Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: HmUP7E1lsKMR/If3OeiDi3UqSRn3tNFOhMiSf2tvPwE=
Subject key identifier: C2:3B:97:E3:76:5A:2C:81:78:0D:24:CF:31:E9:C5:69:07:77:F5:C1
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 019D99CFD5C3D725F50576945C623D04C40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:27 +0000
Manifest this update: Fri 17 Apr 2026 05:00:27 +0000
Manifest next update: Sat 18 Apr 2026 05:00:27 +0000
Files and hashes: 1: blLvX2-SqKRxgzfg9csWt9Te5CU.roa (hash: Nyn58GOogqZkbGAVvyp/qEbfXu/9YSuSkYbo5ZUxKIg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: bqPrBkFe9WmyEbTEm7dLBsTN/EF1RvlYyxRNZLzvd7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d5:c3:d7:25:f5:05:76:94:5c:62:3d:04:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Apr 17 05:00:27 2026 GMT
Not After : Apr 18 05:00:27 2026 GMT
Subject: CN=c23b97e3765a2c81780d24cf31e9c5690777f5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:ea:1f:bd:43:09:8a:80:51:32:71:cf:2d:
59:49:ae:44:3f:e8:c6:f4:bc:df:d1:bf:82:b4:2e:
01:4d:93:31:09:78:09:13:1b:13:76:29:0e:97:59:
8a:12:17:a1:fd:1f:8b:2c:cb:50:7f:64:94:e1:3a:
96:1f:f7:02:37:51:85:b4:59:79:ae:30:cd:c7:78:
a3:60:8a:f9:b7:e3:e9:3d:39:93:d1:96:e6:e4:f0:
b9:25:66:06:f8:6e:f8:94:e0:91:f0:b6:4c:2e:cd:
2a:67:e6:c5:ad:f2:ca:36:75:72:e1:81:49:9e:a5:
03:4a:f6:33:52:b3:35:21:83:b3:10:d1:ad:36:21:
4b:a6:fd:cb:87:e7:82:0b:b0:7b:95:0c:28:95:fb:
99:7a:1c:73:7d:50:08:c4:1f:a1:7d:ea:95:7e:ba:
20:38:79:ad:34:e6:c2:ec:40:69:35:de:b5:f6:19:
cf:bf:81:ce:3a:08:59:b5:2b:48:1d:f2:ae:4c:43:
ab:d5:30:16:ee:9c:43:44:fd:22:70:76:71:57:8c:
e5:2b:0b:64:94:db:41:27:94:5c:d4:c1:5d:f5:e6:
54:fa:b3:98:ac:89:d1:3b:15:09:57:db:01:b5:df:
fe:17:d8:7d:8b:f7:53:cb:ad:f3:7e:08:2f:49:fb:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:97:E3:76:5A:2C:81:78:0D:24:CF:31:E9:C5:69:07:77:F5:C1
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:14:1c:a6:15:33:95:1d:4c:bc:64:ba:60:d3:f3:51:51:34:
fa:d9:3c:7f:f0:fe:51:a7:77:cd:00:00:45:33:ec:66:44:9d:
de:ef:43:d1:22:96:ff:75:ad:12:48:2b:9f:cf:e1:8b:f2:3f:
43:4d:1b:bf:fa:7f:a5:78:8b:27:be:3f:14:18:9c:aa:df:9c:
56:22:df:69:c3:c1:9c:38:3a:34:7f:ed:8b:c1:91:d3:95:81:
91:10:4d:18:c1:18:35:1d:1b:da:7e:5c:a6:13:05:8e:f8:51:
fa:98:75:be:38:46:4d:26:72:bf:9c:1c:53:d2:b9:13:be:07:
b8:2e:4d:c0:cf:ea:9c:52:05:05:49:d2:bd:0a:6f:cd:57:6e:
0d:b7:7b:56:43:40:ce:ce:34:a7:75:f5:f6:50:cc:50:2c:51:
20:3e:cf:a3:c7:85:56:bb:b6:b9:8e:97:92:c0:49:2a:a4:73:
a4:99:15:12:9e:7a:2f:7f:d3:46:09:ab:c4:34:9f:09:9b:21:
d1:dd:d6:e2:4f:02:48:8b:a1:a9:99:b7:a1:b5:cc:bc:1b:4d:
15:b4:70:5f:97:e0:8c:66:82:6e:32:54:ab:ae:09:43:50:53:
d0:a9:4b:52:59:3c:72:0b:2a:c7:30:d3:9c:0c:17:75:9d:d5:
98:d5:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:38 2026 by rpki-client