Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: QWrbne1kbzzlenALYLkDlOp1MZmx/VKbqt87zgKJslw=
Subject key identifier: 25:A3:62:34:BE:F3:6D:5E:65:05:E7:19:63:8D:0D:82:6A:69:8C:C5
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 019D99CFE642B472A40061E60D8A7E84E12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1511
Signing time: Fri 17 Apr 2026 05:00:31 +0000
Manifest this update: Fri 17 Apr 2026 05:00:31 +0000
Manifest next update: Sat 18 Apr 2026 05:00:31 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: 9fLZR//z55kxMLpk6mNwA7nVIS7odQcc3p1leX9aeKo=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e6:42:b4:72:a4:00:61:e6:0d:8a:7e:84:e1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Apr 17 05:00:31 2026 GMT
Not After : Apr 18 05:00:31 2026 GMT
Subject: CN=25a36234bef36d5e6505e719638d0d826a698cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:29:af:dd:85:b4:67:55:3f:57:4f:1f:05:
ea:c8:4d:4b:59:81:89:f2:a5:56:fb:a8:6e:10:1e:
47:09:cd:6f:74:03:c4:c2:35:4e:7a:e4:d0:97:4e:
09:9b:53:16:c3:7f:94:ec:4d:ce:59:6d:54:e2:fb:
3d:2e:31:b5:53:5b:33:4a:9d:ab:70:d2:fe:dc:c7:
a4:4e:8c:22:61:78:58:a4:42:f6:25:ca:53:97:7b:
1f:e2:44:ee:32:32:c4:ea:f5:c2:d6:91:26:69:7e:
ca:02:c0:96:f4:36:dd:5f:7c:56:ec:b9:23:14:81:
e2:2d:0f:04:5c:c2:71:05:a6:62:0b:b8:68:ac:2a:
b6:36:52:bc:93:8e:0b:e6:39:55:c6:d2:03:eb:f4:
f4:9c:af:41:a7:db:5a:4b:31:0a:68:c2:da:aa:34:
f1:57:b6:81:76:bf:2f:b6:a9:bb:f5:7d:ea:ee:bb:
a6:93:a5:85:e3:fa:f9:ed:84:5d:4c:b7:51:db:8f:
3f:53:9b:86:69:9d:ad:4c:62:eb:dc:8d:4c:d8:3a:
bf:a9:4a:c2:21:64:5c:c7:7e:61:20:ab:50:79:8b:
bf:43:41:87:09:b8:92:4b:c8:9a:a6:0e:c4:db:26:
e9:f8:2c:02:5f:47:d2:21:b8:14:80:98:f7:a9:6e:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A3:62:34:BE:F3:6D:5E:65:05:E7:19:63:8D:0D:82:6A:69:8C:C5
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6c:99:15:8b:af:5d:40:f2:4f:e8:58:97:2a:78:d4:ee:ce:
b8:ab:b8:72:53:57:34:c0:ff:2d:a9:bd:3f:7e:2a:22:54:96:
d1:53:e6:bc:f3:ea:c8:bb:55:7f:6b:a4:53:a8:b9:bc:bf:b7:
65:39:74:28:06:26:bd:f7:48:ca:d7:f7:35:09:aa:5b:e7:70:
d6:3d:83:7a:07:69:c5:55:e8:1e:e4:64:78:fa:5a:39:25:05:
07:0d:2c:42:00:1c:65:be:2e:d8:f4:60:29:b0:da:b6:fd:cb:
a5:b3:e6:0c:77:b9:48:fe:81:0c:66:01:d6:fc:62:8b:72:7d:
74:eb:01:50:14:09:e1:35:7d:35:9b:29:2c:43:b4:f5:a1:48:
ba:68:54:95:56:46:29:b1:3f:2c:09:e7:b6:30:a4:53:b7:f1:
89:c2:6e:f0:a1:fe:40:4c:4f:a8:d7:89:13:84:34:9c:73:82:
ef:26:c7:3b:92:1c:89:ec:e0:e9:1d:0d:3d:77:84:fc:3c:48:
d0:7c:76:c6:cb:0c:25:67:f1:d5:2c:07:47:e4:19:75:cc:9a:
61:b6:59:86:d6:dd:66:8b:71:f0:ed:3f:ce:f0:08:79:7a:ba:
93:e9:a8:c4:9f:96:fd:b2:e2:75:d7:7f:5a:54:91:82:36:10:
5d:0a:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:18:19 2026 by rpki-client