Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: sje215umMm2EpRcM6VhWuQMkw9BugmcwUcmx3g0pbHw=
Subject key identifier: 1F:6F:B2:E6:77:C9:56:B0:B6:31:6B:D7:C7:5D:1E:AE:08:F7:55:5B
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019D9A06BB81C1880B56171896BD3C7BC540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0CB3
Signing time: Fri 17 Apr 2026 06:00:25 +0000
Manifest this update: Fri 17 Apr 2026 06:00:25 +0000
Manifest next update: Sat 18 Apr 2026 06:00:25 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: f1nIoUTxQAEqktC852Sgddecn1RJRCloFLa++aSkWEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:bb:81:c1:88:0b:56:17:18:96:bd:3c:7b:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Apr 17 06:00:25 2026 GMT
Not After : Apr 18 06:00:25 2026 GMT
Subject: CN=1f6fb2e677c956b0b6316bd7c75d1eae08f7555b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:81:1c:70:1b:08:a6:b4:da:1e:89:3e:c0:
6b:1e:d9:ae:49:34:9f:ce:6d:0c:3b:35:fc:22:32:
fe:77:16:0e:3f:05:4f:9d:57:2b:55:48:7b:4e:91:
fb:06:a0:cf:e0:8a:d4:11:ca:88:90:52:4b:88:87:
ea:a3:3b:26:d2:9b:c8:bc:5e:f7:bc:7b:8d:74:5a:
49:2a:1b:7a:d9:b3:99:01:30:f3:e7:2f:46:41:45:
f0:1e:26:b9:ca:b9:a9:f4:e6:9e:bc:9d:a0:33:16:
1e:a2:d1:53:3e:a4:d9:7a:d2:50:04:b1:9f:29:10:
1f:b5:10:bf:93:81:18:78:35:b1:f1:c1:87:e7:a3:
fc:f6:e1:48:fe:cf:07:c1:92:ad:f5:16:57:56:fb:
be:38:e2:35:c0:2e:c0:dc:03:54:5b:68:16:22:63:
5a:8c:f2:4b:c5:69:3a:2f:69:50:66:53:82:76:06:
39:53:88:1f:74:be:a5:5a:c8:dc:d9:cf:90:ea:4d:
86:85:3a:44:7a:24:0f:cd:8f:5f:60:95:1f:67:6e:
de:0e:3e:ec:83:cf:ba:30:a4:30:94:81:1a:f8:61:
4c:de:df:ad:d7:86:d6:8f:da:94:ed:75:fd:ee:c6:
7b:1e:36:cd:1b:c2:ab:f0:aa:d8:d7:9a:e7:d1:93:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6F:B2:E6:77:C9:56:B0:B6:31:6B:D7:C7:5D:1E:AE:08:F7:55:5B
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:be:24:06:50:86:7f:87:9b:1a:ad:66:bc:33:fd:37:0e:82:
0d:32:0e:32:95:84:ca:86:40:3b:9a:c3:c1:95:b0:8c:38:ee:
7c:c3:b8:7b:45:b1:cc:68:72:1b:2b:15:72:64:1a:9c:a9:26:
41:85:6c:1b:33:1c:14:70:db:c6:ce:54:43:51:b2:a5:2a:21:
76:6c:e9:47:5d:64:7f:a3:43:d9:ce:0d:1b:a6:f2:2d:f2:58:
d6:c4:ec:77:4e:23:2a:88:d9:bd:a0:bd:c8:24:04:ce:04:c8:
78:61:78:a3:89:c2:2d:48:63:94:b4:86:39:ff:da:02:ff:23:
88:60:43:a4:61:8a:fe:59:55:91:ff:24:af:47:fa:a7:c2:af:
c7:b3:fe:4a:c8:77:05:a7:92:79:f0:d8:8e:5a:56:db:76:b7:
ba:ad:a9:95:37:94:bd:f3:35:15:90:b9:3d:8b:1c:25:b0:fc:
c7:c8:14:b1:35:90:5d:02:8b:33:87:58:05:51:b6:44:40:01:
b2:a7:8f:c2:a3:cd:82:0f:49:1d:f3:56:6b:63:93:ce:34:f0:
0a:29:2b:81:4a:34:a0:41:c4:8a:fb:5c:f7:b4:b4:be:49:7c:
d4:84:09:c1:7a:30:4c:6c:38:09:0c:0e:6a:cc:aa:75:31:7e:
46:88:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:44 2026 by rpki-client