Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: q7vM7jaTswj0bjbgHO5+UpjkNXsa6BYFMyQ4y+YjVWQ=
Subject key identifier: 8F:71:6F:21:95:00:07:67:B7:37:E5:CB:27:65:95:6B:AE:FC:A9:E7
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019D999967522455C85AAFEB4918A4C9BB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:01:00 +0000
Manifest this update: Fri 17 Apr 2026 04:01:00 +0000
Manifest next update: Sat 18 Apr 2026 04:01:00 +0000
Files and hashes: 1: 1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa (hash: JDIIwJMIws7Yan/EHkT9Ljq/fUXQU7hpu1yjAvkm5mo=)
2: SATda0Q9JgLf7FNzUfrTDL5vnEQ.roa (hash: XGliMsZWtirHhZX2xfYpxBaxkmF1dTUTYWoC+BYAPKw=)
3: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: vLixy1UATuDeEcrOwbIIGhEpES9ElGa06GeGersx/h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:67:52:24:55:c8:5a:af:eb:49:18:a4:c9:bb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Apr 17 04:01:00 2026 GMT
Not After : Apr 18 04:01:00 2026 GMT
Subject: CN=8f716f2195000767b737e5cb2765956baefca9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:e3:8e:7f:cc:2b:1e:86:45:37:37:9d:dd:
f2:bd:0a:36:3a:fe:a1:f6:d6:fd:49:f1:12:1e:a8:
22:1e:f8:28:04:6b:fc:be:04:e4:a8:08:4f:c8:e1:
20:ac:7c:dc:42:21:8b:22:d9:76:b3:83:4a:f6:76:
09:4e:b9:93:5d:a1:26:66:10:58:96:30:23:4a:de:
e5:aa:90:11:c9:fd:11:bb:2d:01:28:0a:8d:4a:8e:
c7:fc:e6:b8:f2:52:61:90:32:3b:a4:67:36:3b:39:
85:49:21:9b:87:35:c0:b6:70:6a:e6:50:15:26:5c:
6b:5c:82:c9:6f:29:08:87:c4:16:eb:b5:8c:19:1b:
07:2d:7f:40:1f:8b:bd:54:02:6a:f2:60:d3:af:f0:
6a:19:10:82:1b:04:9b:4a:72:90:0f:22:83:81:59:
0b:e3:47:dc:cb:18:03:0e:83:0e:d0:8f:3e:68:38:
04:f2:c9:61:5f:07:43:e5:d8:eb:d2:40:be:97:27:
7a:8e:6b:1a:da:8f:a1:18:01:0e:a7:3e:9f:80:16:
0c:3f:99:9f:3f:c0:82:57:91:b8:2e:77:11:39:3d:
fb:84:3f:90:8f:e3:28:f6:4f:89:4f:28:c6:81:83:
d7:51:0f:87:f2:a4:93:93:fb:3d:72:8c:b3:18:8c:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:6F:21:95:00:07:67:B7:37:E5:CB:27:65:95:6B:AE:FC:A9:E7
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:08:d1:71:b9:ba:5b:bd:45:43:85:35:b5:0e:92:40:84:a6:
ba:ab:5a:66:9c:a7:9a:55:54:1f:33:f4:28:51:32:4f:74:65:
41:28:7c:2d:c8:94:fa:f3:60:69:3e:f7:53:a4:6a:b5:15:8f:
30:91:8e:89:54:8a:85:a4:8d:9b:7f:57:c8:e7:8c:ef:ad:21:
e2:da:5b:dc:5f:97:b2:70:3a:5d:38:60:4a:92:3a:68:6b:83:
38:76:87:8c:a2:f3:b8:b1:63:cf:2f:2e:77:5a:77:9c:b8:24:
a3:6e:9b:ea:51:b9:1a:fb:29:96:0e:89:ea:ae:33:c3:58:76:
04:e0:3b:ec:ec:e8:5f:d6:10:47:81:57:44:89:53:d1:82:ba:
60:4c:22:ee:62:fc:45:26:bd:12:0c:35:17:06:1f:ca:cb:d2:
67:a5:da:6d:fd:6a:1f:77:6f:79:b9:26:f5:84:09:03:e7:20:
cf:e9:18:61:d1:85:2e:d8:38:3f:79:e9:ea:42:ef:46:92:d3:
a1:7f:4e:fe:d4:ff:49:48:e6:97:e9:38:20:2b:ef:2f:d2:aa:
b5:2d:cd:0c:f5:01:53:1c:e5:3b:a8:a0:15:43:55:45:01:c0:
a1:73:79:c2:08:fc:45:9b:05:68:ac:48:94:31:b7:94:3f:02:
7f:38:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:45:52 2026 by rpki-client