Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: hFhC8dbYUVgqkXzWXlCj3Zac51Ujq1L5X76gCI+KqwI=
Subject key identifier: 21:7E:E2:4C:55:2B:A2:4E:A8:84:93:DE:18:56:44:30:D6:F9:A1:3E
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 019D9BBE2AC6271E8E75B23A48C0BA6B36B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 08D7
Signing time: Fri 17 Apr 2026 14:00:24 +0000
Manifest this update: Fri 17 Apr 2026 14:00:24 +0000
Manifest next update: Sat 18 Apr 2026 14:00:24 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: 3CI6SJxIAQb7HS787ukoZT8FnaH02HkvKYk+WNobh9g=)
2: q92f6dR-iX4C-CVcHHlSJfjRbjA.roa (hash: 5e9T1SkG/kIEUC1gZXSHnISGiuKNuBXnH3Nj4yFHRek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:2a:c6:27:1e:8e:75:b2:3a:48:c0:ba:6b:36:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Apr 17 14:00:24 2026 GMT
Not After : Apr 18 14:00:24 2026 GMT
Subject: CN=217ee24c552ba24ea88493de18564430d6f9a13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:bb:44:9b:00:81:64:cd:65:cf:a6:d8:da:
f2:99:da:07:71:31:a3:5a:14:4c:42:91:c3:1a:fc:
67:cd:ee:f5:5c:94:e6:75:93:01:3e:46:f9:a3:03:
59:cf:57:0e:df:cf:60:6f:17:b4:34:ae:08:45:f4:
63:b1:09:3a:f5:c9:dd:20:d3:22:c5:c0:ae:24:f9:
d6:19:f6:ba:9e:51:ec:79:65:84:d6:54:31:f5:7f:
99:4c:7a:c0:86:dc:2a:21:8d:08:63:5d:10:cc:aa:
9e:a7:ae:14:e7:ea:16:02:6c:f7:0c:67:ce:24:c1:
93:b0:0c:68:f5:07:28:8e:40:32:b1:8d:da:fa:8b:
4c:18:67:78:00:b7:9d:8f:35:61:65:a4:7e:29:80:
56:15:3b:18:b9:b5:ab:05:27:4c:f2:49:94:13:0f:
1b:ca:d9:a2:03:36:ee:db:cf:6d:25:4e:5a:ba:b2:
16:fa:1f:36:df:ff:e7:f2:b3:05:e6:cf:bd:c4:bb:
39:01:27:6c:de:b5:d4:47:9e:59:c0:71:8a:a0:85:
a9:4e:8a:6c:97:17:9d:f4:9b:9a:51:78:4a:f4:aa:
26:33:ae:9e:c9:84:23:ff:ec:c2:dd:85:1e:88:ef:
a9:d2:5a:4d:0c:cf:4d:e9:14:23:98:95:ae:bd:44:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7E:E2:4C:55:2B:A2:4E:A8:84:93:DE:18:56:44:30:D6:F9:A1:3E
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:65:00:f5:b2:55:11:1f:5c:41:0f:02:96:17:0d:36:18:3e:
11:c9:de:dd:01:8b:9f:a5:06:fb:a3:07:8f:a4:12:96:76:92:
c6:cf:f3:86:2e:86:e0:09:fe:23:f3:01:11:8c:28:b3:4c:f1:
5b:96:15:76:b7:53:50:b6:f5:2a:83:12:89:6e:05:12:47:1a:
0a:3c:c9:84:7c:9f:6a:2f:85:cf:34:03:84:36:30:6c:a1:0a:
9d:2c:d4:71:41:ff:53:3b:54:d9:61:e7:34:cc:91:b4:32:2f:
57:11:d6:cc:e9:08:dc:b6:94:1e:4b:1f:d8:42:2d:4b:34:58:
bb:97:a4:d3:c0:7c:10:b0:bb:b3:53:85:c7:4d:71:c6:f1:19:
5a:de:cb:38:49:4a:ce:ba:be:d9:0e:56:e3:d8:fb:c4:1d:a6:
8e:9b:f1:20:62:b3:2d:2e:4c:13:37:60:33:b2:50:77:76:6f:
1e:81:84:d4:02:34:8d:d5:92:67:22:fb:eb:71:7c:c9:c0:f8:
36:64:46:fb:73:8f:99:9e:40:cd:65:eb:e7:5c:a1:47:b5:0d:
53:84:56:71:91:ef:dd:f4:1f:13:f4:99:7d:9a:0c:0b:7e:a9:
85:2f:a6:b6:9b:c9:b1:73:16:f8:9b:45:db:ee:a3:6f:d9:8e:
e7:70:f3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:35 2026 by rpki-client