Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: XGcob8p25CEp/20BffPL9wGZfywnwSK9pNHlpm/4pP4=
Subject key identifier: DE:19:67:F3:D4:35:69:51:A3:35:AD:2F:7B:55:E0:2F:D3:EF:49:AE
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019D992B92B65E29062F781B227057ADCB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 076B
Signing time: Fri 17 Apr 2026 02:01:02 +0000
Manifest this update: Fri 17 Apr 2026 02:01:02 +0000
Manifest next update: Sat 18 Apr 2026 02:01:02 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: DAmVzJNuPoNHyFQGkgmmnJF0FdC+uJDUQ57fVW3Z1V4=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:92:b6:5e:29:06:2f:78:1b:22:70:57:ad:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Apr 17 02:01:02 2026 GMT
Not After : Apr 18 02:01:02 2026 GMT
Subject: CN=de1967f3d4356951a335ad2f7b55e02fd3ef49ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:a1:20:54:2c:bd:0d:30:ec:6e:e5:a1:95:
b2:57:c6:20:37:58:da:38:bc:3b:ea:e3:7d:82:2f:
42:46:0c:e2:20:76:fd:ca:76:9e:06:81:9f:1a:16:
cf:f7:88:c9:0f:4c:94:4d:4f:24:06:ef:f1:c4:8e:
fd:37:7b:f2:51:39:68:f0:b6:ef:3c:da:53:6a:9a:
5f:1d:0a:2e:f4:68:d5:64:73:4a:46:0a:ee:b4:81:
49:ea:8a:5b:c6:12:dd:83:24:9b:0e:ff:28:f0:2b:
da:8e:74:46:c2:66:b5:60:5d:22:3e:7f:34:82:94:
85:06:48:94:6c:f8:13:df:e5:8f:8a:17:49:9d:1e:
c0:6c:98:58:07:88:c0:01:28:40:30:95:e0:cf:fe:
25:94:94:ce:5d:f9:e1:44:29:dc:98:d6:2a:5b:c6:
7e:4d:31:49:8a:20:2a:68:bb:9e:59:e7:9b:4c:d2:
38:06:7e:6a:f2:90:52:92:bb:8f:32:21:3c:e1:e5:
3b:1a:27:7d:c1:34:23:e7:d4:61:2b:c0:21:80:63:
96:5f:86:8f:a9:83:55:08:77:30:51:56:c8:03:5d:
5f:72:82:8a:ce:95:7c:16:89:36:fa:10:99:62:8f:
b3:23:dd:22:d6:11:f1:9b:d1:65:54:37:b5:53:da:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:19:67:F3:D4:35:69:51:A3:35:AD:2F:7B:55:E0:2F:D3:EF:49:AE
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:63:00:22:23:fe:ee:52:fe:3f:c2:52:96:94:df:a6:1d:73:
9f:6b:47:95:b6:c7:63:5c:0e:3f:b2:00:9c:30:2d:60:a3:9a:
8d:3d:b8:f8:b7:b2:2f:35:42:6b:9c:eb:c7:3f:d3:25:79:30:
ac:27:47:9b:36:af:9e:fa:f7:81:2d:38:71:14:ab:5f:27:17:
17:ef:56:62:f2:c2:97:1c:7b:d9:e4:ba:b2:ef:46:b8:c8:5c:
22:48:47:14:1a:9c:4d:63:bd:13:3c:92:9a:9b:81:ad:bd:c4:
50:9a:7a:55:a4:3e:a2:0a:33:bb:28:3b:cf:d5:88:3b:97:a8:
9f:e6:05:96:81:e8:1a:a4:53:80:89:ca:e0:00:42:c3:5f:90:
a9:59:56:5a:ba:e3:ee:44:5b:3f:8f:6a:93:02:3d:c1:71:c6:
7b:52:1b:44:eb:4f:26:b6:cf:9f:cd:73:e6:08:fe:84:3d:3e:
ae:4f:e5:3b:b1:22:a1:72:f6:a4:a2:f7:03:8b:74:c0:f6:01:
a1:0f:5e:74:8f:73:f6:b6:ad:89:18:c5:99:cf:1d:81:a6:30:
43:7b:3b:7d:a9:48:ae:73:73:14:a5:87:b1:3c:ba:64:65:e9:
5e:ee:f2:91:ae:4a:29:89:77:fb:c2:e2:66:72:92:fa:ed:f1:
f4:29:70:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:30:23 2026 by rpki-client