Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: V9ema8c068OgiXaoqiY0JM7LlaQf3iKXzAeCb6ijf5o=
Subject key identifier: AE:C9:7A:06:C1:28:B2:C0:D1:9F:52:E3:4F:54:AB:A7:14:A7:13:A9
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 019D9A3E104FAAFA40ACC3C2B536FC7DE4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:00:51 +0000
Manifest this update: Fri 17 Apr 2026 07:00:51 +0000
Manifest next update: Sat 18 Apr 2026 07:00:51 +0000
Files and hashes: 1: ml7gG0A_mVQfOFzP3FHFwuQkr2A.roa (hash: wWznWI3pS+Ln2wiCRlmdeHQDHSW6bkqR14q4qqXsCjc=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: b1rDSZljT2tXh9abdun6hUuhWw7iJe2ITivwQycYtwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:10:4f:aa:fa:40:ac:c3:c2:b5:36:fc:7d:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Apr 17 07:00:51 2026 GMT
Not After : Apr 18 07:00:51 2026 GMT
Subject: CN=aec97a06c128b2c0d19f52e34f54aba714a713a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:f7:22:27:fb:e5:33:2d:a3:41:19:a4:42:
5b:6c:9e:c1:df:13:b3:dd:1d:c6:3f:f8:7d:6a:a3:
37:66:b2:26:35:e2:e0:a7:91:55:16:e7:b9:dd:85:
d3:fd:b9:04:7c:22:27:6e:65:07:d1:c0:31:12:f6:
03:b5:fd:f4:60:75:f5:ca:04:36:0b:94:0c:76:39:
17:9c:24:77:71:b7:56:76:af:d0:50:96:31:dc:83:
0a:bd:02:32:9c:d0:db:9d:70:24:ec:82:72:af:ca:
ed:e5:6d:6d:51:6e:37:78:3b:6d:28:e2:60:22:e3:
3e:3e:ce:71:c2:22:4f:62:10:b1:da:1a:b5:cc:23:
1d:ee:69:ff:a3:1e:7c:c2:56:7d:cb:d7:2e:8a:ff:
ff:b0:07:f0:ae:46:45:12:9f:36:6f:22:a4:14:03:
49:c5:5e:a3:00:37:03:13:9f:78:af:17:4b:7b:2b:
5c:77:5c:fe:3e:ee:b5:c7:76:b8:e3:ad:4f:3b:e4:
1c:77:20:86:02:95:9d:1d:f6:d4:a3:8c:0d:03:50:
84:2e:7c:ee:54:6f:9f:f4:ec:29:6d:ac:47:fe:5e:
95:41:bd:50:c5:24:40:52:23:ea:5b:26:35:b6:72:
76:bc:e6:10:3d:5a:86:fb:e6:ac:b9:18:10:52:96:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:7A:06:C1:28:B2:C0:D1:9F:52:E3:4F:54:AB:A7:14:A7:13:A9
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:52:7c:ee:58:fa:34:ef:b6:40:98:2e:82:3e:3a:a4:7d:
8b:97:40:7e:d7:1b:04:82:b0:57:e3:11:41:0b:ac:08:63:5b:
d9:2d:b4:21:68:ec:70:dd:ee:70:48:56:14:ec:55:73:58:2a:
fa:8a:06:35:3d:6f:be:5a:0f:6e:ba:63:79:79:b2:9e:24:94:
1d:2c:3d:a9:25:50:9a:48:f6:a4:26:54:d7:67:d5:0d:be:cd:
b8:17:91:f6:e3:1b:46:9d:ac:31:e6:39:75:4c:b0:e0:af:bc:
f6:0a:88:40:8c:1e:85:c3:d9:1f:33:d0:b6:07:3c:7b:d6:b8:
f0:df:01:b7:07:e2:76:46:0d:56:e2:f3:9d:6f:07:e3:4f:8f:
bd:08:e0:be:de:10:fa:3d:58:dc:e2:16:12:71:09:48:1b:25:
27:4b:68:92:4e:0e:0c:03:e1:47:b5:bc:eb:7c:ba:25:5c:cc:
f3:ca:a0:a8:4b:8d:a0:71:07:61:f2:91:41:35:dd:cd:3d:10:
82:80:b7:9b:ff:d4:a8:7b:85:fe:10:f4:47:9a:56:44:8e:2e:
99:5a:64:a3:56:c6:a2:5d:04:8e:57:6f:03:26:86:99:a5:3c:
26:b7:25:1f:de:f9:24:9a:00:33:9e:69:99:e7:ff:f2:43:9f:
e8:8a:5a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:22 2026 by rpki-client