Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: t5vcjGmYTuSi/TnoRNOhkjOynfUoKwSiGmVzWPdsY3c=
Subject key identifier: 12:99:29:09:5F:62:3F:2F:6A:ED:A3:A0:39:88:45:A6:CA:11:CE:2D
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019D9A3E589F0DE2AEEA7EF11BECEE190188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 07:01:10 +0000
Manifest this update: Fri 17 Apr 2026 07:01:10 +0000
Manifest next update: Sat 18 Apr 2026 07:01:10 +0000
Files and hashes: 1: Fh3fxSNW3QZEpIYUfBjx_kqS2o0.roa (hash: DQ4/igbo+rv2kpc7T7st9wWdy+ENKm7eM93V1cXm0hA=)
2: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (hash: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=)
3: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: T19vC9Tajvx14bIhML9QHQAwgDsrdlSMhn5jASfa6B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:58:9f:0d:e2:ae:ea:7e:f1:1b:ec:ee:19:01:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Apr 17 07:01:10 2026 GMT
Not After : Apr 18 07:01:10 2026 GMT
Subject: CN=129929095f623f2f6aeda3a0398845a6ca11ce2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:31:db:bf:d3:57:8b:68:60:ce:9c:76:49:
4c:eb:e5:d7:4a:14:50:33:1d:47:54:0c:94:c9:52:
39:8f:e9:a7:ed:90:d5:fe:5b:51:4d:8d:40:56:09:
f5:a4:74:7e:fb:e2:21:e2:95:39:40:d6:71:56:d2:
59:dd:07:b9:b8:ed:f6:8d:b4:07:f7:a7:bd:37:e3:
ba:7c:d3:5c:c4:30:91:8b:9e:c6:b2:c9:cd:a4:f9:
63:43:de:01:82:a9:c6:aa:08:b1:26:cd:cb:e8:1d:
8b:fb:88:c5:2d:ba:de:dd:8a:6f:75:d2:9d:ca:1d:
28:52:5f:6a:1d:1d:ca:61:99:ed:1f:57:a6:c0:91:
87:64:53:87:56:c1:e3:f7:ff:10:da:b3:3e:1e:bb:
33:4c:07:a0:54:3d:9f:55:df:32:12:9e:0e:71:e5:
88:28:db:e3:d0:25:0d:de:f6:cb:f1:2a:77:08:e6:
4d:38:ff:ec:89:8b:c7:ae:31:27:c4:69:de:5a:36:
e8:68:c9:8a:85:40:e7:5f:28:5f:b6:7d:88:5c:cb:
f1:66:76:38:0f:39:a5:fa:47:71:91:42:2d:79:42:
ff:4d:20:02:d6:ef:6c:e0:96:f0:a4:cf:de:e5:f1:
57:04:97:e4:c7:ac:12:1e:df:ca:e5:cd:82:03:07:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:29:09:5F:62:3F:2F:6A:ED:A3:A0:39:88:45:A6:CA:11:CE:2D
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:81:e1:0e:60:15:e2:b4:ab:26:9c:f0:42:0b:71:66:f2:d4:
b5:98:13:20:15:e5:05:3a:6d:63:e0:ac:da:02:0b:33:04:f4:
11:98:66:79:99:f1:09:51:0b:b7:46:c1:5e:25:c0:86:90:6a:
3f:32:f4:64:31:c5:77:2e:90:2f:01:d7:fa:ad:45:bf:97:2a:
3e:af:be:21:56:fb:44:ce:92:12:3d:33:6c:f3:9e:fb:28:35:
64:92:f2:84:b0:88:65:0d:95:cf:b4:cf:af:2d:b9:96:f3:89:
89:84:b8:28:e0:e7:4d:c6:16:28:c7:fd:76:00:ca:5c:13:79:
db:3d:a3:0e:a5:07:ae:fb:59:a0:c7:68:74:1b:19:5a:f0:ec:
4d:d4:db:1c:23:56:21:66:76:bc:93:0d:b9:3f:52:03:fb:b8:
e5:a7:01:b2:3f:be:e7:11:e5:21:37:f0:b1:ab:5e:1a:75:ec:
90:34:b4:4f:59:20:11:8a:ee:2c:e2:40:63:ed:0f:16:0a:da:
01:b2:45:56:b8:4e:68:10:81:52:b7:e8:a1:43:c5:ab:f6:b0:
4e:96:68:31:1a:b2:4e:50:81:ca:10:8f:cd:89:07:4d:31:63:
f1:cd:05:e9:2e:bc:b1:3d:94:1b:17:77:05:1c:5c:2b:76:7b:
96:8e:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:54 2026 by rpki-client