Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: +vc5wpjF96Dj5fhrQP/q3DuZ0jRDYUZsniv0gcqWG7A=
Subject key identifier: 94:32:2B:2A:76:CA:D0:D4:9B:20:25:CB:44:76:99:35:C5:63:E9:93
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 019D9B515386E5943A53CBF0B73DC8CDD505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:01:31 +0000
Manifest this update: Fri 17 Apr 2026 12:01:31 +0000
Manifest next update: Sat 18 Apr 2026 12:01:31 +0000
Files and hashes: 1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: AGaVK/VNb694iVs4/AxZAtDpydgihInTi70LhX5O80I=)
2: muJold8C5TUMixIVaL6rH1BS38A.roa (hash: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:53:86:e5:94:3a:53:cb:f0:b7:3d:c8:cd:d5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Apr 17 12:01:31 2026 GMT
Not After : Apr 18 12:01:31 2026 GMT
Subject: CN=94322b2a76cad0d49b2025cb44769935c563e993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:c1:23:58:8d:aa:96:db:1c:c8:7b:41:ea:
cc:d4:ce:b1:1e:8b:ae:e2:95:77:8e:f3:02:d5:94:
01:69:2b:5e:4d:df:79:ce:b7:65:03:09:a8:e7:44:
b2:f6:34:b9:86:91:f9:d2:ce:62:28:cd:6a:66:29:
b7:46:2e:ed:f9:e3:a7:de:c2:cb:fe:e3:1b:1d:93:
c5:54:ba:fd:81:11:d3:b0:3f:ea:56:39:b9:c9:01:
cd:6a:81:ae:c1:4f:83:ad:4e:15:a6:fd:af:62:4a:
a1:b9:38:54:4f:48:54:6e:49:d9:2e:d9:18:4f:49:
f6:89:28:b3:4c:18:c2:a1:75:2a:41:93:08:18:8b:
6c:a6:39:96:ab:60:6e:4c:8e:81:e5:22:cd:ef:37:
93:09:33:72:46:64:bd:5f:98:1d:15:a8:17:cb:86:
0b:84:ac:ab:42:fb:48:f4:20:17:86:55:2f:d7:1d:
f8:2b:7c:ed:cd:cf:09:74:01:d9:70:0c:57:81:cc:
2c:59:fc:af:55:99:b0:66:26:81:e1:31:c6:a5:05:
93:fb:1a:db:87:54:81:e4:3b:01:29:bd:54:01:ef:
c1:63:ff:79:cc:13:e8:7d:05:9f:a5:84:35:7a:5b:
ba:cd:71:c4:d1:70:c0:ea:09:f7:ce:ce:7d:52:9c:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:32:2B:2A:76:CA:D0:D4:9B:20:25:CB:44:76:99:35:C5:63:E9:93
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e1:bd:17:73:c4:77:65:03:f6:c7:ce:a5:7b:b5:7b:8f:c6:
83:c2:13:46:9e:26:c1:24:11:d8:38:93:c4:47:d6:88:2e:10:
10:3a:4e:d0:fc:96:5e:87:2e:b2:f8:c2:c8:c1:92:ef:69:00:
66:a7:b5:e9:96:07:6c:6b:c0:ff:e8:1c:f1:67:b4:ea:69:63:
af:45:de:cb:7d:57:65:c6:f3:4e:d2:9f:22:f9:b4:d2:13:85:
7c:38:82:67:05:f9:4a:f7:c4:a3:b7:e8:ad:83:ce:d7:f9:66:
34:cc:bd:b0:1a:78:e5:b9:8f:d3:5a:51:f5:c5:15:1c:3a:2a:
2a:65:e2:87:05:c1:fd:3d:7b:4f:bd:28:c7:5a:dd:f9:66:2e:
15:3f:01:cb:3a:c5:8a:bf:0e:e4:05:26:bb:05:73:f4:f3:43:
89:c5:00:2f:77:19:68:e0:17:98:0a:12:f3:26:1e:08:1e:71:
08:5a:8c:41:96:b0:c7:00:d1:27:e6:cb:ea:6a:ee:3f:b1:b2:
bb:c3:bc:5e:40:b6:81:c0:7d:f6:f9:08:72:4b:a8:f3:1d:3f:
a8:e5:b8:a5:7e:78:49:13:01:3e:13:74:23:0e:04:17:b0:f2:
64:d5:6c:65:89:d3:0a:20:dd:f8:46:ba:a9:2c:4f:cf:0d:a3:
c4:45:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:05:33 2026 by rpki-client