Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: 4BgndIxG0/NDoGQGBhlVpvBDpARbLe64sUbkoJxI5ys=
Subject key identifier: A8:60:FE:95:18:FE:38:DA:D0:2D:11:FC:2B:5E:18:C3:FF:96:E0:88
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 019D9AE3721CF3BA9C49D96007DBEF9EA920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 11D9
Signing time: Fri 17 Apr 2026 10:01:30 +0000
Manifest this update: Fri 17 Apr 2026 10:01:30 +0000
Manifest next update: Sat 18 Apr 2026 10:01:30 +0000
Files and hashes: 1: BJEVa_aX9GRfgBGuldqxrBW_ggU.roa (hash: yxFSDsFQ1W994H/MWEZPZMlBkPI/Yd+y9utpq4Nr9O8=)
2: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: EEm1AQcO8kqG/EHKMThl19lpDHTa+J3C+Gaya3N3EBA=)
3: aZLmDNfDNQfMwJ6001JcSrReXVo.roa (hash: q9+55aFzyoEUFmJ9wbybuO0labtSZYAJl9v8e7OVPio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:72:1c:f3:ba:9c:49:d9:60:07:db:ef:9e:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Apr 17 10:01:30 2026 GMT
Not After : Apr 18 10:01:30 2026 GMT
Subject: CN=a860fe9518fe38dad02d11fc2b5e18c3ff96e088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:98:6d:2b:62:a9:60:b6:09:2a:0d:a4:be:
b4:f9:8f:76:d1:fb:77:0b:0f:3b:32:02:a0:8b:d4:
9a:36:01:4e:de:71:a6:96:3f:08:1a:93:42:f2:50:
d8:0c:e9:c2:e2:b9:66:2a:ee:ec:f9:b3:4f:9a:b5:
a6:27:d5:e1:39:74:16:81:a6:bf:b3:19:d6:5a:93:
ba:cb:06:52:b9:25:f0:8c:ef:07:fb:24:93:61:db:
fc:09:a0:c5:d7:5c:bf:8f:e8:e6:09:71:81:c6:ea:
4a:4c:ec:b6:19:3b:bd:f5:d9:10:6d:f9:18:9c:8d:
bf:d2:d1:aa:89:78:84:89:6a:fc:b6:d4:a5:a3:a5:
59:6e:e8:be:22:a9:b1:c4:82:39:f6:4e:06:6c:bf:
21:b4:d9:8d:a5:15:de:a6:03:b0:10:63:d3:06:a9:
72:7c:17:2e:90:8a:8c:59:90:6f:92:28:e5:20:58:
d2:cb:54:29:76:b1:fa:ef:8e:cb:d8:97:79:8e:87:
81:03:3c:90:96:4e:fc:c5:ad:f9:62:ff:18:9c:bc:
ab:35:20:9b:d7:2b:4f:39:d6:72:70:08:61:8a:25:
7d:1d:32:83:c4:3d:fc:a5:83:71:e4:44:f5:e3:ca:
84:a9:64:de:63:06:aa:7d:58:22:81:df:5d:7d:9b:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:60:FE:95:18:FE:38:DA:D0:2D:11:FC:2B:5E:18:C3:FF:96:E0:88
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:01:cd:2d:b6:1a:e9:41:56:fe:6f:a1:b1:71:a7:19:c6:35:
30:5b:fe:0c:a4:a7:8b:71:81:da:be:ed:d9:9a:95:cd:98:9f:
17:a7:4a:25:a0:92:a6:8a:51:33:cf:ee:f0:73:cd:bd:b3:74:
02:cf:c8:0b:23:d5:aa:1d:68:22:61:0b:67:ad:af:a1:dc:97:
d3:f7:73:0b:ff:05:53:1c:c7:17:f2:66:ae:1d:98:da:d0:2d:
5b:c1:17:d6:3e:30:b1:a2:3d:c3:5c:92:46:ae:b4:76:8e:9e:
df:00:33:7e:02:b0:b4:ee:10:60:8e:61:9c:d6:9c:0d:4d:eb:
2b:02:a2:41:ea:f2:09:c0:31:11:2f:0d:9f:98:26:19:17:96:
9f:f8:77:f1:a9:ac:5e:4e:90:99:b8:49:de:4a:6e:be:5f:65:
f0:5a:11:a6:ef:92:73:dd:30:f6:21:e7:86:2c:04:0c:ae:56:
63:d8:6b:05:92:8e:ed:da:0e:88:52:c4:e3:9d:3b:5b:c9:6c:
0a:f9:e4:44:3f:70:c9:35:ee:4f:81:cf:a5:78:9c:8f:e1:4d:
85:55:b3:8b:51:43:ae:f0:6e:c4:7e:d5:ee:94:f0:53:14:89:
ca:68:4b:65:72:92:6b:c0:eb:ff:77:d1:dd:49:95:3c:e1:ab:
ba:0a:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:31 2026 by rpki-client