Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: M8Jq5rM+pCE2l1FmGqN/ys+y68shka5q/SeKsrcuAOk=
Subject key identifier: 81:CE:0D:B6:81:05:AB:74:9F:35:7D:DE:DF:B1:FE:1A:53:27:38:86
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 019D98F54B19CA04B5404C6F3ED1767F248E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 11EA
Signing time: Fri 17 Apr 2026 01:01:45 +0000
Manifest this update: Fri 17 Apr 2026 01:01:45 +0000
Manifest next update: Sat 18 Apr 2026 01:01:45 +0000
Files and hashes: 1: 33dtqLxDvjVwskcvs1eBKxG9qW0.roa (hash: v3Uvvd01xCxk2zOvIWKmnmyUBgwjXDORZn0oG3d1w0A=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: jU/7Jvzw0G98xxmfvY9y9shVx/sPUg5K5PNGHuBnMYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:4b:19:ca:04:b5:40:4c:6f:3e:d1:76:7f:24:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Apr 17 01:01:45 2026 GMT
Not After : Apr 18 01:01:45 2026 GMT
Subject: CN=81ce0db68105ab749f357ddedfb1fe1a53273886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:9b:68:75:92:d0:92:45:5e:4b:e6:c9:b5:
a7:8a:32:a1:4c:9d:d5:3d:98:a3:af:da:97:50:e9:
e6:eb:d8:45:d3:0b:74:7e:3c:54:6b:c0:80:cd:10:
ed:e3:c8:81:a8:c3:9d:de:c1:87:2e:ee:c6:59:4a:
c7:75:44:51:a9:a3:e9:4b:68:7d:7f:02:73:9d:99:
41:13:82:c2:fc:f7:41:6f:05:6b:5e:63:65:43:1e:
d6:98:02:66:38:e6:48:15:07:68:3c:88:77:11:87:
2d:32:ce:8c:d8:d0:c5:7a:4d:4c:c6:4a:24:35:62:
1f:fe:d1:98:df:4e:1a:12:a4:9e:0d:e1:c4:f5:21:
3a:d9:26:eb:f2:cc:8f:38:3e:fd:4c:fd:b2:4d:f3:
ef:a5:bd:dd:49:43:b9:37:75:00:50:c4:6c:65:7c:
50:77:cc:75:bf:c0:ad:49:37:1d:f6:fc:6c:ca:7c:
87:b1:e6:bc:d8:50:e2:17:31:ff:ce:7d:b6:e9:3c:
c1:42:21:1c:ac:ac:83:bb:c2:5b:3e:b3:b9:7b:c9:
09:3d:0d:3e:f1:bc:dc:f9:9b:7d:bd:f9:2b:b1:83:
08:da:92:c7:7a:ea:4b:8c:86:ce:68:47:38:a4:d3:
e9:12:12:2f:7d:c5:8c:d5:4a:c9:b1:df:37:7a:17:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:0D:B6:81:05:AB:74:9F:35:7D:DE:DF:B1:FE:1A:53:27:38:86
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d6:74:0c:05:6e:84:d0:5b:88:7a:36:fd:09:0c:4e:9e:01:
cf:b9:f6:3d:d4:ef:0b:e4:c7:c6:a0:00:ee:61:63:ae:9a:87:
a3:78:60:5e:10:2c:90:ca:49:bc:2c:21:91:c0:0a:28:28:c0:
1b:58:8c:13:08:2f:19:04:5c:50:55:37:0a:b2:0a:68:0e:d5:
d9:f6:c0:c5:b5:0d:40:f7:61:23:78:4b:f2:7d:56:b7:fd:03:
1b:e0:5a:50:42:a6:69:99:62:ed:d1:d9:88:95:34:67:5d:ec:
15:2f:38:e3:35:77:fa:0c:16:f0:c2:be:af:a7:37:d7:7d:e1:
19:69:5a:01:e5:07:7f:3e:6f:24:5a:f7:ce:bd:15:34:17:f9:
19:ee:a9:76:d9:68:23:28:e8:08:eb:a2:ef:aa:dc:fa:33:75:
27:69:f4:d5:e0:60:f6:fa:df:45:cb:58:63:31:fb:78:98:0d:
ec:01:80:2e:5b:f7:90:1e:ee:f6:0f:ca:e4:ed:19:ce:ab:b7:
c7:90:66:f0:35:bc:02:7f:f5:de:ec:79:62:70:54:d7:01:22:
8d:21:c9:a1:2a:9f:9f:22:5f:29:99:4d:16:73:e5:ff:a6:12:
cc:2a:c7:46:4d:e8:4d:6e:9f:9c:28:df:6a:79:ef:6f:f8:f2:
fc:c5:2e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9UsZygS1QExvPtF2fySOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWMzZjFhOTc5MDNlNzk2MjkyYTJhYzdhNzhkNDFiMWMy
MWRiODUwHhcNMjYwNDE3MDEwMTQ1WhcNMjYwNDE4MDEwMTQ1WjAzMTEwLwYDVQQD
Eyg4MWNlMGRiNjgxMDVhYjc0OWYzNTdkZGVkZmIxZmUxYTUzMjczODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTmbaHWS0JJFXkvmybWnijKhTJ3V
PZijr9qXUOnm69hF0wt0fjxUa8CAzRDt48iBqMOd3sGHLu7GWUrHdURRqaPpS2h9
fwJznZlBE4LC/PdBbwVrXmNlQx7WmAJmOOZIFQdoPIh3EYctMs6M2NDFek1Mxkok
NWIf/tGY304aEqSeDeHE9SE62Sbr8syPOD79TP2yTfPvpb3dSUO5N3UAUMRsZXxQ
d8x1v8CtSTcd9vxsynyHsea82FDiFzH/zn226TzBQiEcrKyDu8JbPrO5e8kJPQ0+
8bzc+Zt9vfkrsYMI2pLHeupLjIbOaEc4pNPpEhIvfcWM1UrJsd83ehcu1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHODbaBBat0nzV93t+x/hpTJziGMB8GA1UdIwQY
MBaAFENcPxqXkD55YpKirHp41BscIduFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEt
ZGJkZWIzZDUzNjBiLzEvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEtZGJkZWIzZDUzNjBi
LzEvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNZ0DAVu
hNBbiHo2/QkMTp4Bz7n2PdTvC+THxqAA7mFjrpqHo3hgXhAskMpJvCwhkcAKKCjA
G1iMEwgvGQRcUFU3CrIKaA7V2fbAxbUNQPdhI3hL8n1Wt/0DG+BaUEKmaZli7dHZ
iJU0Z13sFS844zV3+gwW8MK+r6c3133hGWlaAeUHfz5vJFr3zr0VNBf5Ge6pdtlo
IyjoCOui76rc+jN1J2n01eBg9vrfRctYYzH7eJgN7AGALlv3kB7u9g/K5O0Zzqu3
x5Bm8DW8An/13ux5YnBU1wEijSHJoSqfnyJfKZlNFnPl/6YSzCrHRk3oTW6fnCjf
annvb/jy/MUumw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:46 2026 by rpki-client