Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: BLaFyTPLn6U25m1XKH8ZVgEieZt1O977q+DMAGHNjno=
Subject key identifier: 68:88:89:9C:00:AD:B1:FF:71:D8:30:DE:67:BB:35:79:90:C7:E9:72
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019D9C2C8F597B5A80FE648B7FE166327598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1858
Signing time: Fri 17 Apr 2026 16:00:58 +0000
Manifest this update: Fri 17 Apr 2026 16:00:58 +0000
Manifest next update: Sat 18 Apr 2026 16:00:58 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: stLDl+QYHLhbwaem39IAGXGI/Zshm3vU0wRJvP5TCOQ=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:8f:59:7b:5a:80:fe:64:8b:7f:e1:66:32:75:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Apr 17 16:00:58 2026 GMT
Not After : Apr 18 16:00:58 2026 GMT
Subject: CN=6888899c00adb1ff71d830de67bb357990c7e972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:ff:04:d7:3a:57:0a:76:d8:7d:e9:88:5b:
3f:67:29:79:ee:27:4d:35:fc:a5:ef:db:65:0f:b4:
4b:e2:79:25:52:21:9f:99:51:07:0b:16:6c:42:dd:
da:1c:8e:4e:10:07:0a:39:a8:21:9f:01:41:ad:0c:
46:36:55:a4:26:e8:70:bf:37:7d:ad:60:d3:2e:4f:
72:3e:1d:ce:1a:01:22:2f:79:58:36:88:70:a5:89:
b5:00:ee:a1:31:a2:33:04:aa:f5:04:7d:fd:83:5a:
aa:3b:be:08:9a:47:b1:e9:d4:e3:cd:5d:da:30:31:
48:00:3c:3e:bd:4e:c7:fa:ef:b4:94:d3:3c:91:23:
8c:fa:be:c7:14:eb:4b:70:4d:0e:19:f6:b6:16:28:
b7:e0:fe:5a:c0:4f:10:f7:3a:f7:95:40:6f:54:b8:
ee:1a:f7:95:1a:14:ed:a6:09:75:77:3e:c6:fa:3f:
e7:7c:6b:15:e8:37:f3:3c:84:55:6b:e1:64:f9:5c:
45:29:85:99:f8:24:f5:c5:1d:3c:93:21:b2:ac:19:
74:ae:f6:5d:9e:80:61:24:10:3c:fe:eb:c2:92:c1:
5c:c1:47:6d:17:3d:ad:1e:f7:d5:30:26:ad:e2:90:
ed:55:f7:64:79:7f:3b:af:42:62:bc:f0:e6:a1:92:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:88:89:9C:00:AD:B1:FF:71:D8:30:DE:67:BB:35:79:90:C7:E9:72
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9a:0d:df:d6:dd:2a:db:85:53:7e:2a:1d:b0:ff:03:22:14:
22:24:cc:77:9a:73:25:f0:00:83:fd:5d:90:99:60:c5:b8:0e:
2b:bd:93:ed:fb:5f:ac:ad:68:8b:7d:1a:c7:ff:a8:a7:07:18:
1b:16:23:c6:7e:42:e9:b1:bf:91:8e:a9:41:da:e4:87:e7:42:
bb:ba:ee:34:36:11:de:89:18:c6:e4:6f:27:9f:a8:4d:8a:c8:
8d:15:87:9e:17:08:cf:a8:a1:43:3e:73:08:c5:ea:4a:d2:7d:
74:77:66:6a:eb:40:c9:6a:b9:ce:34:ae:23:28:63:90:2a:0c:
37:69:7b:fd:10:d2:fd:ee:89:81:73:57:3c:fa:01:bb:0d:3f:
5b:1d:4b:04:ac:85:f2:9e:7b:50:89:92:7b:be:93:ec:95:10:
81:c5:2d:00:f5:1f:31:a4:0e:0d:8a:bc:7f:1d:03:c9:47:04:
89:ec:de:34:9e:1a:e3:42:2b:a9:70:a7:fe:db:e3:1d:41:59:
cb:c1:41:ca:3b:63:f5:34:e4:88:b4:e3:76:b7:4d:45:c8:24:
ef:18:09:34:85:90:1b:b1:f5:e9:d6:22:28:c1:4c:cb:ef:14:
5b:b6:de:04:65:99:51:b7:97:c0:76:bb:4c:9f:8d:84:5c:38:
cc:c8:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:32 2026 by rpki-client