Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File: qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier: pZduL8RVWBuCPMHxwigEzFBfwhp1FScqSWGdE7C0yD8=
Subject key identifier: 09:90:07:9B:50:61:64:BD:68:7D:C4:C5:39:AC:B6:B8:BE:4D:16:C9
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 019D9A3E859348A993F7CC87098E372F745F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 07:01:21 +0000
Manifest this update: Fri 17 Apr 2026 07:01:21 +0000
Manifest next update: Sat 18 Apr 2026 07:01:21 +0000
Files and hashes: 1: 9svF7XV_8rFyGg_nZWGhuxLsBGo.roa (hash: HYZcH7ciR/GKsfvNl9giR0/lMm/wD2BnMycPbF+v6tY=)
2: O7qjLnP-Av_AUI_nXwDm6aTNtiM.roa (hash: b0YiOln+6ee3N+tmIgf41n0TuffzExlmKLzTRwsvrs4=)
3: Ttr7foitcHqzKL5tFDo4aAXiRHs.roa (hash: l+KPWtcu5vk+NW1gY++Z3UuQD8IwIIkC3ZQ3BVE/Egc=)
4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: YLeHPVWthIaCmOyektRhKM8tqKp2DGuMbXdIIPZFf00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:85:93:48:a9:93:f7:cc:87:09:8e:37:2f:74:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Apr 17 07:01:21 2026 GMT
Not After : Apr 18 07:01:21 2026 GMT
Subject: CN=0990079b506164bd687dc4c539acb6b8be4d16c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:23:c2:26:f4:14:44:54:81:01:27:de:d2:
7a:cb:85:74:16:20:ae:c5:f2:94:6a:0e:d1:d1:67:
1e:fe:d7:8f:b6:74:41:86:1e:b1:7c:3e:34:24:58:
4a:6c:de:13:76:72:37:69:e1:2e:7d:b7:9e:40:4e:
e0:f5:1f:04:d1:e7:92:c6:a9:25:b0:e6:69:e1:0e:
d8:5d:4c:28:01:8a:65:52:1e:32:01:b1:34:6b:c6:
29:a9:e4:5e:d2:94:0e:42:06:4c:14:5c:f6:1f:1a:
84:23:12:d3:9b:36:1a:7e:dd:0c:b3:d1:6c:a8:8a:
9b:ed:a1:88:bc:95:83:38:4a:9b:3d:b2:89:5c:73:
2e:4e:24:c1:24:f0:df:e4:99:1a:fc:84:9d:3b:7b:
48:4a:45:ae:6b:4d:43:18:28:48:18:64:2d:68:d5:
5e:6d:eb:19:1f:85:32:93:d7:ea:a4:f7:af:bd:56:
0f:bd:07:8a:f6:70:ec:2d:05:9d:6e:3a:50:dc:ee:
05:2f:6e:6b:46:e6:a4:74:ff:25:f5:3c:e7:96:78:
63:95:df:9a:6f:7b:e7:cb:5d:d0:7b:5f:9f:20:1f:
a2:9c:3a:cf:25:5b:1e:e0:e6:5f:19:52:c0:39:cf:
54:99:3c:9a:a1:a0:67:e0:3d:d1:44:c7:0a:d0:c9:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:07:9B:50:61:64:BD:68:7D:C4:C5:39:AC:B6:B8:BE:4D:16:C9
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ba:12:de:e6:ac:35:d8:07:80:73:dd:23:42:ef:c9:f5:af:
2a:46:80:7b:8e:f5:b6:62:01:0a:1d:c1:62:38:16:1c:02:88:
1a:12:80:4b:84:41:83:b4:08:8d:a2:f8:24:5a:33:0d:94:e7:
02:fc:92:d6:7f:5a:78:9d:4c:d7:62:14:82:01:93:c1:2a:6f:
3a:80:23:f4:08:cc:95:ca:57:8b:a6:f5:99:e4:88:b6:4f:5e:
a8:19:20:43:b2:aa:66:bc:26:e2:01:ff:0a:9e:ae:2e:e2:46:
37:09:3b:26:c1:fc:0f:d9:cf:b5:7b:cb:bc:70:8e:6e:cb:69:
95:76:99:2c:58:e8:fb:50:6e:62:d3:a0:a7:79:21:2d:34:ef:
4b:9a:65:39:c9:5b:c4:d4:b5:15:5b:f3:1e:06:69:87:b5:12:
db:04:15:e1:4b:e5:67:c5:8a:0d:89:e1:cd:59:bc:7a:ab:a3:
83:27:05:c3:bb:a0:97:33:44:15:a2:ce:68:cb:b0:44:53:b8:
1e:ee:08:66:52:da:dc:2d:87:c9:30:fe:07:87:39:45:84:a9:
cf:17:ed:21:22:76:76:87:50:85:76:64:b7:5e:f7:70:df:6d:
fa:e0:14:a4:33:0a:ba:ac:63:3c:d8:47:f2:ca:f9:16:d4:ea:
a2:d4:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:36:45 2026 by rpki-client