Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
File: qiIvVnO4KKeuUvmboMYqzXCXSjg.mft (raw, json)
Hash identifier: 5A0AVRaE36FFr+FE/lcwraEMF17111yGM5G1EC0/pak=
Subject key identifier: D8:F5:B7:F9:21:E6:F3:C7:63:C9:61:21:B8:87:67:22:A1:B5:F2:71
Authority key identifier: AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
Certificate issuer: /CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Certificate serial: 019D9A0757409E75351CE1B5BB50ED7E29E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
Manifest number: 05BD
Signing time: Fri 17 Apr 2026 06:01:05 +0000
Manifest this update: Fri 17 Apr 2026 06:01:05 +0000
Manifest next update: Sat 18 Apr 2026 06:01:05 +0000
Files and hashes: 1: 9AVYlnVDy_5NTBGvlnnPZPWKT8U.roa (hash: N+NhjHfDEfFXjTSJhobVC2Q1bhjazURhKTdBJKZj/zM=)
2: qiIvVnO4KKeuUvmboMYqzXCXSjg.crl (hash: Z4yK1Lg2yN2pypKT4isTXwG/lnloNvZziv5sFcCMT5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:57:40:9e:75:35:1c:e1:b5:bb:50:ed:7e:29:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Validity
Not Before: Apr 17 06:01:05 2026 GMT
Not After : Apr 18 06:01:05 2026 GMT
Subject: CN=d8f5b7f921e6f3c763c96121b8876722a1b5f271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:5c:04:3c:62:49:6e:31:0c:bb:f5:70:85:
dc:c6:5a:e1:b8:26:e3:bd:76:33:bc:9a:e4:db:45:
19:ed:f5:6d:ad:d9:2b:d6:1d:74:57:37:78:18:67:
ff:75:9d:b0:50:9d:72:96:8b:be:37:92:0c:d3:8f:
9e:52:01:2f:0f:d7:43:a1:c1:87:31:1a:8b:b6:cd:
57:c1:53:b3:81:3c:58:f9:39:33:6b:ce:eb:c1:ea:
a1:80:9e:ed:4c:be:7a:32:93:59:2a:ea:c3:d5:88:
ec:aa:98:3e:63:52:4d:51:36:9f:0c:05:1c:e3:35:
54:a8:1b:c2:a6:54:54:ad:6d:51:aa:54:a1:8f:89:
35:dc:78:fa:81:a5:b0:16:52:89:51:2b:63:42:00:
33:d7:75:f9:f5:80:32:47:04:90:0d:6e:20:e3:af:
30:23:c9:05:e1:4a:4e:e3:83:24:2e:c5:ff:83:d7:
db:4d:da:64:ca:c3:28:55:67:98:10:33:b5:11:2a:
b9:cb:0c:2e:d1:84:b8:32:f2:47:ed:e0:fb:f1:af:
09:4e:27:13:b3:d8:77:67:2e:86:18:33:c0:6d:c4:
5e:f7:79:c6:02:f8:87:e9:fb:46:57:4c:5f:6a:17:
6a:b7:e0:38:49:d3:23:90:0d:bb:32:10:4b:de:3b:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:B7:F9:21:E6:F3:C7:63:C9:61:21:B8:87:67:22:A1:B5:F2:71
X509v3 Authority Key Identifier:
keyid:AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c0:b9:01:fc:1a:93:79:a7:56:6b:3a:87:35:39:ea:b6:8f:
38:6f:cf:62:e2:38:9d:02:c2:a4:33:95:00:ba:b4:f1:90:c7:
b4:ff:0c:34:a3:cd:d2:78:9c:31:cd:e4:22:88:0b:27:1d:89:
34:19:8d:16:56:80:08:36:e9:a5:bc:06:ed:28:c9:d7:27:85:
6e:eb:a5:17:9f:46:c9:32:0d:cb:22:04:6e:62:03:3a:77:36:
27:60:74:2f:b0:6e:8c:dd:37:73:99:09:9d:a1:80:d0:f0:0e:
25:80:e8:ad:3e:6d:c4:44:13:1d:ff:bc:49:eb:3e:20:74:73:
4e:6e:17:aa:90:e2:83:89:59:ef:67:97:5d:05:b3:0d:8f:d4:
71:5a:ff:f1:bc:5f:b6:9a:24:b5:1e:23:8c:36:00:8f:e4:cd:
4e:bb:93:1f:3c:a2:83:0c:15:70:7f:90:0b:ed:da:e7:62:81:
60:8f:88:f5:16:a4:79:7c:81:99:50:ad:f2:1f:59:9a:93:6b:
eb:08:9e:05:ae:38:e8:71:d3:ac:3c:cb:bb:93:e9:02:f6:9a:
48:99:eb:eb:6b:c6:f9:ff:2f:4e:57:16:01:4b:c6:61:9d:ce:
72:5a:b1:ac:5c:60:f8:79:3c:18:71:97:db:0b:d4:9e:01:31:
17:fd:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:35 2026 by rpki-client