Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: sJ7tjlSYQfaaQqREaEUdcIj6eamW0djTMANTroP48q0=
Subject key identifier: 1C:2B:7A:81:64:71:C9:02:AD:C0:B5:FE:87:82:B0:08:DC:28:A3:9B
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019D9BBEBE66D516AECC5825CEF45584C94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0CBE
Signing time: Fri 17 Apr 2026 14:01:02 +0000
Manifest this update: Fri 17 Apr 2026 14:01:02 +0000
Manifest next update: Sat 18 Apr 2026 14:01:02 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: 6h5BUM8IcXNpGKwfppVaCtrF7xKDgXeBa6A3zNi+N9Q=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:be:66:d5:16:ae:cc:58:25:ce:f4:55:84:c9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Apr 17 14:01:02 2026 GMT
Not After : Apr 18 14:01:02 2026 GMT
Subject: CN=1c2b7a816471c902adc0b5fe8782b008dc28a39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:ee:57:cd:0c:06:09:e0:36:d5:be:1f:ff:
3f:a1:3b:f3:92:29:cd:f8:cf:e3:fd:f5:d4:d6:5f:
8d:6c:46:f9:b6:25:07:80:2e:ec:1c:86:38:ab:6c:
4e:85:de:fe:a8:47:e7:e8:f4:17:09:34:dd:f8:04:
05:66:f4:91:c1:75:06:91:c6:83:cf:5f:b7:b2:7f:
89:db:b0:09:26:4e:18:18:05:7d:62:41:e6:c2:b5:
1f:83:8d:87:64:bd:46:1a:a1:e0:fe:57:d0:bf:72:
35:e9:7c:93:cf:d8:ef:ac:ef:5c:75:6a:02:b5:05:
87:37:7e:50:93:90:5f:a5:3f:77:33:50:79:36:76:
87:e8:7b:25:de:19:c1:87:64:19:a7:d0:fd:2c:11:
3f:9d:a5:74:91:00:bb:28:07:7d:a3:77:18:84:54:
4f:22:04:fe:11:5d:6f:33:59:2a:ac:e9:da:2d:3b:
da:f1:db:8c:38:06:15:72:2c:9d:0a:ad:21:c7:a4:
27:d0:f2:f4:0a:08:76:03:de:af:10:b4:8e:d5:6c:
0f:1e:7e:ba:89:f8:dd:f4:63:7e:9a:da:38:09:1c:
98:6d:6c:8f:08:93:9b:6b:a6:41:ae:4e:4b:7d:54:
6e:28:e2:d0:27:4d:77:9a:89:4e:4c:89:2a:1a:af:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2B:7A:81:64:71:C9:02:AD:C0:B5:FE:87:82:B0:08:DC:28:A3:9B
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:55:dc:de:25:4d:78:d7:9a:96:86:fb:4c:d3:79:a6:4b:81:
19:b3:96:80:a3:41:f4:fa:67:92:a4:c1:86:68:a6:b5:25:23:
6b:3e:c1:67:5a:c3:03:24:b5:ca:67:5d:c0:99:ea:ca:8d:85:
55:30:83:86:51:28:1e:59:9a:45:39:12:55:b0:05:06:40:8f:
f0:3b:f3:44:d1:81:ac:38:fb:21:22:4f:7d:d7:d1:1a:e1:3a:
09:3a:28:92:eb:d4:c7:65:73:77:66:a5:6b:36:78:b1:61:40:
e6:0a:5e:75:6c:7f:80:5a:88:1f:43:77:35:b1:ff:8c:ec:1d:
59:6e:d1:80:2c:d7:61:ee:1f:85:3c:1a:0e:55:04:6f:cf:b5:
30:61:77:07:da:be:68:77:ae:5d:44:9c:ec:ec:7b:b0:a8:9f:
ed:8f:db:08:28:03:7d:11:b3:db:8e:12:17:5c:dd:19:88:27:
6e:56:ef:c0:96:dc:5d:55:73:56:d9:76:05:86:3d:70:ec:bd:
f3:93:34:b0:17:19:2c:e4:cf:0d:76:84:78:fc:37:2a:70:7d:
8a:1b:d9:20:b3:e7:ea:db:ef:61:54:05:c8:ec:45:11:bd:6c:
1f:ab:e2:93:7a:2d:a7:04:ea:ee:55:56:2a:72:80:2f:2e:ff:
01:83:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:06 2026 by rpki-client