Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: XWj/o6i9zr9aOCYvd0GdVyT3ltZFSyk10nhYMy3buiQ=
Subject key identifier: E3:89:8B:72:4E:30:D3:B5:E7:2E:41:59:5E:84:5F:B2:DB:90:E3:3C
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 019D9962A34FA264A17583F45805DE20792E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 1255
Signing time: Fri 17 Apr 2026 03:01:11 +0000
Manifest this update: Fri 17 Apr 2026 03:01:11 +0000
Manifest next update: Sat 18 Apr 2026 03:01:11 +0000
Files and hashes: 1: NQ75nb1-xJ7HIs6FdHfLr_Qn5o8.roa (hash: 0/Ed5GPxhq59pa7mSV6ONsdGXpQguRmYVeDEeOnkcHU=)
2: PXrC0OWTvC3oDvSMYzCzL7Vl-uQ.roa (hash: 2Ri2mgKyHMUEf2CJlFmGd9Z/Z2goUwzz5lX8kmekZSA=)
3: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: xgR2Ia3y6mAZQfYlTdkuWUGo3WJeW/i5FfXH/I3Ff7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a3:4f:a2:64:a1:75:83:f4:58:05:de:20:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Apr 17 03:01:11 2026 GMT
Not After : Apr 18 03:01:11 2026 GMT
Subject: CN=e3898b724e30d3b5e72e41595e845fb2db90e33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:85:41:66:8e:be:77:57:b3:0c:8b:12:e6:
78:dc:fa:2f:73:f4:35:cb:62:82:91:54:05:7b:d4:
65:b9:17:fa:04:df:c5:35:d1:1f:bc:96:78:9c:ee:
b7:b0:f7:3c:27:e7:c2:f1:81:f6:ba:1f:4a:89:fc:
c5:84:f2:bc:9f:78:21:32:f5:0d:03:8e:11:3f:99:
b0:28:db:cb:66:df:1e:ff:4f:b9:c4:6c:e8:1c:8c:
fd:39:9d:53:52:43:69:4f:7e:28:94:2c:ff:17:8a:
b2:31:54:5c:b5:88:d6:2b:bd:c2:49:4e:dc:42:0e:
cd:e1:76:73:eb:a2:4d:e0:e0:75:78:1f:d9:ce:2f:
d0:8a:e3:ea:c3:5a:9b:bc:5c:b2:4e:84:c7:3c:84:
5f:fe:d1:73:f1:eb:42:19:22:7d:1e:e2:1f:48:24:
a5:df:45:c1:f9:d6:26:89:9e:da:bc:6a:87:ab:7f:
a7:8c:1a:ae:c9:96:71:5d:c5:9c:50:74:ec:3d:bc:
8b:58:a1:32:af:8b:f4:98:fa:00:e5:f0:b1:e3:72:
79:21:29:9b:dc:ef:60:45:42:46:c1:a1:84:d2:fb:
a6:33:ec:5e:02:67:25:70:ac:2c:8d:4e:0a:5f:63:
3c:3e:c3:ad:9f:60:e1:31:7a:9c:f5:b5:db:8f:a4:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:89:8B:72:4E:30:D3:B5:E7:2E:41:59:5E:84:5F:B2:DB:90:E3:3C
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:40:1b:6c:4a:9a:e7:8c:c5:6e:75:96:0a:7d:c0:ac:45:bf:
28:56:42:98:d1:2a:c0:4b:92:06:0a:10:aa:d1:fa:60:a9:94:
c2:10:c0:ab:33:eb:69:88:d9:f1:65:15:5f:eb:1b:4f:e0:46:
12:9e:c1:72:0c:1a:d9:c8:c3:b9:e1:bb:e8:e1:cd:d5:1b:79:
49:29:e6:b2:4b:4c:3e:9e:70:eb:0b:26:6e:1a:70:e7:e9:7a:
15:17:b7:7c:d3:11:eb:88:9d:c2:3b:ed:fe:70:06:c0:ae:ac:
1b:53:40:39:d6:c2:92:aa:9f:f6:86:df:54:c4:55:9c:2e:06:
4a:b1:43:d3:4a:47:fc:61:16:03:56:30:5e:3c:80:66:13:cb:
6d:20:4a:a8:73:1a:97:4a:66:7a:8f:32:f6:e7:30:f2:4c:9b:
1d:56:cf:55:fb:4e:a6:1f:69:09:f8:fc:86:f2:f3:90:e2:4a:
5c:59:7a:89:43:e5:24:a1:66:21:04:64:94:8a:a5:2e:fa:e4:
a1:b3:37:f5:61:10:37:1c:a7:87:e9:b5:42:c9:15:fb:48:d6:
bf:50:69:bf:ba:7c:f6:e0:cb:67:b4:52:8e:9d:8b:3a:59:5c:
b8:7a:11:8d:37:fa:90:ab:c8:ca:14:36:06:ba:1a:8a:fb:14:
e8:93:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:10 2026 by rpki-client