48:dc:05:86:b0:ae:30:
7b:af:79:80:5c:51:c0:92:41:5f:99:88:18:d2:c9:37:88:85:
79:fe:7b:4b:12:1c:f2:e9:95:07:96:54:21:a2:a1:15:e0:5a:
48:b4:a2:1f:a3:b5:42:99:5a:74:40:88:81:9e:61:76:85:7a:
e4:ea:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:13:02 2026 by rpki-client