Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: fL+DCsf0yf/mlH4ROwyPnP/MiNlwN8Jzbe6cbMpOS14=
Subject key identifier: 2E:89:06:93:11:3F:2B:35:5D:F6:40:80:91:93:B6:3F:C5:BA:FE:77
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019D9A3E374BA84891DC9E9E024CA0BF3B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 0745
Signing time: Fri 17 Apr 2026 07:01:01 +0000
Manifest this update: Fri 17 Apr 2026 07:01:01 +0000
Manifest next update: Sat 18 Apr 2026 07:01:01 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: lWj9KyXNPA/9tc9kuGkBQnw/RVvQzg+htHFpjSeDIBc=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: uhmE3at76dYLrtDiQbzMepv_16I.roa (hash: /LKq8mUsMWaHICUc9KVgvqVuRJ8efqGttlCEBaJ+7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:37:4b:a8:48:91:dc:9e:9e:02:4c:a0:bf:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Apr 17 07:01:01 2026 GMT
Not After : Apr 18 07:01:01 2026 GMT
Subject: CN=2e890693113f2b355df640809193b63fc5bafe77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:d3:67:27:65:6c:87:53:34:83:a1:31:8d:
5b:2e:e1:3f:5d:43:3a:2d:b0:e1:a9:7b:94:07:5b:
14:b2:b2:a6:d1:84:92:9c:89:56:87:ff:60:4e:23:
5c:e6:b7:5c:3d:1c:88:ff:73:39:c8:5e:3a:55:d4:
ec:f9:67:59:c4:96:02:34:c6:5d:9d:cd:68:e7:d5:
90:20:d9:42:e2:1e:dd:cb:56:ce:5f:17:10:ac:cf:
51:0c:e7:aa:0c:9e:d4:08:da:f5:c1:2d:27:20:f0:
c6:71:62:53:41:e6:9c:7d:dd:da:c8:e1:5c:10:1d:
11:6d:8f:c8:a7:02:bd:51:05:63:ea:c3:ea:f0:09:
b1:12:63:c5:68:85:96:22:16:d7:52:02:b7:64:07:
89:ee:f7:06:06:e9:6a:55:84:90:59:b0:16:4a:24:
25:39:32:8d:98:73:bb:24:9a:13:d4:76:fd:56:19:
93:91:87:80:26:26:bb:bb:32:3f:d5:3d:de:3f:a7:
0c:23:7c:39:0a:2a:0d:3c:a0:81:3c:ab:e8:02:09:
b2:ff:b9:56:cd:41:d9:be:b1:46:bc:b7:a8:73:45:
e8:63:8d:f9:f8:d0:6a:9b:bd:8c:42:b8:dd:5d:76:
63:0b:06:4d:5c:8e:17:91:9b:f1:76:d8:56:94:b9:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:89:06:93:11:3F:2B:35:5D:F6:40:80:91:93:B6:3F:C5:BA:FE:77
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:62:00:be:c0:59:4c:68:f1:7f:53:74:38:10:23:b8:9a:
29:f0:04:ed:03:a9:92:69:3f:64:2c:41:4d:e2:9f:c3:37:19:
c7:2b:61:04:21:89:a7:36:67:8d:dd:0a:b7:77:64:92:24:6b:
94:a2:9d:21:b5:a3:32:07:67:93:65:2f:84:ac:a4:31:2e:26:
36:02:28:7d:b1:29:23:9f:25:54:f2:44:88:e3:59:eb:84:02:
6e:7e:04:83:14:6e:d1:55:a2:66:8d:95:1d:b0:82:0f:81:be:
52:5e:4d:23:15:9e:c2:e3:cd:a6:22:6f:9d:4d:b1:62:8a:05:
45:ce:fd:ef:27:d3:14:7d:d8:25:c5:38:a2:75:9f:d6:53:53:
9f:f4:94:f1:73:db:df:19:2d:ba:5a:5a:40:a8:ed:2c:3f:7c:
48:4b:6f:ff:54:e7:f1:27:d7:52:72:8c:00:31:cc:8d:1d:63:
ae:fa:09:19:28:88:c1:b4:12:f9:35:c8:c0:d9:62:8f:c6:a9:
45:2e:7c:22:0e:90:5f:24:00:dc:82:5d:fa:bd:da:77:37:cc:
57:2d:a5:ff:31:de:01:4e:34:12:75:51:da:dd:b9:84:86:77:
9d:b4:70:c8:2c:55:a9:34:bd:a1:c9:d6:62:eb:fe:1c:6f:4f:
16:d2:34:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:26 2026 by rpki-client