Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: oq8MAo1vM54iOougJpEbBGZjXXqVB48YthDJ0hfhGt0=
Subject key identifier: FF:15:DF:17:F0:1F:03:34:7A:BC:AC:A2:79:9C:D0:5B:CD:99:08:07
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 019D9C62E9CAC788A5CEC0FCDCCC3F8435B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 17:00:21 +0000
Manifest this update: Fri 17 Apr 2026 17:00:21 +0000
Manifest next update: Sat 18 Apr 2026 17:00:21 +0000
Files and hashes: 1: 4_bMzMBhDf5tuBBvYtBoIOg-KLc.roa (hash: 6AZogLPcjIIOPEMq9zRkZQNHkdZ8ldzB51VGATYSTPA=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: GWwowhLyKyEQYLgVdWpKSZYtAARFxsYgLe50tMQ++DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:e9:ca:c7:88:a5:ce:c0:fc:dc:cc:3f:84:35:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Apr 17 17:00:21 2026 GMT
Not After : Apr 18 17:00:21 2026 GMT
Subject: CN=ff15df17f01f03347abcaca2799cd05bcd990807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:80:8e:e2:6f:a4:9f:33:d6:a0:8c:0b:ee:
6c:2f:91:f5:0c:25:9f:82:b0:76:62:79:c5:89:7f:
1c:82:c4:89:c1:18:82:73:a0:96:2b:02:97:08:a2:
2e:36:da:fb:92:5f:7c:42:a2:fc:27:a4:3e:d4:3f:
86:07:1a:d8:5a:00:15:64:6b:62:cf:ec:57:98:a3:
7c:d5:ba:4e:76:7d:dc:01:2a:56:60:c8:a1:2a:de:
01:25:f4:5b:1e:3f:00:82:27:55:b5:3b:97:4b:ca:
85:27:2c:e7:c1:8c:eb:66:3e:d9:02:96:e1:37:ab:
f0:67:58:5e:15:d3:58:a5:b7:9b:59:70:c3:89:3e:
36:e1:26:dc:a4:6b:45:08:6d:53:db:5e:b7:c2:f5:
5d:1d:0c:d0:ef:f3:e8:c0:96:35:4f:30:fc:97:dd:
70:a1:b9:11:97:44:39:45:27:d9:48:f2:1c:fb:d9:
bc:6c:62:37:f7:09:08:bd:a3:4c:57:03:98:87:00:
44:2e:67:07:b5:46:20:1c:f2:7b:71:30:3e:49:8e:
14:6c:c9:57:4e:f6:73:ba:c9:c6:19:98:cb:81:84:
c2:79:01:e7:f1:6c:70:74:a4:d3:c5:e2:dc:83:d4:
98:a7:1a:b2:c3:17:75:f7:34:89:0e:4a:46:2d:52:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:15:DF:17:F0:1F:03:34:7A:BC:AC:A2:79:9C:D0:5B:CD:99:08:07
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:13:b5:53:c5:c4:b0:f0:cc:a0:13:ff:6b:1b:ac:4c:6c:78:
fd:a3:fb:d7:01:d2:de:55:fc:18:41:54:41:1b:df:69:ab:24:
a2:33:df:e0:ec:29:ce:e2:3a:9f:80:ac:00:05:89:b5:d8:41:
f4:f0:a5:48:b0:12:b2:f3:18:c5:68:8b:4e:07:8f:d6:73:3c:
3d:c3:94:20:24:a1:14:bb:0d:a4:e3:65:1c:e7:0c:2c:80:24:
db:0c:cd:56:55:36:5b:1a:59:a8:ea:e7:b9:94:7b:43:83:c5:
6f:68:5b:d7:88:1d:19:a4:2b:53:30:e5:2a:2f:71:b4:00:98:
4e:48:bf:56:f1:48:17:73:4f:1c:db:9f:87:7e:48:82:12:03:
74:6b:93:75:47:42:41:13:be:00:45:cc:03:c8:90:e6:54:0b:
c0:fb:78:50:42:fb:df:fa:e2:8c:c8:18:89:a0:88:db:24:33:
84:4e:d9:a6:f4:1d:b4:4b:37:45:a6:24:f1:22:8b:4d:6d:a9:
af:5c:2c:b4:2d:d2:4f:93:e5:3a:e2:15:89:72:21:f2:59:20:
59:57:c1:ba:0d:ef:e6:0a:83:1b:03:5e:bc:22:2d:62:3a:ef:
73:7e:5d:0d:fe:8b:dc:19:2b:06:a6:fa:7f:f6:f8:13:66:82:
0f:fb:cb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:40 2026 by rpki-client