Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: r5Oc0PmgDtUWsefG2UUzbrvPvqX+zMxFEU38MzH1bX8=
Subject key identifier: 2B:6F:5C:24:F1:5D:F5:E7:5F:05:20:75:C3:B4:87:25:56:34:2C:3A
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019D9B513245623246FA4A2D1C275FB3B490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1711
Signing time: Fri 17 Apr 2026 12:01:22 +0000
Manifest this update: Fri 17 Apr 2026 12:01:22 +0000
Manifest next update: Sat 18 Apr 2026 12:01:22 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: 0Xwrqxe2k4a6yWhrGXQnqGkWh4CZo27NBb31op327yw=)
2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:32:45:62:32:46:fa:4a:2d:1c:27:5f:b3:b4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Apr 17 12:01:22 2026 GMT
Not After : Apr 18 12:01:22 2026 GMT
Subject: CN=2b6f5c24f15df5e75f052075c3b4872556342c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:ea:d0:33:3e:0f:9d:cb:7f:36:38:8d:9d:
7d:d9:86:45:5b:97:c4:06:9b:f7:e6:d7:c6:13:24:
f1:f3:8a:a8:c0:d7:f6:bd:e1:b2:29:b2:76:eb:4e:
e1:58:b8:fb:f3:9d:ec:bf:52:28:9e:b0:5c:04:75:
e5:36:90:55:3c:3a:5f:6c:39:35:b3:1b:d0:be:e0:
6b:0e:39:9a:1f:c9:fa:6e:f0:c6:b1:f8:25:d7:ca:
6d:5a:fb:4b:eb:3e:ac:df:d5:33:df:02:4b:7a:5c:
f8:f7:5a:cd:f9:7b:3e:3e:7b:a2:48:e0:de:0e:a8:
e5:ee:75:3a:22:34:0b:cb:12:00:76:a7:93:cf:13:
0e:2a:b7:17:60:8f:90:a4:4e:d6:17:f6:ca:75:91:
38:ba:dd:e6:e7:4d:81:39:44:93:54:37:27:5c:16:
8e:df:80:9c:82:1e:d6:00:79:4a:ce:3e:24:be:09:
c1:b3:ec:eb:49:ba:9f:57:63:86:08:6b:89:f7:79:
8a:b7:26:5b:f1:39:ca:b5:31:1e:1a:81:7b:fa:97:
5c:1c:0e:a3:a9:48:82:78:8c:58:72:a5:4e:13:5a:
e9:89:28:dd:c7:bb:26:0b:cb:14:07:2f:01:20:9d:
62:fe:d9:77:ff:fd:7d:3a:46:72:b8:6f:1e:97:0b:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:5C:24:F1:5D:F5:E7:5F:05:20:75:C3:B4:87:25:56:34:2C:3A
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6e:a8:eb:7b:20:79:3f:0f:71:de:e2:92:38:a4:c7:cb:b1:
24:b1:06:4e:a6:0a:e5:6d:cb:87:57:93:7f:ca:63:93:bd:9e:
25:3e:ed:f6:d8:70:32:7e:5b:37:73:ed:2b:b0:f3:af:0b:32:
38:ed:60:68:36:67:f9:0d:83:d2:77:69:03:e2:10:69:76:6d:
f9:0d:10:cd:7a:eb:8c:4d:31:66:6b:08:7f:73:fa:64:1c:d2:
7c:a5:5e:a3:07:65:a4:38:87:d5:d3:6c:36:75:89:ca:7e:b6:
03:79:88:46:61:5b:c5:fc:c8:11:ea:af:dc:7b:25:dd:1e:54:
f8:63:03:98:89:87:51:a6:de:a2:e8:53:fa:c0:2f:e0:6f:69:
65:71:e2:06:40:38:47:49:e2:01:ce:59:30:43:7d:3b:84:df:
ce:ac:12:c6:f3:65:c7:80:12:04:54:00:5b:92:ba:01:db:ce:
54:1b:b4:14:0b:ec:e8:20:32:03:69:34:60:9f:ed:9f:d0:b5:
58:32:7d:68:f1:39:31:f8:d1:5e:2b:1b:1b:33:66:cb:a6:25:
8f:0a:01:30:d6:96:c2:14:32:97:48:cb:a5:27:e9:7e:82:9d:
7d:dc:23:55:d8:02:67:6f:31:fa:04:4b:88:b4:d6:85:29:d3:
1f:80:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:03 2026 by rpki-client