Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: WfOV+uKLSXIBU4ii356jZDBE+JODsVa9XjzkUSFs6Fo=
Subject key identifier: BC:83:4B:BF:70:C6:46:57:A6:A4:DE:03:04:DB:E0:50:34:27:69:FD
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019D9A3EE5DC57B3BC6D6C9753449F909DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: oWYpsSnKnqgR8GWx2S+jTAg/OplkW1AiGg0PMoPv8Z4=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e5:dc:57:b3:bc:6d:6c:97:53:44:9f:90:9d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=bc834bbf70c64657a6a4de0304dbe050342769fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:7c:c7:dc:28:be:1c:0b:22:ff:da:36:e2:
1d:eb:3c:98:04:68:62:d6:68:90:21:a0:b3:66:c5:
7b:6d:ce:e9:b8:da:84:1f:03:56:47:ec:ca:dc:2c:
f3:8c:2a:de:ab:e3:00:0e:76:f3:14:7d:df:db:5a:
0f:a0:c6:8e:2b:fc:19:e9:f2:96:79:51:76:d7:0b:
5b:fd:df:ed:ef:21:91:6d:17:c6:cc:5b:9b:e2:73:
0b:4c:c1:fe:91:43:85:e1:0b:f3:c2:7b:b7:98:b1:
bc:b7:5e:4a:f7:e7:bf:73:7e:dc:f5:a1:e8:57:de:
f6:b4:cc:f3:8f:4e:8a:a3:ce:58:eb:03:dd:73:1e:
d1:31:c4:7a:de:92:fc:2d:9e:5b:fb:44:ac:30:08:
97:f7:43:59:20:19:b8:8d:8a:cc:e4:cb:55:ea:62:
6e:ee:42:4b:a0:e7:03:e1:e0:79:6a:c9:88:49:92:
47:8d:2e:49:c8:fe:76:f5:f0:49:0a:72:36:dd:99:
74:85:53:92:a7:5d:82:5a:e5:18:34:f1:27:e6:49:
8d:d4:91:dd:a1:63:01:c6:d6:28:97:c3:8f:e9:0a:
84:04:aa:03:79:14:c1:9d:8c:92:1c:8c:8c:9a:af:
41:c9:56:40:53:b8:2b:c4:03:56:ce:e2:9f:93:3c:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:4B:BF:70:C6:46:57:A6:A4:DE:03:04:DB:E0:50:34:27:69:FD
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:3e:d7:52:87:6f:14:a5:9c:5b:bc:ad:ea:d2:c1:97:a3:
dd:53:31:b0:ad:f7:4b:c2:aa:40:0c:a4:f6:6e:dd:00:89:52:
4e:46:60:ac:02:49:dd:34:c3:52:80:93:99:54:7a:61:61:02:
ea:3f:fd:e6:63:cb:71:72:7e:f2:51:48:fd:1f:c5:57:a2:a4:
24:f3:0c:94:03:08:17:9c:38:5d:e7:92:59:b2:f2:f5:f5:80:
76:73:7c:13:60:2e:37:e4:f0:41:d2:34:c5:84:57:34:00:9e:
23:f2:f6:c8:b3:ad:06:3f:ee:6d:12:a4:fb:cb:74:9a:dc:19:
9b:06:ef:99:7d:ac:87:d1:58:39:b3:ef:38:2e:0b:5e:4c:b5:
9f:a7:92:54:41:60:f7:6e:c1:c5:2d:78:8e:a9:56:52:75:7a:
3c:33:6c:99:e7:a5:0f:80:ba:8b:5a:1e:e9:74:f8:de:2c:6a:
3a:ab:9b:92:9c:55:60:e5:a1:ba:0b:43:c2:47:e3:da:d1:fd:
98:a6:45:cb:d7:d0:36:d8:68:d2:37:4d:dc:63:fd:20:bd:e0:
14:fe:c1:85:cb:8c:6e:01:a1:98:2a:02:00:6a:7d:2a:65:d7:
6a:7b:9e:f6:55:82:75:ce:e0:ce:4f:4d:7c:5c:ff:88:78:4b:
11:a6:d7:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPuXcV7O8bWyXU0SfkJ3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl
M2I0NjIwHhcNMjYwNDE3MDcwMTQ2WhcNMjYwNDE4MDcwMTQ2WjAzMTEwLwYDVQQD
EyhiYzgzNGJiZjcwYzY0NjU3YTZhNGRlMDMwNGRiZTA1MDM0Mjc2OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqp8x9wovhwLIv/aNuId6zyYBGhi
1miQIaCzZsV7bc7puNqEHwNWR+zK3CzzjCreq+MADnbzFH3f21oPoMaOK/wZ6fKW
eVF21wtb/d/t7yGRbRfGzFub4nMLTMH+kUOF4Qvzwnu3mLG8t15K9+e/c37c9aHo
V972tMzzj06Ko85Y6wPdcx7RMcR63pL8LZ5b+0SsMAiX90NZIBm4jYrM5MtV6mJu
7kJLoOcD4eB5asmISZJHjS5JyP529fBJCnI23Zl0hVOSp12CWuUYNPEn5kmN1JHd
oWMBxtYol8OP6QqEBKoDeRTBnYySHIyMmq9ByVZAU7grxANWzuKfkzwz/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyDS79wxkZXpqTeAwTb4FA0J2n9MB8GA1UdIwQY
MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt
MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1
LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhD0+11KH
bxSlnFu8rerSwZej3VMxsK33S8KqQAyk9m7dAIlSTkZgrAJJ3TTDUoCTmVR6YWEC
6j/95mPLcXJ+8lFI/R/FV6KkJPMMlAMIF5w4XeeSWbLy9fWAdnN8E2AuN+TwQdI0
xYRXNACeI/L2yLOtBj/ubRKk+8t0mtwZmwbvmX2sh9FYObPvOC4LXky1n6eSVEFg
927BxS14jqlWUnV6PDNsmeelD4C6i1oe6XT43ixqOqubkpxVYOWhugtDwkfj2tH9
mKZFy9fQNtho0jdN3GP9IL3gFP7BhcuMbgGhmCoCAGp9KmXXanue9lWCdc7gzk9N
fFz/iHhLEabXag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:48 2026 by rpki-client