Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: IKN2vKuwLkJhlHUh9jxgIVcralB2GjzzTNJAHu+7HAw=
Subject key identifier: 7E:0E:3B:FA:14:27:E6:E2:B9:D4:D8:2E:32:86:7D:77:07:C7:E0:5C
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 019D992B50B477B749B46C96FA61016195D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:45 +0000
Manifest this update: Fri 17 Apr 2026 02:00:45 +0000
Manifest next update: Sat 18 Apr 2026 02:00:45 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: P2Syei0NUUox3MW81Cr12lkHqi6KU3/W95vctyaWMLs=)
2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:50:b4:77:b7:49:b4:6c:96:fa:61:01:61:95:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Apr 17 02:00:45 2026 GMT
Not After : Apr 18 02:00:45 2026 GMT
Subject: CN=7e0e3bfa1427e6e2b9d4d82e32867d7707c7e05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:a4:f4:df:a3:c0:c3:91:93:bf:94:bc:bc:
02:b2:0b:79:48:8f:1f:87:dc:fb:7f:e4:5b:34:3d:
e8:1b:25:ea:47:37:67:f3:3d:51:fd:75:e1:6c:e0:
47:48:c7:72:70:a0:65:a4:0b:1f:38:8d:d8:70:88:
8d:a5:65:9d:bb:54:9d:91:ce:ca:e5:3b:6b:1e:ac:
b9:bf:78:20:ea:15:da:dd:61:62:12:18:55:65:13:
ff:54:5e:77:af:c7:88:5e:d9:0b:be:37:4a:ac:e6:
f8:a7:01:75:b4:7e:94:ac:0e:05:f5:c4:3b:ec:32:
89:78:49:a3:b5:7c:27:46:aa:a0:7b:2d:1a:cb:6d:
bf:ed:c7:b3:9f:6a:27:45:43:17:87:80:f2:7a:9a:
25:16:dc:f1:ae:55:23:3a:ee:a5:09:f2:3c:5c:6b:
b6:83:9f:f1:0d:94:d4:bb:7b:16:44:6b:dc:bd:9b:
8c:6f:94:72:00:8c:59:b4:92:3a:90:6b:12:0d:53:
d5:f3:76:ba:6f:b9:7a:9a:18:0c:f0:69:81:8a:24:
5d:5b:e1:76:d6:49:a2:f1:b0:c4:28:ab:f4:88:6d:
e7:e1:54:ee:9a:6c:91:9f:f1:3e:d7:05:c3:10:42:
6c:b9:2a:4e:34:e2:1c:d5:6e:5e:6e:e1:be:94:21:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:3B:FA:14:27:E6:E2:B9:D4:D8:2E:32:86:7D:77:07:C7:E0:5C
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f3:85:67:6b:b0:a7:07:3b:d2:ac:01:7c:f8:71:95:da:08:
18:42:15:e0:10:c5:57:55:48:55:69:be:b6:32:63:94:86:6b:
42:c4:1e:c2:fa:f7:61:55:41:8a:31:90:16:3c:57:66:64:f9:
4a:90:5c:b9:10:4a:0c:6c:a3:bc:e4:92:35:ad:9d:23:48:94:
af:b4:d8:ab:4b:fe:eb:9d:be:df:0f:91:2d:6f:4d:be:f5:27:
69:31:ef:0b:c5:39:33:4f:a8:6f:8e:99:52:b0:21:a0:ef:dc:
50:95:a6:37:95:d3:28:90:8b:eb:01:18:4d:56:c5:11:de:7a:
01:63:d6:16:38:ac:11:8e:81:01:27:34:d8:a7:9b:5b:80:a4:
dc:9f:05:21:75:dc:61:0b:e5:4e:55:13:c4:b7:3d:be:f1:16:
55:80:6b:16:d9:62:50:8c:b7:0d:b8:24:aa:d7:53:94:67:4d:
24:91:29:e4:9f:8b:43:47:a8:46:0d:59:62:44:c2:26:a6:2b:
f6:e2:dd:4e:4e:22:fc:e7:8c:63:11:0a:d8:1a:de:15:ea:39:
3b:d5:b0:54:57:2b:75:b5:39:fc:63:c8:e5:5d:91:2a:81:d1:
69:d9:e0:b9:72:0e:e0:94:80:45:de:58:3d:e8:e8:46:e4:3a:
57:b8:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:35 2026 by rpki-client