Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
File: qmVRVhfXd7VhHdDgs9ACU-oymgc.mft (raw, json)
Hash identifier: mBX9BO3ueGC5umg4XklP12F+UZiZWK1ImLCHbqrmfwk=
Subject key identifier: 0F:E5:1C:CE:04:1A:0F:C7:57:74:EC:B5:5B:0C:29:E0:7A:02:6B:D0
Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Certificate serial: 019DA4F9375717EB884A49A81E517B436899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
Manifest number: 017F
Signing time: Sun 19 Apr 2026 09:01:29 +0000
Manifest this update: Sun 19 Apr 2026 09:01:29 +0000
Manifest next update: Mon 20 Apr 2026 09:01:29 +0000
Files and hashes: 1: qmVRVhfXd7VhHdDgs9ACU-oymgc.crl (hash: EaKl/RpuvkfOm3P6j/IZLmecy5V14hHkgA5syhkr0VM=)
2: w9_9phOVfcIB0arXvZjOg3oe-Gk.asa (hash: rpPL3WEh5ip5RqGHVPKSVlccVtUT14qZLk2GgYWP78M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:37:57:17:eb:88:4a:49:a8:1e:51:7b:43:68:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Validity
Not Before: Apr 19 09:01:29 2026 GMT
Not After : Apr 20 09:01:29 2026 GMT
Subject: CN=0fe51cce041a0fc75774ecb55b0c29e07a026bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:65:7f:d5:9a:60:65:0b:ed:63:ba:8e:4c:
f1:c9:a2:c8:66:dd:e7:be:7c:1a:e8:fd:3a:1a:bb:
35:76:29:4f:3d:f0:cc:eb:1a:27:70:c3:ce:30:97:
e2:22:11:d4:ae:ef:52:aa:ce:2b:28:86:69:2b:70:
be:f0:88:5d:1e:b7:2d:87:51:c3:8d:41:96:86:cb:
a0:18:a7:7d:21:67:e8:24:b0:d4:fb:00:f3:01:45:
b6:f3:d0:c3:8a:06:22:51:04:b1:45:1d:5b:f1:b7:
99:2d:93:96:60:16:54:50:74:82:c0:3f:0d:22:3f:
0f:33:bb:49:20:44:59:2c:33:14:60:30:47:bd:0b:
2f:7c:7b:77:af:31:87:b1:c6:94:05:ed:c9:de:ce:
99:93:c2:47:cd:cc:f1:75:1b:ac:ed:dc:1e:21:3e:
43:81:b4:72:d3:99:a7:02:31:9a:54:21:38:48:44:
c1:69:13:5c:f0:c6:32:34:70:c4:89:2b:b3:34:a3:
05:59:79:24:f7:4e:7a:fa:5e:89:d4:6d:35:28:92:
46:54:9d:9e:46:28:28:fe:4c:08:77:4d:48:82:f7:
78:d6:46:f1:a1:35:17:b1:f9:4c:23:0c:35:6d:2a:
17:bf:c4:23:3a:68:ea:b8:7e:43:74:5a:86:0d:c5:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E5:1C:CE:04:1A:0F:C7:57:74:EC:B5:5B:0C:29:E0:7A:02:6B:D0
X509v3 Authority Key Identifier:
keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ea:e2:4b:ac:5c:9d:61:a3:3a:03:1d:33:fa:18:8b:63:a7:
a7:f3:9e:ff:f3:21:e7:49:d7:5f:70:ba:1f:6a:13:da:bc:bd:
e5:55:c5:7d:d6:74:cc:3c:ec:02:1c:c7:66:5d:9d:83:09:c1:
6d:2c:92:26:cd:d9:05:1f:5b:31:84:fc:81:2d:04:a3:49:80:
e5:fa:43:93:b0:5f:b2:19:a1:34:08:00:3d:a9:8f:0d:ca:af:
e8:a2:b8:d6:04:63:10:3a:24:ba:ef:54:ca:32:8d:21:a4:b4:
c7:c8:a4:59:17:7d:5b:cb:b8:1f:e5:2a:27:5d:f2:43:b7:f0:
ac:5f:05:b0:93:44:b0:c3:e5:9e:5b:62:0d:15:97:2c:69:9b:
58:c4:eb:e5:25:39:09:ca:0a:a7:1d:17:50:f9:6a:53:a2:b9:
fa:d9:cb:ff:53:35:55:55:bc:61:37:82:53:aa:5c:35:9a:dc:
69:06:32:37:96:bf:44:96:90:fc:b3:10:ea:d0:97:1d:59:3a:
6a:a3:ba:57:0c:50:6e:24:de:c3:7c:97:37:19:5a:87:21:a5:
8d:24:1d:19:4a:26:6f:4d:19:bf:52:55:fd:fd:0b:c3:78:65:
83:e0:5f:61:66:4f:84:85:bd:a5:95:19:45:f7:02:8a:be:fe:
ab:b5:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:17:43 2026 by rpki-client