Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
File: qnD7s9sihDfWBXmaxPRZjSLhPhs.mft (raw, json)
Hash identifier: /s43cGxTRbBVNHjAHs/WKdG970Zu7uCaUvYKZ0jt2To=
Subject key identifier: D5:9A:73:C6:FD:F4:E9:D3:B2:CC:1E:7F:F3:73:C5:BD:AF:04:E0:F8
Authority key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
Certificate issuer: /CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Certificate serial: 019D9850BBDDECAB4C75164E2DAC78E8BDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:02:00 +0000
Manifest this update: Thu 16 Apr 2026 22:02:00 +0000
Manifest next update: Fri 17 Apr 2026 22:02:00 +0000
Files and hashes: 1: 5zEkxsehYVrSBWS8R6vq4w7gVtY.roa (hash: y9Gfd8AbrZdX5+SsYIumelvvyPK5gzC9wuMjV0Ywdgw=)
2: qnD7s9sihDfWBXmaxPRZjSLhPhs.crl (hash: P0cMFq+JZwsl5Dl78VGUyXzx6xacdfxP0T7kgi9mcRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:bb:dd:ec:ab:4c:75:16:4e:2d:ac:78:e8:bd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Validity
Not Before: Apr 16 22:02:00 2026 GMT
Not After : Apr 17 22:02:00 2026 GMT
Subject: CN=d59a73c6fdf4e9d3b2cc1e7ff373c5bdaf04e0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:dc:30:ff:3e:73:7d:30:1a:fb:c6:2c:a3:
a8:48:4f:37:19:83:b1:26:9b:1e:68:16:47:04:ca:
1f:df:fb:07:72:b0:f4:81:65:b0:20:12:58:27:19:
81:c8:3f:07:2f:9b:b5:b2:e6:c4:36:26:40:c0:54:
17:9a:5f:d5:f3:1a:2b:8a:c8:86:0f:ef:93:e6:d5:
6b:b1:44:99:b3:a8:b3:88:41:87:86:db:69:fa:69:
27:bb:be:08:dc:4a:b7:be:5c:bc:2c:47:33:e0:e0:
9c:fa:8c:a3:12:63:d5:32:41:e1:49:e1:61:69:e2:
52:73:79:14:e4:8b:fd:63:bd:e4:f0:6f:f6:77:3f:
7c:24:51:66:8a:8b:17:66:01:6a:91:ff:e6:d5:e1:
c2:c9:62:c8:d8:0c:26:9c:65:14:c2:43:a3:d4:ab:
cd:3a:e9:12:b5:bb:59:f1:37:b0:11:db:7c:ec:e4:
b4:db:d4:1d:a1:d6:96:0f:10:d4:06:33:9d:f4:f5:
db:bb:30:1d:74:4a:4e:6e:e3:ca:17:87:4c:28:b4:
e4:89:c8:19:1c:24:cd:fc:bf:03:ee:18:6e:1d:00:
5e:fd:db:cd:da:03:a8:e9:8c:01:2f:b0:82:a2:cb:
a6:4c:1a:a3:9f:70:b1:69:e9:31:2d:c5:01:f1:bc:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:73:C6:FD:F4:E9:D3:B2:CC:1E:7F:F3:73:C5:BD:AF:04:E0:F8
X509v3 Authority Key Identifier:
keyid:AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:95:78:a6:29:38:4e:2f:58:fb:5d:ba:8b:1d:f6:d3:90:21:
8c:79:70:49:2c:1a:5b:03:56:51:0b:b6:74:6a:e8:b1:46:80:
f8:a5:54:1b:f2:6d:fc:dd:65:a3:c0:36:f6:da:38:cb:7c:3d:
dc:04:d8:68:ad:93:cb:61:28:26:dc:c8:cf:af:38:1c:83:d8:
7c:29:26:d6:cc:be:e6:22:fe:2f:5d:d7:e6:22:c2:b0:53:c0:
30:82:40:07:df:b2:f1:1f:31:1a:78:39:cb:c0:fb:fc:db:ba:
df:e1:2d:8c:6d:c2:62:9e:d1:e7:8e:ba:6b:6b:3e:07:b5:d0:
33:2b:ec:4c:fc:7d:3b:b0:75:bd:7a:53:d7:c6:0d:e2:73:24:
29:22:57:1e:3b:c4:25:32:d4:6b:c4:92:e9:17:a8:25:0e:16:
ac:81:f5:be:91:d2:f0:1d:dc:59:c5:2d:dd:94:9a:5e:b2:1a:
0d:80:7d:8d:7a:99:aa:29:15:a6:87:53:88:77:1a:46:e6:7c:
55:5a:cb:01:1c:b3:ca:8e:a5:2a:cd:e6:80:c4:8a:f1:a6:e9:
f4:2e:46:10:81:7b:0d:4b:42:be:95:7f:0b:46:0c:4c:85:94:
5c:b8:df:9d:db:8d:b7:39:89:58:ed:18:59:d3:18:c3:37:a7:
ae:10:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:33 2026 by rpki-client