Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: Chw29BxmL3Xj9M7ucJyH4khWBfmiV0yZHD2x+ZxunKI=
Subject key identifier: 4C:B2:D7:8F:75:7F:A5:CA:F6:A0:7D:FF:B3:3B:12:19:5F:74:B7:7E
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019D9999452DE84BFFCE95E5967DD7C5D1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0A99
Signing time: Fri 17 Apr 2026 04:00:51 +0000
Manifest this update: Fri 17 Apr 2026 04:00:51 +0000
Manifest next update: Sat 18 Apr 2026 04:00:51 +0000
Files and hashes: 1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: 2H7Gz+dSNHXuSkYfch6o5O6G9K76ooPKWE3KoMQHrTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:45:2d:e8:4b:ff:ce:95:e5:96:7d:d7:c5:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Apr 17 04:00:51 2026 GMT
Not After : Apr 18 04:00:51 2026 GMT
Subject: CN=4cb2d78f757fa5caf6a07dffb33b12195f74b77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:e2:4b:b0:a0:46:4b:7b:3a:d4:5f:0f:02:
98:41:93:25:49:56:00:0e:49:e2:a1:4e:93:f9:63:
c3:d9:19:33:58:09:8c:36:eb:01:d9:b5:78:44:32:
be:7c:17:ce:d0:e1:f1:70:b2:cb:cc:a5:26:b9:de:
be:d5:7e:32:a2:ad:49:0a:6b:19:d3:02:a1:e7:7f:
b6:8a:f2:c6:7d:d6:2f:4f:67:dc:af:df:e6:34:f1:
b7:f1:35:c1:17:ee:8e:82:0e:98:c9:b7:31:d5:92:
fc:ee:8d:6f:14:9c:54:cf:ce:fc:c2:97:14:2c:a5:
56:0d:ff:9b:9b:8c:ba:4b:8f:46:6f:d5:18:db:16:
fa:20:97:83:83:40:1b:e1:8f:80:7e:63:72:ca:88:
8d:21:97:7f:ed:9e:93:bd:14:bd:76:a5:1e:a2:61:
79:f8:ec:9a:79:90:a7:6a:37:7d:12:a7:68:10:50:
82:65:c9:b6:aa:82:49:af:c8:71:f3:08:da:52:e8:
a6:d9:6f:b6:04:3d:e9:8c:b1:ba:58:64:cd:5f:a4:
08:3e:3b:35:45:5a:da:6b:e4:46:be:18:9a:03:87:
ab:b6:7c:d3:8b:1c:d5:7c:b5:6e:68:42:f5:c5:fa:
a0:be:40:b9:27:d1:43:54:9b:34:9d:e1:c4:e9:78:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B2:D7:8F:75:7F:A5:CA:F6:A0:7D:FF:B3:3B:12:19:5F:74:B7:7E
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b9:14:43:93:9e:e3:5d:44:f6:f9:c0:0e:d6:de:b1:96:40:
04:03:e7:c6:df:c6:8a:3d:cc:66:e8:5d:70:fe:66:7f:07:52:
33:74:bc:b6:59:d9:29:73:17:62:01:76:a7:b2:fd:f2:c5:7d:
ee:24:7e:09:3c:6d:29:98:53:c4:03:87:a5:af:b1:9d:23:70:
f5:5b:14:c7:b1:6e:a8:76:96:ac:46:69:6e:3f:ee:0e:3b:ce:
54:c1:31:14:e4:3e:8b:05:55:9f:5b:00:cb:02:68:f5:62:81:
6b:fd:45:72:1a:1b:1a:ad:c3:68:3c:02:f7:84:70:c7:9f:49:
93:41:f3:fc:a9:8e:0d:2f:da:c0:1a:85:0d:79:57:6c:0a:05:
88:60:a2:dc:9f:66:e1:df:60:06:be:c3:b4:94:19:20:92:e4:
d8:a3:11:7d:39:fa:7a:30:e0:cf:aa:bd:f6:54:91:c6:c5:c6:
d9:fb:e3:61:65:ed:43:6b:1b:b4:0f:c0:f8:e8:0d:ec:a4:30:
d9:97:41:d5:6e:95:1e:33:be:31:45:70:6a:1a:b9:6f:3d:0f:
fd:3f:2d:7d:e6:c3:71:71:a2:ab:a1:1d:23:e4:c2:46:57:7a:
cb:96:f7:6d:c1:39:f6:ad:bb:19:ea:37:67:16:fd:a5:5b:d2:
fe:da:71:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmUUt6Ev/zpXlln3XxdHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTdhNjhmMDhhMmUzMGJhN2Q3M2Q0NGM5YTZlMjQwMGZk
MGEzYjEwHhcNMjYwNDE3MDQwMDUxWhcNMjYwNDE4MDQwMDUxWjAzMTEwLwYDVQQD
Eyg0Y2IyZDc4Zjc1N2ZhNWNhZjZhMDdkZmZiMzNiMTIxOTVmNzRiNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK7iS7CgRkt7OtRfDwKYQZMlSVYA
DknioU6T+WPD2RkzWAmMNusB2bV4RDK+fBfO0OHxcLLLzKUmud6+1X4yoq1JCmsZ
0wKh53+2ivLGfdYvT2fcr9/mNPG38TXBF+6Ogg6Yybcx1ZL87o1vFJxUz878wpcU
LKVWDf+bm4y6S49Gb9UY2xb6IJeDg0Ab4Y+AfmNyyoiNIZd/7Z6TvRS9dqUeomF5
+OyaeZCnajd9EqdoEFCCZcm2qoJJr8hx8wjaUuim2W+2BD3pjLG6WGTNX6QIPjs1
RVraa+RGvhiaA4ertnzTixzVfLVuaEL1xfqgvkC5J9FDVJs0neHE6XgriwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyy1491f6XK9qB9/7M7EhlfdLd+MB8GA1UdIwQY
MBaAFKpXpo8IouMLp9c9RMmm4kAP0KOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMt
ODQ2OGU0OWYwMGVkLzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMtODQ2OGU0OWYwMGVk
LzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLkUQ5Oe
411E9vnADtbesZZABAPnxt/Gij3MZuhdcP5mfwdSM3S8tlnZKXMXYgF2p7L98sV9
7iR+CTxtKZhTxAOHpa+xnSNw9VsUx7FuqHaWrEZpbj/uDjvOVMExFOQ+iwVVn1sA
ywJo9WKBa/1FchobGq3DaDwC94Rwx59Jk0Hz/KmODS/awBqFDXlXbAoFiGCi3J9m
4d9gBr7DtJQZIJLk2KMRfTn6ejDgz6q99lSRxsXG2fvjYWXtQ2sbtA/A+OgN7KQw
2ZdB1W6VHjO+MUVwahq5bz0P/T8tfebDcXGiq6EdI+TCRld6y5b3bcE59q27Geo3
Zxb9pVvS/tpxfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:24 2026 by rpki-client