Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json)
Hash identifier: Re9UF4NLlERCdmaQ2KLXDIXnE6NLza8wsSSKHOWUJ74=
Subject key identifier: 31:69:FF:91:1B:3E:19:59:9C:51:A0:C7:28:17:6C:FB:B3:CF:9B:CA
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial: 019D9BF56B7B373AFD6B6D0C65E77B53668D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
Manifest number: 07AE
Signing time: Fri 17 Apr 2026 15:00:45 +0000
Manifest this update: Fri 17 Apr 2026 15:00:45 +0000
Manifest next update: Sat 18 Apr 2026 15:00:45 +0000
Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: wWiRbVOOQp+Usl9L4gKDg10b+3cEOYhs9nm/+dhWjA0=)
2: ToExRYtfFflY0qgZ7kuI-DMZsas.roa (hash: szC4tibpd14vMIvwD2jijrbaAQvOz43ACSSdEsy8AOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:6b:7b:37:3a:fd:6b:6d:0c:65:e7:7b:53:66:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Validity
Not Before: Apr 17 15:00:45 2026 GMT
Not After : Apr 18 15:00:45 2026 GMT
Subject: CN=3169ff911b3e19599c51a0c728176cfbb3cf9bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:f6:4b:1c:8b:18:31:6c:e5:94:13:ec:c7:
00:20:bc:db:5c:0f:78:95:53:57:02:e2:0c:de:41:
f1:c1:db:74:0c:ab:a6:ba:3c:7a:8b:3d:2e:24:03:
04:bb:b5:18:74:62:f0:29:00:6b:19:40:0b:c3:98:
47:ac:04:0d:7e:21:fd:6a:74:7f:ee:c9:f6:d0:89:
45:27:05:0b:c4:06:ca:a4:b5:26:95:4d:e2:73:c9:
8b:e8:68:e7:ee:12:e5:81:8a:ac:b3:99:27:23:8f:
73:47:37:70:ed:3f:d3:31:c8:e8:a2:d5:df:8e:c3:
3c:6f:0d:00:6a:7e:25:aa:7b:15:2b:b2:07:36:1a:
ae:8d:a4:67:b2:37:65:ca:5e:08:e7:47:b9:a5:a3:
10:b6:b4:19:ab:d4:f9:e8:1a:0c:2d:1f:54:d8:01:
9e:cd:ce:73:2c:70:59:22:aa:76:96:0c:d0:b6:4e:
4c:52:94:76:c9:35:59:2c:ae:8e:73:58:d2:ec:8b:
34:70:8a:9f:7b:5f:93:cf:30:9d:dc:05:4f:cc:6f:
0c:80:cf:bb:94:eb:af:0c:9b:7c:30:a3:a3:e5:f4:
ef:f0:07:b6:8d:2a:4c:33:0b:8d:d5:43:8a:64:bf:
6a:dc:71:46:f8:20:65:ea:ef:d6:bc:3d:0b:5a:5d:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:69:FF:91:1B:3E:19:59:9C:51:A0:C7:28:17:6C:FB:B3:CF:9B:CA
X509v3 Authority Key Identifier:
keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:78:48:5b:25:9a:79:e3:f6:58:43:3d:2c:c4:3b:dd:44:bb:
50:20:d1:ff:a7:57:3c:4b:26:6a:f7:ec:91:fe:10:b7:57:72:
fb:40:06:a5:4e:42:67:d8:04:1f:24:27:84:db:37:b0:2e:8f:
06:b0:41:52:84:28:fa:da:9a:a7:e9:43:04:bd:4c:cb:80:2c:
dd:a6:57:4a:3c:c1:3c:f5:27:01:bf:d3:6f:c6:61:70:38:e5:
1d:0c:7f:d4:38:eb:8c:a6:4b:69:fb:80:03:14:84:62:49:10:
04:40:ff:6e:fa:2d:df:5b:2e:62:e6:84:19:d6:04:b0:97:06:
17:1b:c8:db:ea:2f:c6:8b:4e:c9:5f:3f:5a:2c:73:7d:f7:43:
09:ac:e2:01:e0:ce:ff:48:ea:71:95:be:71:e2:ed:0b:ae:0e:
7f:36:01:81:b6:7b:34:6e:7b:ef:e9:0d:70:04:50:87:61:ac:
3f:cb:6d:b7:df:f2:d6:c8:9e:31:31:ea:f9:1b:46:1b:43:d0:
5d:40:d0:ef:4d:9f:0a:85:31:06:76:37:b1:b2:a0:73:9a:3f:
50:9c:6c:45:c5:b0:7f:8d:f1:f0:e8:f1:e0:dd:54:99:c6:43:
7c:71:19:48:c4:64:cb:3c:5f:f8:c6:cf:c6:62:7c:34:4b:c6:
da:26:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:25 2026 by rpki-client