Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier: FihbVBLvoW1CrP9/Khkrp32hXoq1PRBnuQHlT9QRg9Q=
Subject key identifier: 0C:0A:35:39:4C:C6:AF:22:F8:36:14:2E:44:AF:91:F5:95:B6:AC:3D
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 019D984FE8C9716CD25517B66980751A6B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number: 13BF
Signing time: Thu 16 Apr 2026 22:01:06 +0000
Manifest this update: Thu 16 Apr 2026 22:01:06 +0000
Manifest next update: Fri 17 Apr 2026 22:01:06 +0000
Files and hashes: 1: Oma8gQPFZK3eL4SIWeiHGMksOJ8.roa (hash: GnVVTQd6m0A+Ro/1Fl2wXRUqSbZQynPd8mR/0XhDxek=)
2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: Cvshdi42QEQe9ussKqowpC9sLVQEhTbKS6jUK30mGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e8:c9:71:6c:d2:55:17:b6:69:80:75:1a:6b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: Apr 16 22:01:06 2026 GMT
Not After : Apr 17 22:01:06 2026 GMT
Subject: CN=0c0a35394cc6af22f836142e44af91f595b6ac3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:d4:3c:2c:66:c7:6c:9a:53:cb:d1:58:5e:
e7:ac:d1:ca:84:a9:03:b2:60:c3:21:1e:cf:ec:93:
28:1e:b7:91:a7:cb:43:f3:96:07:26:8f:01:c2:6d:
bf:e4:2f:4d:6e:5f:ec:3b:44:c9:6c:16:49:ed:3e:
8f:2e:14:73:b5:f5:8e:a0:d5:5e:bf:98:14:02:35:
2b:ca:a9:2b:7c:44:78:62:8b:f2:d8:6c:ae:9d:98:
f5:0c:2b:71:b0:12:14:9d:10:b7:88:b9:c9:5a:a8:
9c:18:1c:52:19:ac:e0:bf:e3:1b:6c:84:33:ab:a0:
d9:69:75:69:ab:6b:87:ef:55:9b:18:b7:a3:ab:44:
43:8f:53:31:2e:3c:02:7d:17:f8:d8:e7:6f:4d:75:
6c:38:41:25:e1:d7:f0:9b:25:bb:c2:52:ca:51:34:
ba:be:2b:a7:8a:3f:de:41:20:9f:62:1d:dc:f4:a1:
05:74:79:5b:28:cb:55:7d:1a:d4:3b:1f:4d:5d:84:
47:6e:c1:b0:7d:4b:ff:52:8d:fb:b9:23:c4:f5:de:
3c:44:9e:5e:4e:3d:3f:fb:53:76:5c:b8:fe:94:bd:
a3:31:6e:01:cb:bb:6e:d0:f0:ba:a0:f3:a7:67:89:
d9:87:58:c7:21:57:86:48:97:1b:a7:02:43:31:37:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0A:35:39:4C:C6:AF:22:F8:36:14:2E:44:AF:91:F5:95:B6:AC:3D
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:7e:ae:2a:ac:74:f5:a1:04:cb:a0:2f:50:d8:69:ff:b7:
51:70:a3:86:d3:33:f6:a4:e0:5f:19:52:6c:39:c9:d1:56:5d:
15:f3:a4:48:6f:1b:7e:c1:f7:51:97:38:18:46:22:14:f1:a8:
ff:d3:c6:d1:50:98:75:2c:21:9a:df:73:dd:8f:2c:0a:02:28:
c3:c0:da:31:4d:b2:3c:e6:d9:b1:0f:8f:89:1b:31:f4:20:09:
87:86:cc:b4:2d:db:eb:d1:79:06:eb:b0:ff:1a:01:50:6f:25:
bb:b5:c9:34:07:c1:93:ac:64:f8:9a:c6:67:12:b3:cd:6a:56:
87:cb:fe:7d:66:16:e1:33:7e:63:8a:94:bf:45:ba:23:52:71:
af:13:91:e2:38:14:e1:6e:47:a0:cb:09:19:ad:89:3a:c7:7e:
d6:ec:65:10:62:91:d1:78:a0:87:57:f6:4a:4e:45:73:86:a3:
cc:aa:2c:2a:74:bb:53:f3:ff:83:35:7a:12:c1:55:36:8e:59:
1b:60:b1:50:1e:2b:55:c1:e4:9c:14:a7:9b:bf:b3:70:ad:94:
0f:97:b0:be:49:08:f4:bf:0f:ec:b0:22:97:f7:97:0b:21:17:
2c:c0:82:10:a1:b5:5d:72:01:65:1f:8c:f5:63:eb:b2:1b:51:
94:fb:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:52 2026 by rpki-client