Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: sK7UEvH0cWOV4ohrtjtqcnek9RV5ZJ4LyjSsloaYrsY=
Subject key identifier: 9E:1F:28:C4:49:DD:1D:C8:79:E5:84:42:F2:61:B2:C9:37:1A:34:C0
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 019D996245BEF78080F3B4BC4CC2DF8E2D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0F81
Signing time: Fri 17 Apr 2026 03:00:47 +0000
Manifest this update: Fri 17 Apr 2026 03:00:47 +0000
Manifest next update: Sat 18 Apr 2026 03:00:47 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: E2Poe4wUcGWULYTAJ3AJEp7eu73gavytGUyeqyqPbPU=)
2: pUvKtFdAlsMAiyEbWzX8FfKf3Zs.roa (hash: mTXSXjoGjQ2auSz+bUbQx6Ihly9Sl/4nc+Gp/ABHXAA=)
3: qV4gR6WxquLOT56bwfJU7xHJRNM.roa (hash: n0V/wW/NrF8CEjksLZ9W1qLNO23nhbEeWjftcQzvrnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:45:be:f7:80:80:f3:b4:bc:4c:c2:df:8e:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Apr 17 03:00:47 2026 GMT
Not After : Apr 18 03:00:47 2026 GMT
Subject: CN=9e1f28c449dd1dc879e58442f261b2c9371a34c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:c0:c6:f8:d1:77:54:00:24:ef:46:67:7f:
c9:ff:d5:2c:a9:89:8b:5c:80:8c:8f:0d:d5:63:6c:
e2:cf:4d:e2:99:a9:7c:3f:6d:18:2b:13:6f:b5:d0:
8a:ec:dd:cf:5e:50:4f:3a:34:53:f9:74:b1:ed:db:
12:1d:17:92:bc:38:a4:d5:48:b5:86:56:9c:ad:d2:
29:75:94:d9:50:ab:eb:e0:f2:bb:75:d0:83:95:29:
36:4b:e4:22:e5:59:5c:98:6e:cc:9d:89:5f:af:ec:
1b:f5:74:3c:3c:cb:b1:ce:47:7a:79:1e:30:51:97:
b2:5c:04:84:53:53:d9:b9:36:18:d7:f3:64:a6:c9:
bd:e0:1b:1a:07:5c:15:02:3f:8e:09:4f:78:79:68:
d9:bc:7d:fd:e6:72:0d:1a:ef:90:00:da:26:98:28:
9a:51:0d:79:6f:e9:35:26:9f:64:a0:4a:ca:da:13:
40:94:5d:d5:6a:19:b1:8b:af:42:e8:27:5a:e4:8d:
1d:49:5b:78:77:ee:2f:5d:9f:35:47:cc:58:ea:11:
f0:9f:f5:1d:5c:f3:54:c1:4d:b1:ad:ad:67:06:75:
94:d6:4f:12:65:b3:34:f8:42:67:c6:68:b2:a1:c5:
8b:46:0e:06:e6:19:66:54:2b:61:1a:94:d6:4f:f9:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1F:28:C4:49:DD:1D:C8:79:E5:84:42:F2:61:B2:C9:37:1A:34:C0
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:10:bd:8c:00:f8:71:ad:6a:ea:ce:f7:cc:a3:2c:62:41:ee:
ee:7d:48:a0:cc:c2:07:36:ed:79:0c:94:09:91:d0:4b:ab:44:
b4:cb:e0:fc:dc:c7:14:10:62:1a:32:b6:dc:83:40:9d:db:ed:
b2:65:d2:e5:58:4d:45:8c:14:5d:28:cd:8e:93:13:86:77:a5:
db:49:3c:c0:d5:40:8c:f8:70:0f:ab:95:6e:55:a8:6f:8b:47:
ff:25:96:9c:87:f9:2b:6b:0d:a3:b7:6c:17:08:35:44:36:95:
11:60:01:68:83:d0:d0:b7:ae:84:26:63:e4:db:8b:2c:9a:4f:
79:ee:78:e4:b9:f4:c3:4a:69:63:f9:61:6e:28:f7:f0:ce:70:
1f:fe:89:ba:b9:dd:0d:96:ad:54:84:49:9b:40:44:05:3e:63:
1f:79:18:c8:6b:05:8e:97:cd:e7:8e:f8:d5:15:7e:ed:5b:65:
d4:e5:58:9a:54:fb:48:8a:61:90:8e:c1:ac:24:11:6f:11:da:
18:24:9b:3d:b7:1e:f3:6a:a1:57:54:42:9e:1a:43:51:f4:e6:
25:5c:b0:43:13:d0:f5:c0:d5:a6:d9:86:34:1d:36:4c:5a:52:
7d:78:5f:e1:6d:02:5e:3f:17:15:d4:aa:ed:63:33:52:5e:75:
14:8d:fc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:34 2026 by rpki-client