Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: X1e9mQjlD9r8FuaZXUK7Ai2co/Np6vB+oiLFbYYoky0=
Subject key identifier: 10:3B:70:DF:BA:7C:1B:D2:59:21:D0:C0:46:E4:C1:B3:6C:2C:1B:A2
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 019D98BE09DAB82012B4381C239E1EBD41C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0F42
Signing time: Fri 17 Apr 2026 00:01:24 +0000
Manifest this update: Fri 17 Apr 2026 00:01:24 +0000
Manifest next update: Sat 18 Apr 2026 00:01:24 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: eVv2bPsRH+0D1AW1kwmbWFfVS2Mrxvs6ATtU9XueYEg=)
2: jBBia4spWrLZ9kca7mX-CRNEOzY.roa (hash: qc1+ZFIzhBfFEWyuznbTHHa1NN9KaHansxKNqQ0bhSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:09:da:b8:20:12:b4:38:1c:23:9e:1e:bd:41:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Apr 17 00:01:24 2026 GMT
Not After : Apr 18 00:01:24 2026 GMT
Subject: CN=103b70dfba7c1bd25921d0c046e4c1b36c2c1ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:21:61:cc:d4:38:87:11:4b:c5:be:99:74:
78:75:85:d6:d1:60:5b:9e:76:3f:c3:c9:8a:c9:bd:
6a:e1:0e:b5:2a:f4:b6:64:7a:3b:ee:64:06:c1:0d:
51:22:80:83:b3:e7:77:c0:9b:4b:5a:50:f6:4d:2b:
9e:92:60:99:d7:50:0c:7e:07:46:5f:7a:10:45:9f:
43:01:d0:99:58:55:6d:8e:12:d4:f6:90:65:7a:78:
33:38:0c:6b:25:39:e1:4b:de:e8:1e:b1:87:23:0e:
8e:de:5d:a2:0b:10:1c:58:40:0d:e9:22:5b:67:3c:
e8:5f:d1:f4:a7:89:b2:6d:4b:5d:38:bc:ea:f7:c9:
de:98:cd:5b:34:97:6e:19:1a:df:35:b8:13:4f:14:
e0:7e:c0:a0:38:eb:67:53:56:76:3f:3c:d0:8f:09:
72:91:b5:63:fa:a1:a7:7d:3d:34:2c:e7:9b:3e:0d:
b6:07:9e:fe:e3:9c:ca:ee:f0:f5:8f:a6:dc:b4:f1:
1e:18:e0:e1:bb:2a:fe:90:b0:ea:89:c0:d3:33:d2:
01:06:1f:6b:aa:c3:58:65:bd:4c:41:01:70:e2:b7:
b4:9e:8d:9b:d7:e1:c1:3d:e6:cf:a8:c8:cb:6b:15:
0b:c6:0a:4f:c3:d8:1e:eb:0b:73:97:fa:9c:12:4d:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:70:DF:BA:7C:1B:D2:59:21:D0:C0:46:E4:C1:B3:6C:2C:1B:A2
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e3:2b:65:4f:b0:1d:d7:aa:9a:57:a8:f5:ad:3d:3e:0a:79:
49:59:60:38:32:cf:fe:d6:42:71:48:24:b3:3b:7a:05:3e:93:
23:38:23:b0:05:f6:f4:6b:cb:24:81:7a:6c:60:29:81:83:b7:
f1:3f:ce:f1:b0:be:0c:73:0f:51:ac:7d:2f:a3:38:9a:87:8c:
a0:5e:67:2b:7b:ed:5f:e5:de:72:f6:d2:01:40:32:4c:f2:c1:
41:39:07:11:ee:35:57:a2:11:35:d0:b3:54:e1:73:ef:89:7f:
79:6d:46:bd:7a:06:28:c5:7a:2b:bf:00:8a:df:1b:af:1d:0b:
d3:7f:68:7c:98:e0:a2:08:af:97:e2:a3:95:58:bc:61:96:d8:
16:f8:73:63:b6:e0:ce:e7:31:79:22:5d:c9:85:1d:8a:23:b8:
f2:81:3b:cd:9d:1c:04:8f:b4:1a:ed:5a:71:75:f5:53:bd:33:
92:83:1c:3e:54:e7:42:40:3a:df:14:1e:f9:d0:57:46:70:9a:
dc:81:8b:ea:da:1a:ef:a4:bc:7f:7c:77:64:bc:9e:1a:e2:88:
0d:43:72:e7:6b:6b:0d:85:4e:c7:c6:23:05:76:97:cf:92:15:
19:19:24:98:6f:8a:6f:0b:1d:16:b3:31:82:04:f1:42:00:d0:
3e:bb:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:20 2026 by rpki-client