Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier: quqLeH/UQDp3xZd0gpCtJo1qbSe5lXvFBqvr6jd4lts=
Subject key identifier: 2C:6E:98:63:47:AF:2D:80:87:A4:C1:E0:C0:BF:6C:2B:07:C0:B1:22
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 019D992B16012FB1973BA1149551A4F7F486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number: 1491
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: tZQOcey/6qBIHEmer7kLbBjgr+39Sgff+HocIvtwX3s=)
2: t87-StaNkWoIrvxpm-LKJGpGKeM.roa (hash: r4gMZM/MRHYsjQV9QPuG6dWd9zz5OkmUPJF3gcNO56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:16:01:2f:b1:97:3b:a1:14:95:51:a4:f7:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=2c6e986347af2d8087a4c1e0c0bf6c2b07c0b122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:4b:ce:a3:51:09:09:db:a7:b8:fa:be:4c:
b5:8d:fd:3f:c1:53:97:77:f1:26:5a:9c:b0:d5:19:
06:a3:de:6f:3b:df:13:c3:7c:a5:fc:df:d8:c6:84:
d6:64:92:d2:5a:f5:71:55:02:cd:53:4a:ad:f4:af:
f5:6d:7c:ac:cc:fd:0b:e5:39:22:ae:84:4a:92:06:
83:f9:d4:46:1b:6b:74:aa:f5:60:ac:c5:0e:b1:8f:
37:2c:87:a7:e5:2f:1d:75:e4:48:94:78:54:38:19:
9a:55:de:c8:f9:41:09:39:94:fc:c5:92:fb:9e:d1:
db:04:e0:0d:9c:83:10:ff:ce:60:37:1c:b9:bf:eb:
07:ea:e5:98:45:bf:7a:20:4a:f6:82:6f:a7:83:06:
51:14:41:50:1e:91:4e:91:04:14:a1:a3:18:0d:24:
08:62:f3:65:1a:88:1a:84:92:bc:c6:c9:bf:84:b3:
29:ff:e1:d2:63:89:6f:f7:c2:e1:03:17:b9:66:ab:
19:de:16:1e:8e:7c:01:a9:4b:f2:8f:14:34:07:b8:
8a:99:b1:d1:2d:ad:5e:45:5e:96:da:28:51:7b:50:
5d:f7:33:45:e8:98:dd:2c:1f:10:5d:bc:39:a5:be:
ac:eb:f9:07:8b:74:77:f3:00:89:ca:6e:de:9e:5a:
b1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6E:98:63:47:AF:2D:80:87:A4:C1:E0:C0:BF:6C:2B:07:C0:B1:22
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:51:76:92:c6:ab:84:a2:0a:a5:59:bb:71:a4:88:c4:83:a8:
94:67:56:e0:19:4a:50:aa:24:32:76:3e:fe:c4:b8:3e:a2:bf:
77:09:a9:c5:ab:02:e7:ce:de:d6:a4:25:a2:ac:f2:0b:37:13:
7f:15:85:8c:20:a0:03:e4:73:0a:12:b0:22:27:02:79:c8:c6:
73:50:48:81:58:45:5c:95:59:65:90:17:85:7f:5f:1d:3c:63:
a1:8f:5d:77:b9:db:e0:14:79:66:ec:0b:46:28:ab:18:24:bc:
8b:bc:36:29:d8:a4:c2:42:a7:d1:b2:aa:ac:b7:3b:1b:38:7d:
8e:e9:24:59:ef:6f:e2:cc:11:4f:c9:e5:8b:06:fd:08:29:fd:
fc:29:65:3a:1c:eb:0e:0b:eb:65:2a:42:9f:ba:66:47:87:3f:
b4:e9:91:2c:40:3d:19:ae:2f:7b:45:c3:ee:22:6a:99:40:7d:
b0:8e:4c:69:67:a9:08:78:e2:1d:f3:f9:1f:ce:42:6f:ae:3b:
9f:ce:5c:45:0d:28:43:26:2f:25:d1:04:34:52:b4:1c:e4:9b:
f3:1f:6b:cf:3b:be:15:0e:43:2a:36:15:d8:c4:6d:e4:55:8b:
68:ec:ba:cb:e4:42:98:3b:14:ae:a7:b6:66:b3:d8:7c:70:c5:
a3:34:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:00 2026 by rpki-client