Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: vyTfvejUpmoUyASi4/Rq2CC3UIFrAycQ0Rip5/AIJkg=
Subject key identifier: A2:1E:05:EF:02:C7:65:69:31:CE:BE:E4:41:1F:8C:EA:7D:01:32:31
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019D97E1F38634C5B4577BFAF9EBD8B2ECEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 20:01:00 +0000
Manifest this update: Thu 16 Apr 2026 20:01:00 +0000
Manifest next update: Fri 17 Apr 2026 20:01:00 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: 6DS96K8DKh3Guvqn4VyE/PFyBa6MzjBPTfwMie5Ea3U=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:f3:86:34:c5:b4:57:7b:fa:f9:eb:d8:b2:ec:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Apr 16 20:01:00 2026 GMT
Not After : Apr 17 20:01:00 2026 GMT
Subject: CN=a21e05ef02c7656931cebee4411f8cea7d013231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:c1:94:18:b8:0a:1a:54:1f:2e:98:2f:bf:
a4:d3:10:84:ce:d1:88:4f:cf:6f:e6:b8:f9:79:3a:
d0:67:d8:be:b1:8b:25:36:14:eb:01:84:87:8d:8a:
7f:dc:41:26:d9:3f:bf:de:c1:fa:8a:84:59:46:46:
dc:c8:91:23:84:3e:84:57:5b:04:ad:ee:71:3a:11:
ca:5d:e0:f9:71:6d:6e:28:aa:8d:85:30:4e:e5:65:
aa:29:a7:9d:1c:2c:d6:bf:44:c3:a4:ca:1a:eb:73:
e4:54:fa:1b:2b:ab:ae:21:0b:1a:0e:d9:b4:c6:3f:
96:43:19:0f:f2:66:2c:59:e5:8f:43:68:37:87:78:
6c:6b:d7:0d:0a:3b:8e:b7:43:85:90:c0:6c:55:49:
37:6d:b3:27:9b:88:eb:60:63:c1:b9:53:e9:8b:cd:
39:c1:a3:a2:9c:38:36:f3:00:43:1d:e2:cb:0b:98:
89:b6:93:be:bb:17:14:69:17:2d:c5:6c:6f:6a:01:
78:aa:da:08:13:6f:da:0b:07:13:75:ce:2d:f1:df:
77:03:9c:ee:7c:df:dd:a3:69:d0:be:2a:26:93:a1:
2c:7b:12:4b:60:00:0e:18:75:f2:56:5a:66:a3:74:
ac:e8:fb:9a:f5:ea:d8:04:ce:99:e5:1f:96:87:5d:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1E:05:EF:02:C7:65:69:31:CE:BE:E4:41:1F:8C:EA:7D:01:32:31
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fa:b9:3d:b4:8e:28:8f:ed:e4:cb:be:5f:15:d4:74:8e:95:
6f:9d:dc:a7:69:77:e6:c7:35:a9:f4:d6:f1:b3:ee:90:e4:c5:
28:d9:8b:25:39:62:c7:3e:f7:7c:77:e5:b7:99:19:ca:a1:aa:
8e:45:0e:48:72:bc:67:84:97:94:e5:56:cb:fb:d4:93:14:71:
6a:46:28:ec:3b:0c:2e:c8:a7:a4:ab:96:25:fc:17:2e:c3:cf:
73:76:1b:8c:4c:6f:b9:5f:c2:c8:95:2a:41:e3:3b:89:b0:6a:
de:77:d0:47:90:4d:e5:38:1b:9c:96:b4:aa:cb:01:2e:f7:10:
0c:08:12:a9:76:e2:65:99:b5:86:3d:d6:62:b9:df:b6:e6:b4:
54:07:3b:c8:50:64:3e:56:f0:a0:28:11:27:56:68:70:0b:7d:
87:64:14:0f:e3:b9:5f:07:f1:5b:cf:ca:e3:26:b9:2f:10:2a:
91:f6:7e:f3:1f:c2:7b:c4:ac:b7:f9:61:8b:fd:6f:80:e8:26:
c4:56:fa:6a:94:7c:83:a6:46:82:14:5e:84:c6:92:44:d6:ef:
8e:fb:51:98:16:2d:fc:ce:6e:b2:a5:f4:1e:54:47:ba:c3:63:
8e:3f:b3:92:21:64:85:20:e0:d4:6e:d0:85:87:f7:62:21:33:
95:04:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:12 2026 by rpki-client