Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: xAfKe4hdCBcuA7enjafSupMcRzn0vrJNCojywsI/04o=
Subject key identifier: 41:ED:66:4A:3D:5E:65:5C:2B:73:16:78:EC:92:2E:53:E8:F3:33:F2
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 019D99D067A9BA2E7AAF8F2AD36BFEB63548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 15FE
Signing time: Fri 17 Apr 2026 05:01:05 +0000
Manifest this update: Fri 17 Apr 2026 05:01:05 +0000
Manifest next update: Sat 18 Apr 2026 05:01:05 +0000
Files and hashes: 1: GLWh56MMEykKTE4rrV87G9Vgki8.roa (hash: 02Z7LQfQNnw59BWb8xFGQ1xpLvcBlJFnepDp+x8RT7E=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: tPYoOgBZQ7JD2fRiRvxdVEyYnXsnqUzuRnhlp86JBog=)
3: w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa (hash: Rh0VsCvy2O3VBR0z+FrTOlGdPanimSzIyXLHmJJMba4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:67:a9:ba:2e:7a:af:8f:2a:d3:6b:fe:b6:35:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Apr 17 05:01:05 2026 GMT
Not After : Apr 18 05:01:05 2026 GMT
Subject: CN=41ed664a3d5e655c2b731678ec922e53e8f333f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:0d:d2:44:ba:ef:31:8f:d8:60:02:f3:1e:
02:c0:8f:8e:a7:3b:8e:8c:f9:d9:9c:6b:b2:bc:c4:
04:79:54:2b:bc:0b:48:6d:48:9a:93:53:f3:05:d2:
7b:9b:25:53:9a:47:df:b4:af:9c:0d:ee:58:7f:ea:
08:9f:c3:50:ff:15:0d:c0:c3:97:bc:cd:4f:3e:10:
dd:4b:5d:23:25:42:0b:bd:57:cd:36:b6:4f:d4:72:
34:e5:4c:3d:d0:c9:57:02:8b:c1:39:d4:e0:1d:cc:
ef:80:0a:b2:15:1f:42:7b:12:7e:9e:5f:2d:64:93:
3a:ef:60:0a:a9:e2:fb:3a:b3:e4:5a:cd:55:53:cd:
a1:b1:1d:43:4a:51:9f:e1:33:0e:b2:51:3d:6d:ed:
e6:dc:47:76:14:52:5d:59:ac:cf:3b:da:af:2c:8d:
99:c7:01:5e:10:da:14:2b:ef:6a:e5:7d:c5:1e:02:
98:c9:ba:ae:86:1a:f5:f3:90:57:49:68:7a:40:08:
91:f9:80:48:cb:97:17:3b:aa:d1:0a:b8:dc:c6:82:
93:d3:f9:8c:94:5c:c3:a5:70:45:27:46:a2:39:19:
86:a7:a4:6d:fe:69:3a:83:dc:72:98:ca:29:b9:0e:
7e:f0:f6:95:e5:4a:bc:9f:dc:e4:dd:c4:1e:39:04:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:ED:66:4A:3D:5E:65:5C:2B:73:16:78:EC:92:2E:53:E8:F3:33:F2
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8d:71:9f:5c:82:be:d4:71:cc:0c:4e:e3:f7:a9:32:a3:89:
15:23:7b:ae:00:f1:e1:27:6d:17:62:10:cc:19:ab:18:53:47:
bd:23:8e:30:d4:85:0b:4a:bc:eb:aa:26:0e:bd:d7:6d:91:a1:
90:05:c9:bd:d2:5d:9a:df:63:e7:97:a9:71:c9:05:7d:bb:0a:
3f:1b:f5:42:47:29:56:5e:3d:31:e0:3d:ba:6c:3c:36:fb:a1:
44:27:7b:c1:0b:51:f8:a1:29:a8:66:35:c8:55:90:0b:30:74:
f8:1f:57:b3:ff:83:00:79:c8:c3:5a:40:b5:19:d5:c4:63:28:
f1:34:14:79:69:c4:48:1f:80:c5:c8:aa:eb:b5:ad:44:4d:e3:
90:a5:35:fb:a2:d3:45:37:04:d2:8d:41:e8:9e:05:36:6b:38:
02:8d:8d:dd:1e:f1:28:be:c2:75:29:ba:c6:35:53:ca:63:6c:
9e:04:4e:bb:56:c2:39:dc:8a:cf:96:7a:64:29:bb:b9:f2:01:
ef:7e:c7:a9:b9:10:b3:30:4b:9d:5c:2c:53:51:9a:e5:24:89:
70:53:47:00:b3:76:76:3b:a8:b8:d5:b5:b2:26:5e:9b:f4:ca:
13:7a:0c:6d:34:50:ed:af:ae:b4:cb:20:22:37:10:45:29:85:
b6:92:e0:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Gepui56r48q02v+tjVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk
NDU0ZWYwHhcNMjYwNDE3MDUwMTA1WhcNMjYwNDE4MDUwMTA1WjAzMTEwLwYDVQQD
Eyg0MWVkNjY0YTNkNWU2NTVjMmI3MzE2NzhlYzkyMmU1M2U4ZjMzM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz40N0kS67zGP2GAC8x4CwI+OpzuO
jPnZnGuyvMQEeVQrvAtIbUiak1PzBdJ7myVTmkfftK+cDe5Yf+oIn8NQ/xUNwMOX
vM1PPhDdS10jJUILvVfNNrZP1HI05Uw90MlXAovBOdTgHczvgAqyFR9CexJ+nl8t
ZJM672AKqeL7OrPkWs1VU82hsR1DSlGf4TMOslE9be3m3Ed2FFJdWazPO9qvLI2Z
xwFeENoUK+9q5X3FHgKYybquhhr185BXSWh6QAiR+YBIy5cXO6rRCrjcxoKT0/mM
lFzDpXBFJ0aiORmGp6Rt/mk6g9xymMopuQ5+8PaV5Uq8n9zk3cQeOQSSXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHtZko9XmVcK3MWeOySLlPo8zPyMB8GA1UdIwQY
MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt
N2E3MmUyNmM4OTE4LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4
LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaI1xn1yC
vtRxzAxO4/epMqOJFSN7rgDx4SdtF2IQzBmrGFNHvSOOMNSFC0q866omDr3XbZGh
kAXJvdJdmt9j55epcckFfbsKPxv1QkcpVl49MeA9umw8NvuhRCd7wQtR+KEpqGY1
yFWQCzB0+B9Xs/+DAHnIw1pAtRnVxGMo8TQUeWnESB+Axciq67WtRE3jkKU1+6LT
RTcE0o1B6J4FNms4Ao2N3R7xKL7CdSm6xjVTymNsngROu1bCOdyKz5Z6ZCm7ufIB
737HqbkQszBLnVwsU1Ga5SSJcFNHALN2djuouNW1siZem/TKE3oMbTRQ7a+utMsg
IjcQRSmFtpLgvw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:50 2026 by rpki-client