Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: 3fikSMbkcCJL506h+HOHdDV+qGT1Wn0sOwtXGLhgSsY=
Subject key identifier: 7B:95:1B:EE:A0:E1:56:1A:27:0F:E0:DA:6E:72:64:D6:11:B4:CC:52
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 019D999967AB938A27C2C53D28418431A86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 04:01:00 +0000
Manifest this update: Fri 17 Apr 2026 04:01:00 +0000
Manifest next update: Sat 18 Apr 2026 04:01:00 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: NJBcIb2J+e4zXaVqmrKBo139RBbI197aXBZ+EAOmtms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:67:ab:93:8a:27:c2:c5:3d:28:41:84:31:a8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Apr 17 04:01:00 2026 GMT
Not After : Apr 18 04:01:00 2026 GMT
Subject: CN=7b951beea0e1561a270fe0da6e7264d611b4cc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:aa:f0:1e:04:58:92:dc:70:7a:55:d0:02:
c1:4c:0f:1f:3a:0b:73:5b:ea:84:e4:36:6c:0d:02:
3e:7c:14:44:a2:a0:4f:76:2d:bc:a9:37:24:cb:35:
d5:6a:05:18:04:fc:ea:f9:17:41:6d:f6:10:c7:d5:
3b:17:1d:77:1d:fb:95:ba:54:da:34:17:2b:21:05:
19:ea:c2:d2:f9:50:9d:44:76:d9:c1:cf:83:21:83:
d3:f0:70:a8:35:97:9c:2c:17:3f:c7:36:5a:51:70:
5b:19:39:2d:8c:f4:68:74:6f:94:a4:1c:b6:3d:11:
8d:67:cc:0b:f6:2d:0d:8f:bf:09:14:3c:1a:4f:8c:
77:b6:fc:83:c7:f1:33:f7:95:3c:3d:a6:e1:0d:28:
e7:21:fe:a5:16:f5:ae:48:04:40:83:a7:9a:15:90:
6e:d1:d7:97:89:cf:6e:39:35:c7:ff:85:c7:ed:3f:
4b:29:41:26:c2:48:c0:fd:ea:c1:4e:46:2d:a6:c3:
80:26:51:2c:aa:fa:ce:51:53:75:e2:ee:20:f6:2d:
d0:f3:7d:23:cd:b5:fb:ae:af:fd:5e:c1:93:3d:9d:
c5:40:47:55:5a:c5:9c:43:6b:2c:4b:b3:8c:cf:bb:
10:53:65:0f:01:c0:de:15:85:71:2a:91:fc:f9:59:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:95:1B:EE:A0:E1:56:1A:27:0F:E0:DA:6E:72:64:D6:11:B4:CC:52
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fa:c0:d3:7a:46:db:a2:35:42:76:4a:4a:ac:74:6c:a5:de:
04:be:ea:59:01:aa:1a:0b:03:89:10:c5:29:1d:a7:30:f6:b8:
f5:0b:fd:e7:e9:e5:7d:5d:a5:7b:c1:0b:57:46:59:7b:26:c3:
48:b6:53:f4:b7:e2:47:c4:11:1b:92:26:07:38:e5:cd:71:6c:
63:d2:07:ce:e5:0e:5e:d6:3a:64:f3:31:b6:cd:89:8d:9d:91:
fe:63:d7:07:57:94:07:0a:4f:8e:37:86:2a:50:b1:fc:15:c0:
d2:dd:09:1c:20:5e:05:af:ec:dc:5d:bc:c5:7c:a1:e8:bb:41:
e4:f6:50:30:aa:16:7c:7f:41:66:77:5e:23:15:96:94:93:9b:
29:6c:8b:1b:ba:67:0a:c9:a9:97:4c:41:5d:78:a4:cd:0f:62:
23:9e:d5:e5:66:26:ba:0d:85:b8:b2:d6:65:1b:f3:dd:a2:3d:
ff:70:44:6e:a0:a0:7e:c7:2f:8e:85:cf:e9:9e:13:0f:ad:d9:
8d:69:66:ee:6a:2e:77:35:d8:6d:a9:59:e9:bc:f9:df:53:57:
8b:d4:7d:87:0f:29:70:11:ee:bb:a7:9a:8d:d4:af:9f:49:82:
bf:df:5c:5f:57:3c:54:27:64:4e:48:59:7b:f6:9b:59:74:eb:
90:bf:65:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmWerk4onwsU9KEGEMahqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDkzM2U4MjQ3NDY1MGM2YWEzZTljYmYwNTc0ZDI3Mjg2
NTkyZTcwHhcNMjYwNDE3MDQwMTAwWhcNMjYwNDE4MDQwMTAwWjAzMTEwLwYDVQQD
Eyg3Yjk1MWJlZWEwZTE1NjFhMjcwZmUwZGE2ZTcyNjRkNjExYjRjYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOKq8B4EWJLccHpV0ALBTA8fOgtz
W+qE5DZsDQI+fBREoqBPdi28qTckyzXVagUYBPzq+RdBbfYQx9U7Fx13HfuVulTa
NBcrIQUZ6sLS+VCdRHbZwc+DIYPT8HCoNZecLBc/xzZaUXBbGTktjPRodG+UpBy2
PRGNZ8wL9i0Nj78JFDwaT4x3tvyDx/Ez95U8PabhDSjnIf6lFvWuSARAg6eaFZBu
0deXic9uOTXH/4XH7T9LKUEmwkjA/erBTkYtpsOAJlEsqvrOUVN14u4g9i3Q830j
zbX7rq/9XsGTPZ3FQEdVWsWcQ2ssS7OMz7sQU2UPAcDeFYVxKpH8+VkvtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuVG+6g4VYaJw/g2m5yZNYRtMxSMB8GA1UdIwQY
MBaAFEDZM+gkdGUMaqPpy/BXTScoZZLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3Njct
ZTY4MWViYmE0YTRhLzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3NjctZTY4MWViYmE0YTRh
LzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvrA03pG
26I1QnZKSqx0bKXeBL7qWQGqGgsDiRDFKR2nMPa49Qv95+nlfV2le8ELV0ZZeybD
SLZT9LfiR8QRG5ImBzjlzXFsY9IHzuUOXtY6ZPMxts2JjZ2R/mPXB1eUBwpPjjeG
KlCx/BXA0t0JHCBeBa/s3F28xXyh6LtB5PZQMKoWfH9BZndeIxWWlJObKWyLG7pn
Csmpl0xBXXikzQ9iI57V5WYmug2FuLLWZRvz3aI9/3BEbqCgfscvjoXP6Z4TD63Z
jWlm7moudzXYbalZ6bz531NXi9R9hw8pcBHuu6eajdSvn0mCv99cX1c8VCdkTkhZ
e/abWXTrkL9l6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:01 2026 by rpki-client