Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: xVSl4QmERUK3fF2Vg9eNUupmDTFjnjO9kDEAkfi/M9k=
Subject key identifier: 26:D6:45:86:16:1A:44:E8:CE:30:48:80:4C:26:1D:08:5A:E1:4E:B1
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019DA3411CD75735B92EA2761EDA19325F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 10E8
Signing time: Sun 19 Apr 2026 01:00:46 +0000
Manifest this update: Sun 19 Apr 2026 01:00:46 +0000
Manifest next update: Mon 20 Apr 2026 01:00:46 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: UALkkZy1vRFSKTYd0Qi2Djtboj8zgQEdzQGUbyamoBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:1c:d7:57:35:b9:2e:a2:76:1e:da:19:32:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Apr 19 01:00:46 2026 GMT
Not After : Apr 20 01:00:46 2026 GMT
Subject: CN=26d64586161a44e8ce3048804c261d085ae14eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:a1:29:de:70:cf:2f:6a:a5:56:f1:c3:99:
bf:e8:fe:7e:e6:14:54:98:d1:12:ea:df:21:57:af:
c2:4f:36:40:2e:5e:9c:4b:70:1c:44:57:61:d1:aa:
f9:54:9c:45:b0:56:e7:75:f6:43:f5:44:36:01:ef:
fe:8b:89:bd:20:1b:25:e9:be:85:16:56:b0:68:aa:
39:8d:b5:5d:e1:35:f5:aa:e9:71:7c:9b:b1:9d:a7:
57:bb:24:da:e0:30:a4:ac:83:93:25:40:6c:aa:a6:
6e:0a:f7:74:88:f3:3e:92:6d:99:3e:59:5c:fb:1d:
c2:46:66:5a:66:ba:23:01:47:7d:8b:6c:5f:22:0c:
7b:a5:0c:ee:fa:9a:da:82:b4:22:44:dd:fc:d0:1f:
f7:5b:7d:9e:9e:48:5b:4c:63:87:62:b3:d5:21:13:
d6:22:da:f2:09:6a:28:2b:72:22:da:4e:5e:ef:92:
1a:cf:c9:01:58:78:40:53:f0:41:42:1f:3c:45:de:
8b:27:79:29:ce:53:ec:c2:bd:ff:1b:71:11:df:2b:
33:03:60:9a:e7:f4:b7:b8:b9:e9:24:36:c6:a8:8d:
2e:85:98:d5:25:9b:20:85:da:89:db:30:28:7c:4f:
22:0d:7e:c7:da:39:8c:f1:cb:b0:e1:09:e3:7a:fa:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:45:86:16:1A:44:E8:CE:30:48:80:4C:26:1D:08:5A:E1:4E:B1
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:41:d8:9a:34:2b:f2:5a:6c:4f:f0:1e:e8:b6:03:8c:99:c8:
f6:31:94:b1:c0:68:07:4a:9b:a5:85:f8:95:c5:ef:bb:af:1d:
3b:47:5e:f8:73:7b:ec:f3:85:bb:0d:db:88:f7:8a:2a:05:63:
70:7c:c4:15:64:f5:2f:42:cb:4d:bb:17:0e:44:54:8e:09:c7:
7d:5d:c7:0c:ea:18:4b:51:66:df:04:91:d1:f4:32:b4:1f:1c:
75:13:db:5f:29:dc:25:0b:9c:42:59:66:d9:0a:d1:56:e7:57:
52:d2:7c:ac:58:9e:06:fd:30:bb:21:85:ee:15:8b:18:96:56:
e3:60:0c:d2:6b:90:ed:b1:7b:f5:d6:19:c3:c8:f2:30:a7:95:
9a:87:c3:42:ae:06:74:76:ad:41:fe:b9:f5:6a:70:70:27:b5:
0a:5d:03:d3:4b:3a:ae:9e:a3:66:91:76:db:48:37:c7:7f:c3:
4d:32:d7:cc:85:2f:8c:6d:e5:6d:f2:75:e0:0c:da:3a:cd:f7:
80:2b:9c:a5:aa:8e:7a:e0:88:f6:cb:0a:2e:2b:a5:a0:cb:2f:
62:e7:1f:02:07:11:60:16:9a:ab:c0:08:59:ff:2e:a1:05:c6:
0c:04:59:dc:11:63:a6:c5:82:a2:ff:de:8a:60:38:6c:8d:52:
23:8d:4e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQRzXVzW5LqJ2HtoZMl+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTdjNzQ1M2YzNzdlOWNiNmZhZTVjODkzYzA2N2EzZTFk
MzUxNDUwHhcNMjYwNDE5MDEwMDQ2WhcNMjYwNDIwMDEwMDQ2WjAzMTEwLwYDVQQD
EygyNmQ2NDU4NjE2MWE0NGU4Y2UzMDQ4ODA0YzI2MWQwODVhZTE0ZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntahKd5wzy9qpVbxw5m/6P5+5hRU
mNES6t8hV6/CTzZALl6cS3AcRFdh0ar5VJxFsFbndfZD9UQ2Ae/+i4m9IBsl6b6F
FlawaKo5jbVd4TX1qulxfJuxnadXuyTa4DCkrIOTJUBsqqZuCvd0iPM+km2ZPllc
+x3CRmZaZrojAUd9i2xfIgx7pQzu+pragrQiRN380B/3W32enkhbTGOHYrPVIRPW
ItryCWooK3Ii2k5e75Iaz8kBWHhAU/BBQh88Rd6LJ3kpzlPswr3/G3ER3yszA2Ca
5/S3uLnpJDbGqI0uhZjVJZsghdqJ2zAofE8iDX7H2jmM8cuw4QnjevoN4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbWRYYWGkTozjBIgEwmHQha4U6xMB8GA1UdIwQY
MBaAFKgXx0U/N36ctvrlyJPAZ6Ph01FFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjct
ZGVjNjgwODNmOGY2LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2
LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUHYmjQr
8lpsT/Ae6LYDjJnI9jGUscBoB0qbpYX4lcXvu68dO0de+HN77POFuw3biPeKKgVj
cHzEFWT1L0LLTbsXDkRUjgnHfV3HDOoYS1Fm3wSR0fQytB8cdRPbXyncJQucQllm
2QrRVudXUtJ8rFieBv0wuyGF7hWLGJZW42AM0muQ7bF79dYZw8jyMKeVmofDQq4G
dHatQf659WpwcCe1Cl0D00s6rp6jZpF220g3x3/DTTLXzIUvjG3lbfJ14AzaOs33
gCucpaqOeuCI9ssKLiuloMsvYucfAgcRYBaaq8AIWf8uoQXGDARZ3BFjpsWCov/e
imA4bI1SI41OLw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:40:12 2026 by rpki-client