Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: gRO9uc9VW9cZnQlpc0u2LjKEBd9ul1aALRskYvOsNV8=
Subject key identifier: 6F:E9:44:3A:51:5B:D4:F1:60:63:15:F7:E3:26:DD:E2:F3:72:C0:39
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 019D992B434A435A9D436AE418AD7DC34A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:42 +0000
Manifest this update: Fri 17 Apr 2026 02:00:42 +0000
Manifest next update: Sat 18 Apr 2026 02:00:42 +0000
Files and hashes: 1: VQMozEw5e5cFbAbax7TNnFtChpk.roa (hash: kcI4JK6ZQqSjrwXa7nCut12JkcTP0x/T3dN3B6kDSUw=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: /X8Z+xestbCVDlHq8Qp7z68PLP/Ppfs0YxFMzuhHifM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:43:4a:43:5a:9d:43:6a:e4:18:ad:7d:c3:4a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Apr 17 02:00:42 2026 GMT
Not After : Apr 18 02:00:42 2026 GMT
Subject: CN=6fe9443a515bd4f1606315f7e326dde2f372c039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:a6:3b:ce:36:53:92:d0:ef:9b:1c:10:71:
55:48:25:cf:71:92:d7:f5:f7:19:bb:95:04:40:c8:
a8:3c:9d:b7:26:64:c2:9b:20:6f:a0:88:83:7c:2c:
58:0a:d4:85:ae:dd:49:54:51:bc:2b:1b:8a:54:88:
d5:68:06:e3:01:7f:bf:ef:2a:b1:22:57:87:bd:8a:
a9:33:6c:e0:14:87:33:d7:c5:d3:1f:a9:05:09:9a:
2a:70:0d:7d:04:31:4e:cb:84:3b:3b:c5:e3:f6:7a:
80:65:29:b3:e5:dc:9c:07:34:c1:8a:23:73:af:b0:
07:4d:9c:13:7a:80:ce:bb:72:2e:5d:29:b9:d6:76:
76:35:00:bf:53:77:5a:a1:30:5f:e8:ed:31:bb:9c:
6b:80:06:e7:4f:5f:53:f2:f0:91:38:b8:27:30:57:
a3:e6:e1:06:13:22:4b:10:91:49:f3:00:c1:7b:6f:
90:1c:c8:3a:c6:28:e1:6e:5e:b4:aa:cd:8c:e5:21:
6a:b7:1c:e4:8d:bc:5b:5d:59:9c:f4:1b:71:eb:ea:
3f:b7:ed:3e:1f:b8:13:4f:b8:01:cb:2b:63:0a:90:
24:f3:fe:c5:fb:89:55:62:d0:51:27:d3:7d:32:e4:
2a:f6:12:21:a3:43:ce:7b:44:e9:1b:09:d0:e9:4b:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E9:44:3A:51:5B:D4:F1:60:63:15:F7:E3:26:DD:E2:F3:72:C0:39
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6e:0d:55:5d:c0:ee:21:1c:e3:e5:3e:e0:02:af:d5:ba:43:
2f:c7:81:25:56:c6:0f:91:d6:e9:6f:84:a6:b5:d8:77:41:34:
a1:c9:a3:96:40:ec:54:db:b6:d2:be:42:2a:dd:26:b1:8e:5f:
30:8e:cc:56:e6:77:7d:51:e0:f1:7c:b4:27:af:e7:80:67:8a:
24:71:64:53:55:61:ce:cf:51:f3:2f:80:d4:52:2f:d1:61:09:
fd:c4:e2:e1:78:96:20:91:6a:b3:4e:c8:78:18:24:25:37:e8:
15:34:61:3b:26:13:99:fc:23:34:fa:d8:45:2c:63:ed:33:42:
ee:a2:a5:f4:8b:c2:61:20:f5:5b:03:e6:ba:1c:5c:5f:99:e6:
ff:fc:70:d5:7d:1d:02:44:61:c1:f2:13:cf:68:a1:6b:33:de:
91:aa:9b:bb:13:22:14:a5:47:9d:a9:47:e7:93:64:5d:9d:9f:
27:d8:36:c4:ad:f5:1c:21:25:ea:56:9e:da:75:9d:ae:02:fa:
50:08:64:34:b9:ac:ef:e4:4a:2d:c2:e1:19:4c:69:bb:28:4a:
62:14:d0:3f:50:ae:83:71:1f:74:7b:48:eb:36:7a:b4:07:65:
0a:69:20:85:7f:76:5d:2a:d8:53:b7:5d:99:dc:a9:fb:d6:56:
1e:72:07:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:20 2026 by rpki-client