Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: SuducYDVzdR2L2qyw8dz+/PJRszNIVgpQGcEYyQMHx0=
Subject key identifier: DB:80:85:91:09:D5:F5:AB:97:34:7D:79:54:2B:41:78:A0:03:8B:3E
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019D9A3EC370CEB21D4FC78BCE5CF00A5362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:37 +0000
Manifest this update: Fri 17 Apr 2026 07:01:37 +0000
Manifest next update: Sat 18 Apr 2026 07:01:37 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: RXzl4fNKZgidTM/aUsXJn+3X40BPXmY7yzv0cNornfE=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:c3:70:ce:b2:1d:4f:c7:8b:ce:5c:f0:0a:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Apr 17 07:01:37 2026 GMT
Not After : Apr 18 07:01:37 2026 GMT
Subject: CN=db80859109d5f5ab97347d79542b4178a0038b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:81:8f:7c:eb:5a:88:d1:3f:1f:55:28:68:
62:0a:58:d7:3b:7a:27:d7:61:5d:ea:30:8d:71:8e:
52:07:bd:bf:35:21:ec:92:c8:5e:f3:41:55:0b:0e:
f8:16:56:8d:ca:8a:c0:8a:c3:c5:d2:7d:42:aa:66:
ef:e8:2c:95:b0:e1:19:64:16:e8:72:b8:6a:1e:89:
e0:fb:d3:24:e6:2d:43:dc:58:24:9b:e7:a0:fb:f2:
36:22:8f:c6:a9:58:14:b9:ce:2d:c5:6f:a9:a7:c6:
6f:e5:a7:44:d7:c9:85:88:b6:a0:bd:ae:8c:72:8d:
68:d7:4c:76:cc:63:f8:52:b0:3c:f8:15:b0:60:00:
2a:bc:75:8b:5e:cc:8a:46:0a:07:99:cc:ff:16:c8:
da:12:dc:f6:f5:d9:21:e8:ac:84:ed:29:53:fb:77:
7d:48:0e:50:f9:cd:3c:00:8a:b5:cf:87:c2:e3:97:
b4:20:af:ba:77:16:b1:48:8d:e7:b0:3b:9a:f6:1b:
c1:68:95:1f:c3:59:fc:55:f0:bf:17:1a:ea:7a:a8:
ee:3e:49:45:10:d9:b3:a8:47:79:f3:7c:ff:f9:98:
ce:de:59:42:db:04:2c:2b:a9:59:f8:ed:2a:06:df:
ce:a2:e1:7c:88:63:0e:cf:6a:e5:d4:2d:7e:e5:39:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:80:85:91:09:D5:F5:AB:97:34:7D:79:54:2B:41:78:A0:03:8B:3E
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:16:7d:cc:5a:37:aa:fa:78:10:b1:cc:b0:ce:d8:f5:81:a2:
39:2d:25:34:5b:d1:0a:43:8e:b0:93:a5:a1:6b:d9:16:0b:53:
c5:dc:dd:18:b1:5b:b9:e3:da:9a:0b:14:94:5f:3a:18:6d:a7:
9e:5d:4c:a3:a9:cb:40:be:5d:c1:ac:ff:f0:32:89:d5:71:7b:
91:5b:2b:ef:96:04:04:e6:d6:13:f7:64:76:11:b7:13:35:df:
a4:54:6d:29:72:60:58:1e:0e:19:6d:be:e7:9b:df:78:32:9d:
60:84:66:a8:bc:2c:2f:38:ee:4f:ea:b9:bd:17:41:c6:c2:56:
3d:4c:ee:96:98:4c:5b:e7:4a:4f:a3:14:00:3d:a7:d3:02:fb:
d4:b7:9c:0e:d4:8e:0e:06:94:32:c6:81:45:bd:b1:7e:12:40:
cf:96:be:13:62:2f:80:6a:ea:64:a1:06:e7:0b:bb:9a:1d:96:
59:7e:8b:69:2c:d8:68:59:14:1e:e0:85:16:46:70:eb:ff:87:
b1:38:c8:fa:55:e5:a6:4f:5f:9f:b5:be:54:b3:65:78:2e:4b:
83:d8:80:43:84:0c:24:d9:3d:96:7a:da:1f:9a:a3:0f:e7:81:
42:e0:7c:56:61:34:d0:ee:a5:7e:cf:bb:a5:0c:ae:ce:ef:e8:
35:6f:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:52 2026 by rpki-client