Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: qhltkqwbnMWMx76WdfjpM5cGO5/YR1dhjgneGDNCIb4=
Subject key identifier: F1:D5:C8:00:64:35:CE:46:0E:AB:78:DE:E6:5D:B9:04:5D:34:86:F6
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 019D9CD1BB4FD50F77A5B5471583ACD1D42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 0A90
Signing time: Fri 17 Apr 2026 19:01:23 +0000
Manifest this update: Fri 17 Apr 2026 19:01:23 +0000
Manifest next update: Sat 18 Apr 2026 19:01:23 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: LJT1EdeWhZ0F0NA9ZOuzaBYDG0ip6lAkJgGZSRBsCuU=)
2: RhhybVhgxehJpyQFfu1dQiF3RZc.roa (hash: vTXKPtYUm1UxDqfrm9GUHJ6eZM3EZfiTITZU7YFaPA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:bb:4f:d5:0f:77:a5:b5:47:15:83:ac:d1:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Apr 17 19:01:23 2026 GMT
Not After : Apr 18 19:01:23 2026 GMT
Subject: CN=f1d5c8006435ce460eab78dee65db9045d3486f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:ec:c3:d8:06:93:5e:45:a8:7c:e3:7c:88:
36:3c:61:94:a7:ff:04:c7:47:78:98:ee:9f:e5:17:
29:eb:69:4d:22:c5:70:7a:41:1e:b3:80:5c:ff:33:
bd:71:2f:9f:37:a0:02:ef:20:4d:de:a5:9a:c3:24:
d9:1a:c8:34:b6:c0:2d:80:94:c7:70:44:b0:f2:7c:
99:76:a2:b5:ef:3f:53:e8:87:68:19:27:f9:6b:04:
5a:18:d6:d6:7c:d7:fc:08:b3:09:04:18:ce:d5:ba:
c7:6e:10:0e:f6:89:fe:7a:f9:66:6b:ff:0e:9c:93:
8a:ae:96:9b:42:0f:3f:e6:c5:42:ee:3e:de:5c:91:
04:e8:10:84:3c:bc:30:40:76:0d:ce:cd:3d:a4:b1:
59:5b:4b:93:a3:a0:5c:09:66:4e:44:f6:74:ba:25:
80:83:c9:24:21:b2:91:4a:5f:51:cc:ca:d5:fd:0d:
fa:e9:ed:3e:33:1b:e1:19:c3:ea:d8:84:4a:6e:39:
20:6d:e4:6d:d4:08:0a:bb:08:82:f3:e8:0a:6b:01:
1a:c5:7e:75:12:1d:31:04:d9:53:05:e0:71:68:28:
bd:db:85:1c:77:78:1b:30:27:bb:d0:f5:4e:97:05:
d3:02:9c:17:ec:7d:87:5f:d9:28:54:5d:c2:60:86:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:C8:00:64:35:CE:46:0E:AB:78:DE:E6:5D:B9:04:5D:34:86:F6
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:9f:ea:e4:cd:d3:a3:27:61:2e:65:68:c9:cc:26:78:0a:
33:8e:b1:57:76:f9:50:9c:a1:5c:33:69:45:ce:a8:1b:fa:3c:
cb:cd:ca:d2:8f:5b:f3:ad:73:06:6a:84:b8:91:fc:74:4a:36:
a1:4d:66:89:90:c8:3d:76:9a:8b:ef:02:64:90:60:de:ae:4d:
b9:c2:ce:fd:67:a4:f4:18:9f:f6:4d:87:23:4c:9d:4f:8a:38:
24:ec:c5:09:89:9e:84:d8:43:b6:43:59:ab:2a:ca:20:00:c5:
4b:ec:94:b0:43:41:df:12:05:08:8c:c4:f8:af:c8:55:a4:a2:
35:c4:0f:01:0d:25:3b:ab:f8:79:8f:c0:42:0c:35:44:99:c3:
b3:41:50:3b:e9:aa:3c:fc:ae:1f:de:0e:86:8a:d2:59:97:ed:
d0:63:d4:88:14:e7:51:22:b0:94:71:cc:14:1f:da:7f:5c:ec:
5e:0d:68:c0:76:cf:f7:d8:d3:8a:cb:7a:37:ff:1f:a2:74:7c:
91:64:3a:5d:48:9f:2c:55:a6:1b:18:85:1b:7e:6b:68:29:ee:
35:9f:bc:d9:a4:30:bf:2d:b0:bc:61:ef:fb:a0:be:86:d2:21:
25:41:5f:aa:fc:93:22:26:27:90:25:b8:eb:24:2a:a8:ff:f0:
f7:a6:1b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:53:23 2026 by rpki-client