Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
File: Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft (raw, json)
Hash identifier: xXtjHOvRnzw48L9Xga1luKL5rILI58MObCAs2yClBTc=
Subject key identifier: 18:8F:77:71:84:F9:74:A8:B9:87:4F:D6:EA:75:15:E9:CC:DA:92:2F
Authority key identifier: 43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
Certificate issuer: /CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Certificate serial: 019D992B155F127B113CD9D5C4A2F4A73A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl (hash: cZQZi3D8kKx5is/F3N2M/TOkHG1y3bhfznH7b+wDv+M=)
2: QyZa0nXuZdTRYOcamDUuEXlxJrw.roa (hash: fY3crQbaUbhZWemSvo5lCgx+xQL5kp/7I3vPr0MN5Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:15:5f:12:7b:11:3c:d9:d5:c4:a2:f4:a7:3a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=188f777184f974a8b9874fd6ea7515e9ccda922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:42:d3:f5:a2:d3:0c:f0:2c:17:e6:2d:f8:
fd:54:a4:2f:8a:fe:74:0a:04:4b:e6:d9:e0:c9:06:
86:cb:28:52:94:94:99:29:cb:2b:91:cb:8a:a6:ab:
94:32:5f:a9:2b:53:e0:fc:c1:53:8f:4c:84:29:47:
fe:ad:b9:3a:00:15:88:c0:9e:b5:95:37:78:7d:d1:
75:ca:ad:64:f8:30:f4:8b:c9:8b:1a:f7:4c:e7:c5:
98:41:03:75:69:7b:70:d5:e7:2a:00:e1:e9:d3:54:
04:20:ee:e0:ed:88:42:77:1f:21:df:66:dc:2f:78:
3d:01:59:6b:ab:b1:c5:c5:4b:e4:85:25:1a:5f:fb:
da:c6:89:60:cd:f0:8b:d2:46:47:44:60:cc:b1:41:
1e:c9:7a:64:61:09:74:61:0d:e8:73:2d:d0:4c:24:
90:da:0e:c8:7b:a2:7c:42:da:6a:48:e7:6a:30:76:
82:f4:70:14:00:92:4b:28:72:62:36:b2:e9:29:00:
e7:64:10:45:91:ba:80:ac:4d:b5:92:0e:90:d4:0e:
3e:52:af:2c:19:91:d4:27:e0:89:e6:7a:30:cf:00:
64:32:2f:3f:dd:95:45:08:ce:f5:ae:ab:89:81:db:
4b:76:2d:aa:a5:8f:b7:1d:2f:b4:11:8e:53:59:e4:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8F:77:71:84:F9:74:A8:B9:87:4F:D6:EA:75:15:E9:CC:DA:92:2F
X509v3 Authority Key Identifier:
keyid:43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:aa:50:52:c3:3b:e7:44:e0:e7:dc:ff:99:f3:36:cc:6e:0e:
db:7c:a4:4d:06:fc:52:ac:b1:4f:46:95:03:6d:7a:ea:a2:e0:
07:d6:0a:e7:6a:a5:8c:68:f3:bc:87:fd:84:21:61:e3:e5:d1:
4d:04:17:c8:8e:05:61:ad:61:e8:00:c7:25:24:27:e6:cb:56:
7d:a7:19:6f:8a:fb:1b:7c:91:29:3f:18:82:3f:75:32:55:5c:
1e:32:95:67:2b:78:a8:26:0b:56:bd:af:11:25:75:09:59:d6:
d8:97:8e:ed:df:43:b2:c4:c9:01:56:f8:18:6c:14:ff:73:ad:
a0:37:d6:18:4c:a7:ee:1c:13:e3:ea:92:c3:a7:5e:14:e1:18:
49:6e:e4:75:47:e6:d9:71:04:0d:26:47:ae:8b:06:72:65:cc:
88:0f:db:58:c9:d3:93:e0:e7:d2:34:11:4c:bc:bf:91:90:e1:
e4:23:d8:13:9d:d1:3c:29:97:9e:bd:40:d6:ef:4d:e0:6f:78:
5e:c1:d3:a8:6e:65:88:9b:e3:43:27:c6:8a:21:af:41:67:0b:
54:04:18:69:72:81:e8:36:2d:68:3f:c9:c6:11:dd:00:f6:74:
e3:bc:74:9f:19:36:f1:78:76:19:a5:16:a3:7a:b5:b0:fe:a7:
3a:6c:7b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:58 2026 by rpki-client