Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: d5+9D8/03CGA/kyp3FhOlq4gBKrjdF7k4AFVv0B7lYk=
Subject key identifier: 79:A1:22:A4:AA:14:8D:29:06:81:41:B7:DD:70:A4:71:B7:2F:8E:8F
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 019D9962622DF67A589125BE29179614509D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:54 +0000
Manifest this update: Fri 17 Apr 2026 03:00:54 +0000
Manifest next update: Sat 18 Apr 2026 03:00:54 +0000
Files and hashes: 1: l8Y52p5aI63FDuq51m4qJ-mPHY4.roa (hash: wSpWuBqn1Tlul2t7+8SYMlOp535GnFPP8F8ir7MJTSU=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: 37trJuKfgssOl7QCw30zl19V/xBp+YR7iKzxMjBw4Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:62:2d:f6:7a:58:91:25:be:29:17:96:14:50:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Apr 17 03:00:54 2026 GMT
Not After : Apr 18 03:00:54 2026 GMT
Subject: CN=79a122a4aa148d29068141b7dd70a471b72f8e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:f6:9a:c4:6b:2e:4c:70:06:e9:20:ef:db:
1c:0f:bf:18:b7:6a:c0:12:a8:c3:7a:b1:30:7d:69:
10:37:24:1a:73:97:66:1f:77:b8:79:23:fd:90:60:
73:63:07:3f:b9:37:83:fd:ff:91:d6:a9:06:76:7d:
26:56:42:b7:6a:41:c5:66:5f:2a:c2:d9:11:6d:e3:
0b:21:a1:a5:e1:04:7d:6e:38:15:e2:58:ca:a6:19:
ef:ff:30:0f:42:19:c6:b8:ac:52:9f:aa:9a:a3:1a:
67:72:c6:4d:95:03:b1:a4:d0:bc:27:4b:10:4d:c7:
b4:b5:08:89:b0:79:99:8c:40:ae:ef:f0:5a:21:7f:
8c:b3:1e:d6:1b:96:93:1a:06:c7:39:6e:28:1d:bc:
0c:f0:92:ee:20:38:91:54:5a:b9:be:11:bd:a8:04:
3f:7a:82:70:38:42:e1:11:a7:0a:a0:45:86:0c:d2:
23:cc:a7:ee:d5:49:7b:4c:31:21:5a:d1:ec:77:22:
c3:f9:bf:61:83:db:5c:d2:91:5d:0e:b8:6c:3e:40:
10:d3:2a:f0:b3:9c:94:0a:f0:87:3f:b5:4d:a8:13:
13:09:07:ce:9b:e8:49:e5:56:c9:9f:52:e3:02:9f:
2c:3a:a4:6d:3b:a1:d0:9b:97:44:ea:30:8b:50:51:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A1:22:A4:AA:14:8D:29:06:81:41:B7:DD:70:A4:71:B7:2F:8E:8F
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9c:4a:6e:0b:f3:74:0f:61:5d:b5:dc:f2:0f:2c:e4:1a:99:
3e:40:17:54:95:e8:c9:72:53:4f:86:7d:a9:a3:20:26:1d:29:
27:ac:d9:89:28:91:ce:2b:19:f7:06:a3:bd:96:14:55:61:6d:
fa:1e:61:41:15:a3:39:67:f9:9c:e6:08:32:7d:65:56:49:78:
91:c2:83:8c:ef:d5:14:b9:bd:6e:fc:4f:83:73:0f:dc:44:23:
a3:b0:34:89:ca:f0:d2:a2:7b:19:98:3a:e2:fe:1d:a0:cd:0c:
bc:51:ad:ff:92:62:6e:dd:e4:7a:fb:25:0f:06:03:cb:e7:e4:
de:b6:ee:42:19:af:21:5b:23:7c:15:93:0a:09:a4:40:b9:46:
20:fc:82:26:c6:87:64:c6:29:4a:3d:33:32:ae:78:5e:09:11:
9a:3c:ff:a1:58:a1:79:f7:09:ef:f5:9b:6f:cd:11:01:23:83:
da:c9:9f:da:8d:51:a8:3b:53:b4:df:5d:b8:5b:33:7c:36:23:
5c:c2:37:e7:8c:16:3d:db:72:6f:f4:53:74:28:28:ea:3f:ab:
a3:8b:e7:08:91:00:15:d7:cb:7a:49:5d:be:a1:75:37:0e:1a:
60:0e:ab:45:09:cd:bd:0a:bd:74:27:6c:ab:e9:d9:40:e3:9e:
4f:fc:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:33 2026 by rpki-client