Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: BDwGca/6FypPaztrJqh5R5cZL/1VGZAi1gUEx1Q7Eo4=
Subject key identifier: 15:F4:5C:30:70:20:A0:E9:40:43:E0:AD:32:0A:BE:20:3D:DC:E6:AA
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 019D984F9C2188D18BF15A4AD5503D58AFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0FF7
Signing time: Thu 16 Apr 2026 22:00:47 +0000
Manifest this update: Thu 16 Apr 2026 22:00:47 +0000
Manifest next update: Fri 17 Apr 2026 22:00:47 +0000
Files and hashes: 1: GuUQabt2k0I5-qJJOMBc68ywwdc.roa (hash: Xq2BynkEhHcna9VYb0KvlZPGBlElBggMhxm3EhEPnM0=)
2: NSXY549oyeJh_ywPWUFsoFAfnFE.roa (hash: PqAKJQyPO77ShWqR8N9V3ypCb33ovrN70zA1E2ZocLc=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: RjtjHBKwa/AycKBco1p3TQFUI4Pu9QCc7aeVob2AIq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:9c:21:88:d1:8b:f1:5a:4a:d5:50:3d:58:af:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Apr 16 22:00:47 2026 GMT
Not After : Apr 17 22:00:47 2026 GMT
Subject: CN=15f45c307020a0e94043e0ad320abe203ddce6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:25:f7:60:8c:9a:2c:31:8e:58:a7:f8:92:
f1:12:32:85:9b:ad:7c:58:47:78:fd:2e:54:09:d3:
aa:1b:b8:63:7b:54:14:d2:b3:79:7e:87:80:ab:71:
52:ef:32:05:a6:23:8c:f2:76:91:84:b3:43:16:37:
9f:a6:2a:20:49:f6:02:11:67:27:1c:05:7e:ea:e1:
b5:6f:24:55:77:d2:9f:e1:e5:16:23:40:09:7c:e8:
04:5e:c3:84:c4:87:a0:76:57:e9:9a:8c:b4:3f:ad:
72:11:6b:36:c9:2f:04:62:61:47:f3:ad:17:dc:2a:
81:2d:e3:de:b1:54:63:f6:77:f9:18:0e:a1:3c:dc:
3a:f0:e3:ab:2b:29:c5:2e:95:16:bf:a7:82:4a:cb:
60:5a:a2:25:17:5c:69:07:7c:1c:9d:91:a9:f3:eb:
00:c1:a5:80:63:ce:f0:ad:a5:b6:5d:72:d4:33:f4:
9a:54:52:af:09:06:b7:c8:af:5e:0a:59:b6:bc:96:
4e:33:10:47:84:88:f3:8f:a8:4e:a6:a2:bd:1d:29:
61:37:0b:9b:92:d5:18:4f:11:cf:b6:69:74:ea:3f:
43:0f:2f:3d:06:61:af:e9:2c:a4:02:b7:29:53:83:
bc:96:87:b6:81:68:b2:af:0e:f5:b1:70:79:c3:c3:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F4:5C:30:70:20:A0:E9:40:43:E0:AD:32:0A:BE:20:3D:DC:E6:AA
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:67:e6:59:67:18:51:f6:8c:a6:17:43:c7:73:4e:48:65:e3:
95:46:cc:85:97:54:db:a6:85:7f:a5:cd:59:4a:5e:73:06:77:
f5:5a:f0:26:5d:80:24:71:b3:aa:3c:b5:82:54:9d:9c:55:7c:
c0:c8:f0:d0:25:68:b0:f3:f3:cd:37:2b:51:0d:72:c9:e7:cd:
a7:ae:e0:07:af:98:96:f6:5f:96:99:d6:1d:c9:b1:2c:b9:66:
89:23:4e:e4:59:75:76:cb:90:7f:30:80:71:99:0c:7f:65:54:
ab:92:69:72:ae:d1:bc:3c:58:fd:0d:84:51:ab:5e:ad:50:c7:
12:6e:48:6a:3d:e1:95:3c:4c:d2:4b:df:8b:50:87:9f:f6:b9:
cb:42:97:9c:b1:42:2c:cb:e5:9a:85:9d:f4:96:33:c9:25:3e:
3f:bd:9c:3a:89:4d:72:94:b4:d7:64:91:6c:59:9a:5c:6f:20:
17:aa:1a:b5:c2:a9:6c:bd:52:0f:fe:32:e5:f2:50:99:57:87:
ed:db:b7:da:fb:03:f0:c8:95:b2:01:94:a9:6e:04:3e:79:75:
27:62:d2:9b:02:7c:7e:1b:ae:7f:34:ac:a3:3c:30:62:6d:60:
74:98:c2:59:f7:ed:17:3d:c1:48:86:63:9f:aa:20:56:43:55:
ce:21:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:08:04 2026 by rpki-client