Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier: jUzB22f+MRGyvOIigRctKVj9vrUYspskWLaw5EcqscM=
Subject key identifier: 4E:7B:5C:44:2D:96:8F:65:80:58:EC:EC:A3:63:AE:2A:F0:34:BA:46
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 019D9AE29F054CCB12304B8F82BE893731D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number: 03C8
Signing time: Fri 17 Apr 2026 10:00:36 +0000
Manifest this update: Fri 17 Apr 2026 10:00:36 +0000
Manifest next update: Sat 18 Apr 2026 10:00:36 +0000
Files and hashes: 1: pz8CoQ1N2M8bH21qMBTISpQnRdk.roa (hash: EBcWBMCcIbmPQ9/rGL1rZqapFT721I6YKN15f9JRiiQ=)
2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: 21nFQahh2bQ2mVNqKmGbLulRgXk/lsjcTudSM6uPBSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:9f:05:4c:cb:12:30:4b:8f:82:be:89:37:31:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: Apr 17 10:00:36 2026 GMT
Not After : Apr 18 10:00:36 2026 GMT
Subject: CN=4e7b5c442d968f658058ececa363ae2af034ba46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:50:c1:b9:97:11:1a:df:cd:4e:46:ee:b5:
86:30:d4:ac:8e:4f:32:1c:f1:94:59:6c:45:30:bf:
ff:80:a9:16:bb:96:0a:3c:c1:33:7d:e3:c4:63:75:
2b:62:5b:85:9b:50:ff:25:bc:90:d5:92:cc:c8:7d:
7b:0e:4f:02:2a:53:9a:d4:83:06:62:6f:a1:a6:a6:
56:f9:8f:49:5a:bb:af:71:b4:20:52:1b:6a:e5:5a:
2c:92:86:50:18:bf:8c:23:8e:ab:3e:fb:b9:c9:06:
a2:89:4c:7e:17:87:8f:fb:c1:5b:20:98:84:07:b9:
61:2e:9e:b4:63:a9:ae:15:98:94:dc:06:10:79:45:
2e:55:33:f1:66:7f:e3:43:00:ac:8f:67:43:8d:13:
3c:84:d3:d9:6e:ef:84:08:ca:99:be:33:14:c0:e2:
9b:13:45:63:83:03:a1:39:bf:1d:f8:76:1d:79:97:
47:51:a1:d9:08:fd:5c:09:25:7f:fa:17:57:e2:ce:
8a:10:9b:46:96:89:5f:31:60:4d:a8:68:6e:d6:a6:
b9:5a:ea:c8:c7:9c:3a:e9:f6:ae:8d:1e:06:9c:2d:
f7:24:1b:9c:40:92:22:09:d8:85:de:68:47:32:30:
e8:95:a1:3e:cd:fe:01:9a:d9:a9:0c:39:8a:72:f5:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:5C:44:2D:96:8F:65:80:58:EC:EC:A3:63:AE:2A:F0:34:BA:46
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ad:d4:6b:57:76:36:59:70:2e:76:45:ca:b5:07:34:09:ab:
96:df:05:a1:6f:83:36:90:98:89:b1:9a:8d:2c:62:8f:44:16:
42:dd:57:1b:2a:7d:ef:46:3f:4f:07:9c:d2:36:ea:f2:a2:f4:
8e:59:56:44:fa:e1:05:aa:27:37:6c:fc:25:23:b6:6a:76:16:
8b:2a:fc:75:8b:39:02:32:14:03:7c:d4:5b:64:5b:9a:60:c0:
6e:7d:4a:6d:10:77:97:22:ce:97:b1:2f:5d:00:6e:fa:73:06:
02:e5:ee:2a:04:ce:9c:63:fb:6e:3b:67:d2:ee:00:eb:d1:5a:
43:78:da:20:55:f4:6b:b8:5e:45:b2:b4:66:08:d6:5a:08:8d:
49:b7:5b:14:18:7e:74:19:a3:2c:89:52:b4:e7:c8:dc:75:99:
0f:92:7c:ed:e3:d0:3c:0f:75:48:96:11:22:7c:3a:50:23:17:
d1:5b:e1:48:96:38:c9:95:b7:47:cd:91:4d:32:96:a3:12:63:
1a:89:ae:f1:7b:7b:57:12:22:b8:a9:7b:22:ef:59:13:f8:d4:
62:e2:90:8d:aa:e0:c2:18:81:89:75:d7:b8:07:63:8b:7b:75:
95:5a:d9:37:69:a7:24:2d:24:76:ad:80:62:34:6d:92:5b:1a:
06:f8:b9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:24 2026 by rpki-client