Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: HRYR/AbS6a6KnIDVOSf9Ddladj4XFkz9qgkAUrapyTI=
Subject key identifier: FB:D2:CB:E0:24:73:B9:44:5A:EB:38:06:74:99:08:33:76:D8:A6:77
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 019D9A06B2704E6EDF4285663C693D131C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:23 +0000
Manifest this update: Fri 17 Apr 2026 06:00:23 +0000
Manifest next update: Sat 18 Apr 2026 06:00:23 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: u8Got7nHdNRfxh7iWMiHhGs2brsqcLDe1NuqzPJCMcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b2:70:4e:6e:df:42:85:66:3c:69:3d:13:1c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Apr 17 06:00:23 2026 GMT
Not After : Apr 18 06:00:23 2026 GMT
Subject: CN=fbd2cbe02473b9445aeb38067499083376d8a677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:aa:7c:19:86:9d:91:e8:a8:4a:25:0a:9f:
63:c9:a3:1c:cb:d8:6f:d3:dd:aa:05:8a:a1:94:73:
8d:6e:10:68:eb:07:16:62:d8:46:a3:a8:c2:f2:4a:
53:ad:a3:fc:84:6d:54:1e:ac:25:ae:4e:52:fc:15:
ab:ff:b5:5d:2f:ef:5c:4d:a9:81:c2:60:d7:28:ed:
ba:dc:81:4b:7e:3f:07:87:ff:1f:b0:3c:bd:8b:46:
88:c8:9d:cc:fa:63:71:56:ff:44:b8:59:26:6b:a4:
81:fb:5c:3b:9b:e9:6e:e6:f3:69:91:8d:0b:91:71:
9e:91:ef:8b:90:b1:fb:2f:f3:3a:eb:d1:b6:19:a9:
b1:5d:4a:e8:16:81:02:1c:0f:ad:1d:06:b2:9e:61:
15:30:27:6d:88:db:68:5c:41:47:25:ff:87:7c:ac:
79:be:e6:fc:dd:49:90:47:e9:7f:43:be:f7:27:bc:
b1:1c:f4:cb:a2:a5:db:6c:4f:9f:b2:77:0a:69:af:
a8:1f:10:3c:fc:9c:e5:c7:f1:3f:27:30:95:65:89:
34:79:e5:7a:87:94:f5:9e:5e:b5:1c:e1:47:db:1a:
a5:7d:58:5e:20:e8:47:ef:95:09:5d:82:92:0f:0d:
a5:de:55:35:03:8c:e0:20:fa:fa:7b:87:50:f3:22:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D2:CB:E0:24:73:B9:44:5A:EB:38:06:74:99:08:33:76:D8:A6:77
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:ed:14:93:8a:a8:44:a1:a4:bd:02:24:09:81:b5:b9:1b:
c7:cc:fa:23:d0:09:d8:9e:72:0d:4e:87:8b:d5:ac:2a:7e:e8:
da:a8:77:59:29:27:e0:ed:60:cd:94:2e:41:36:a9:02:ac:63:
6b:94:4a:e6:04:40:3c:7b:5a:21:bc:76:e4:2d:c8:35:0d:c9:
a4:d0:ad:3f:8f:eb:2d:7e:62:eb:da:73:48:c0:5d:0c:3b:e4:
33:4f:57:fe:cf:15:04:aa:fb:82:b8:ff:e7:c9:80:0a:0e:32:
d6:bd:a1:c8:8c:e2:c9:96:3c:20:e6:6a:de:2c:4c:2f:2d:a9:
0c:e4:48:fc:98:1d:74:0e:7d:bd:e4:e6:d6:0a:4a:d5:56:6a:
2c:d1:49:05:dc:e6:8a:92:5f:53:c7:40:fa:f4:dc:fd:d4:1c:
ab:4b:63:d8:93:14:e3:76:7a:70:6b:96:62:65:9e:a4:79:ec:
06:76:5c:b7:29:d2:4c:26:8a:cd:48:bd:14:4e:a8:81:87:2a:
73:57:7e:a0:63:8c:b7:bc:8c:91:d0:fb:4b:df:39:5a:a6:41:
36:32:e3:16:55:47:72:d7:b4:11:e4:7b:e7:a7:d0:a2:31:37:
8d:5b:96:d1:f1:50:ae:90:71:dc:60:ae:24:86:66:2c:79:83:
fc:e6:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:27:10 2026 by rpki-client