Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier: bSanoBGz2Uvj92GxahbEtysHGeCp7UQyMIdQn8q27hI=
Subject key identifier: F5:C9:F0:B1:05:E5:0C:B7:5B:8C:DA:9C:79:26:3E:A9:84:E1:AF:E0
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019D9B875F2131FFF42774CFB71BE5CEC427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number: 0CAE
Signing time: Fri 17 Apr 2026 13:00:33 +0000
Manifest this update: Fri 17 Apr 2026 13:00:33 +0000
Manifest next update: Sat 18 Apr 2026 13:00:33 +0000
Files and hashes: 1: CzW4u1rrcKCYl0G03vqU8cBXz94.roa (hash: /yz/XIWJQxzaieHj+TVvT11gZyxGejhib5PYK9y3aXc=)
2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: nRRgvBHsRv+eQ5IF6uJTUnfcn9VPEHkZpNky/JLmRcM=)
3: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:5f:21:31:ff:f4:27:74:cf:b7:1b:e5:ce:c4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Apr 17 13:00:33 2026 GMT
Not After : Apr 18 13:00:33 2026 GMT
Subject: CN=f5c9f0b105e50cb75b8cda9c79263ea984e1afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:58:85:b9:7a:44:7a:45:44:4a:cd:c8:67:
6a:64:d5:78:28:06:13:23:fe:a7:16:d1:46:87:40:
33:54:d0:93:24:c8:ce:96:0c:88:f5:5c:ed:c7:00:
0b:57:e1:35:ee:0d:5a:d5:55:3c:04:96:26:19:a6:
40:3e:5d:42:83:86:3a:57:eb:de:83:75:a7:fe:b0:
08:d0:b5:d9:12:d5:f4:2d:1d:fd:3f:57:ff:aa:70:
36:1c:da:cb:e6:74:77:93:ad:66:35:79:d9:7c:e3:
5d:a7:0d:31:cf:72:af:8d:31:fe:54:c3:53:88:39:
b0:05:01:6c:b9:fd:fd:23:6a:3f:7c:ec:67:a5:40:
cd:81:20:73:37:5a:6a:3f:cc:5f:a0:ec:a5:b2:1c:
b5:be:c1:40:d1:73:80:dc:51:3d:b2:1f:63:54:f2:
5e:43:cf:d1:6d:64:b9:1d:37:f5:15:e8:33:0d:23:
45:81:5b:f5:e7:32:5a:9c:4f:ed:8f:c3:8f:15:e9:
d2:29:64:41:d2:29:4c:7e:a2:b7:e0:12:66:4a:1d:
e8:a5:53:ca:93:7f:08:7b:27:b2:2c:ad:c8:46:ef:
21:2b:fb:c8:24:f1:63:fc:ba:bd:e5:07:91:2a:3b:
4e:08:b0:e8:81:5d:37:b4:17:0f:52:ba:10:5e:ee:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C9:F0:B1:05:E5:0C:B7:5B:8C:DA:9C:79:26:3E:A9:84:E1:AF:E0
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:80:9d:d6:02:42:3a:80:e9:7d:fc:56:21:94:aa:a0:1c:8e:
b7:b6:30:99:46:b3:3c:30:ef:88:df:f0:60:66:5c:d0:8d:cd:
28:63:d7:2b:5c:67:c7:c9:ed:ea:33:8f:59:bd:eb:7b:f2:6d:
66:51:f1:15:ba:c7:5a:9c:9f:c1:4f:37:54:b0:a1:e9:97:21:
62:b4:fd:d3:e2:c2:ea:29:0b:46:37:7f:f7:78:37:ce:d1:9f:
c0:1a:ac:dc:1e:4c:83:93:24:33:15:19:94:fa:27:7b:c3:42:
85:f1:9f:ff:16:1a:77:e0:bf:4a:e9:03:6f:a5:f5:36:04:93:
37:b8:d1:82:98:44:71:e1:b9:50:d1:62:3e:72:9a:61:b7:ea:
d0:32:b8:98:09:5f:31:35:0e:f7:e2:b2:b7:42:b0:a4:4e:75:
59:ab:b6:35:70:cc:04:27:05:de:38:dc:19:27:ff:d2:aa:69:
84:21:dd:1e:4c:4e:5a:6c:1f:c9:15:c3:d5:68:49:5b:c1:93:
52:d5:82:1c:57:a9:76:f6:9c:89:b0:18:87:33:d2:b4:11:69:
90:a5:26:0e:c6:dd:ae:6f:d3:fd:32:ac:7a:74:8d:03:c3:bd:
e5:f4:62:59:c1:99:26:d8:b5:16:c0:57:f3:90:49:f7:54:d9:
92:21:c2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:10 2026 by rpki-client