Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: 8bX+w1dnWNNNO3FHJfLt400XDRG1Vmk4sb4ifTtN8CQ=
Subject key identifier: 02:30:62:21:F3:DB:DD:21:D3:23:6C:8C:39:FE:F0:4E:5A:AA:F8:D4
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 019D9B19DD67643CA727DB9E66BA040A8F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 1000
Signing time: Fri 17 Apr 2026 11:00:56 +0000
Manifest this update: Fri 17 Apr 2026 11:00:56 +0000
Manifest next update: Sat 18 Apr 2026 11:00:56 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: DlHkPVEO5szi4Bh5KXD6ozpPfYXrah/oSzpNytLE23M=)
2: gJFWXPA_JHXzvOKJ3yPP-FpXrIU.roa (hash: UejuYxPlvqYqOEh9OQ46XPeNSYssNDcfHiTgcJb7toI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:dd:67:64:3c:a7:27:db:9e:66:ba:04:0a:8f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Apr 17 11:00:56 2026 GMT
Not After : Apr 18 11:00:56 2026 GMT
Subject: CN=02306221f3dbdd21d3236c8c39fef04e5aaaf8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:ec:db:50:ab:17:5f:07:a0:ee:7d:43:42:
47:f3:03:34:df:96:bc:3d:e9:46:93:e5:5a:81:91:
cb:09:da:3a:af:05:ae:e1:89:7b:8f:7b:2f:6a:74:
fd:e8:4e:c1:a7:1d:5d:c2:1e:3b:f7:32:e0:90:a0:
a5:8c:4b:e7:a2:10:49:7b:35:43:b5:5d:9a:16:c0:
a1:7b:67:c2:86:ab:ab:12:4d:75:63:08:da:1b:47:
3a:6e:fd:6c:f5:9c:d9:6a:70:3f:c5:f8:fe:94:06:
02:70:04:e0:5e:d7:78:40:00:8a:12:78:73:17:4e:
47:46:02:ee:6c:16:f2:94:dd:e4:e9:7d:39:7e:6d:
16:1f:23:63:83:e2:62:00:c2:ac:b8:db:18:7a:ef:
87:0a:ea:7c:ba:11:31:7a:b9:f2:a9:32:f4:3a:ba:
ac:7b:93:2f:c6:8d:33:17:3d:61:6c:9e:42:78:34:
eb:6a:8d:72:f3:ff:65:d5:55:4f:2d:ea:63:ca:2a:
5a:c2:06:5f:77:83:54:03:42:fd:ef:63:19:f8:35:
9a:f7:a2:b3:ef:54:74:29:a9:cd:da:90:dd:e4:03:
60:67:e5:42:e6:75:4d:1e:fc:76:83:9a:2a:3a:33:
60:b5:5b:eb:90:f5:fe:a8:3b:f0:7f:74:37:14:15:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:30:62:21:F3:DB:DD:21:D3:23:6C:8C:39:FE:F0:4E:5A:AA:F8:D4
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:eb:14:f7:56:e3:46:3e:49:d4:b5:9e:10:fa:58:8a:f2:91:
51:20:15:49:b1:23:b4:10:74:06:42:a2:ad:2b:be:11:55:d5:
5f:ec:11:51:66:fa:f2:58:e0:e0:b3:17:90:e4:db:db:4b:d3:
56:c4:8d:ca:36:a1:36:49:02:28:35:b4:90:1c:1e:10:3a:4f:
db:b6:5d:33:8b:bd:05:9a:be:e9:3c:5a:e9:8a:9e:04:b5:b2:
06:13:15:7c:eb:ed:ef:11:24:e9:5c:34:fd:53:27:c4:5a:34:
75:78:23:e1:86:15:1d:46:9d:e3:c0:98:61:89:85:d9:7c:c2:
6a:09:c6:40:d4:0c:2c:74:38:a3:8e:78:7b:c8:29:5e:25:df:
04:18:21:22:9a:b0:6b:28:e7:36:81:95:14:c6:83:53:f1:c9:
5c:00:dc:77:e5:a6:86:3a:be:9b:7b:cd:93:a9:80:ab:a0:e3:
05:2b:6d:98:96:14:4f:69:e2:0d:00:60:b4:84:8c:60:f4:1b:
d4:68:4b:1a:40:e8:f2:80:18:06:bf:90:6b:8e:fa:1e:01:8d:
4b:a6:80:d7:d5:e2:4a:d8:2a:49:60:d8:3e:7b:d2:8b:dc:66:
8e:7f:e4:e7:12:8d:2d:55:b4:c0:56:bd:b4:0b:d3:c0:c9:c0:
f4:eb:a0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:51 2026 by rpki-client