Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: /GrMZPmSb5FHagP2my2Qk/vgXQOtQjLRhAD8oOCqoXY=
Subject key identifier: 4C:05:C5:B5:5C:2E:7E:5A:A3:4B:40:A5:64:88:8E:E9:5F:81:0B:6D
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 019D9998F95A48354BA297ED098AE165C30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 0FA8
Signing time: Fri 17 Apr 2026 04:00:32 +0000
Manifest this update: Fri 17 Apr 2026 04:00:32 +0000
Manifest next update: Sat 18 Apr 2026 04:00:32 +0000
Files and hashes: 1: 0rfYrVviZUVYPptqvM07XCjMZN8.roa (hash: NsAvwSlgjtFhEFUQcFrnr4l17cyyPI73mz93IQlKjBw=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: Ak9arrTXkzC8j9abRca361L60WjdiaCaydVwb/zq4Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f9:5a:48:35:4b:a2:97:ed:09:8a:e1:65:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Apr 17 04:00:32 2026 GMT
Not After : Apr 18 04:00:32 2026 GMT
Subject: CN=4c05c5b55c2e7e5aa34b40a564888ee95f810b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:ec:64:ae:14:1c:23:c3:91:4a:1e:3e:19:
6c:e7:61:8e:84:95:b8:d4:0b:3f:c6:b6:ba:eb:f6:
92:46:f9:b9:70:79:3d:5d:d7:32:00:a8:0b:14:83:
d9:db:90:99:4e:91:9b:55:5b:7d:87:9c:50:a6:de:
6f:8c:b6:1e:58:91:9a:37:8d:ed:a8:87:13:bc:1a:
e6:bf:ec:06:27:25:ed:d8:20:3d:43:7d:87:77:65:
d3:43:de:84:3c:5b:63:74:36:cb:de:a5:d9:aa:cb:
f7:21:a6:65:c1:74:fb:49:58:3a:a2:c5:f9:5e:ea:
92:1b:9c:ca:9b:8e:ca:cc:c1:cc:e6:b1:a7:61:e2:
13:41:d1:41:ec:fb:2e:b0:b3:d8:03:35:d5:7b:c5:
2e:75:fb:12:fd:1b:e2:cf:a7:5e:7b:ac:d9:1b:22:
c5:40:b9:e8:43:b2:b5:57:a8:32:42:86:31:72:73:
b3:c0:2a:67:21:38:a4:55:97:a1:6e:26:e7:89:67:
31:4f:eb:06:2b:05:02:86:e8:81:fe:9c:eb:53:03:
fd:88:25:47:3c:ab:ec:61:86:68:2b:9d:c5:fd:2c:
2a:94:b3:98:32:b4:f7:e4:be:95:fa:59:33:c8:90:
24:f5:2b:7f:4e:6e:df:c2:01:e0:be:bc:b0:c9:b3:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:C5:B5:5C:2E:7E:5A:A3:4B:40:A5:64:88:8E:E9:5F:81:0B:6D
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5a:26:5f:99:83:90:34:38:f6:42:19:ee:86:0d:03:5e:91:
e5:88:26:09:f6:6f:b7:03:03:65:90:71:56:fe:a8:14:6e:7d:
68:4d:b2:db:7f:83:e6:15:48:f4:2a:e5:08:90:cc:da:80:27:
18:73:5f:9b:e2:88:57:99:ad:1f:92:a4:8c:07:db:f0:cf:a2:
dc:2d:3f:90:59:b6:de:bc:4a:69:84:ef:b1:6e:17:65:d2:43:
d2:37:77:08:3f:09:95:1d:18:db:86:af:34:fc:6d:22:9b:94:
a3:5a:86:ef:93:d2:c1:92:b1:7f:58:d4:22:92:3f:25:74:00:
47:eb:4a:49:e8:d8:6f:8f:81:b0:d6:5c:df:5e:94:2e:cb:ce:
e3:94:43:e3:bc:11:6e:8d:3c:72:bc:71:cf:de:23:ca:bb:96:
f7:cd:c7:75:6a:a6:c5:d0:c1:e5:86:9c:aa:46:e8:7e:35:4d:
6b:61:08:48:b7:dd:58:85:8e:29:a5:da:a4:37:48:d5:52:3a:
eb:81:11:9e:e4:fb:1a:a2:f4:75:35:b6:d8:a1:c4:35:9c:d9:
c0:17:ca:ba:9f:16:f2:9c:8f:94:8e:67:93:d0:ac:32:74:ed:
67:eb:fd:d2:49:37:cf:82:ac:b6:14:42:37:69:60:da:47:ea:
66:24:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:55 2026 by rpki-client