Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: yxNKe8DtmU5c9E/CBWoTPZly+Wjm/yAfi6Z7Hh6BSW4=
Subject key identifier: 52:D1:F1:2A:27:DD:C3:AC:20:21:E5:38:5B:E7:34:0B:A4:6D:41:BE
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 019D992AFD1D0B8D27B3DD7FA6DD77F6BBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:24 +0000
Manifest this update: Fri 17 Apr 2026 02:00:24 +0000
Manifest next update: Sat 18 Apr 2026 02:00:24 +0000
Files and hashes: 1: UrVvZVnA9sxhDnytnq_6CJMVGDY.roa (hash: Eo7tDFpvsB5+kGHIClxenKJ/I8v5IPSf0jD2mkBbqy8=)
2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: +yqeVhwUC2JNjCix8Q/UcLc+ddhcaI6u9ROzUiJ/Cro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:fd:1d:0b:8d:27:b3:dd:7f:a6:dd:77:f6:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Apr 17 02:00:24 2026 GMT
Not After : Apr 18 02:00:24 2026 GMT
Subject: CN=52d1f12a27ddc3ac2021e5385be7340ba46d41be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:14:7f:43:96:13:be:b7:6e:01:5b:f4:dc:
c7:e1:ae:ef:fd:2d:8c:86:e3:4d:5a:1e:de:ca:1e:
69:d1:0b:57:97:1a:33:3a:72:ff:37:5f:12:79:15:
d2:83:5b:bb:ff:b6:ce:31:7d:12:72:17:07:31:bc:
9c:bd:8a:a7:8d:9d:55:85:57:b1:e0:a6:c4:bb:f7:
ea:a1:4b:39:df:bf:67:a1:05:9b:10:d1:45:ff:83:
b0:a8:99:0f:73:0a:75:2e:d5:c5:5c:76:0a:29:e3:
fa:1f:ce:04:13:11:c0:02:34:85:10:b0:55:cc:d4:
7a:1c:64:09:e0:20:c7:b2:06:e4:32:81:33:35:7c:
d5:ad:98:91:64:26:e4:9f:8a:d6:af:15:75:59:f7:
da:73:75:9e:8a:1c:40:01:96:dc:75:03:d1:7a:5d:
f2:0f:4f:ae:5f:9a:84:3d:85:fd:a1:10:d2:a7:08:
d8:7f:5d:86:65:19:90:72:8b:97:2c:b4:4c:38:6b:
75:18:5c:6b:da:07:43:9e:ac:f5:df:cf:f2:76:f1:
fb:0c:db:00:60:a2:5e:65:41:38:bc:24:bc:3a:bc:
8e:8e:3e:b6:09:0f:9b:2b:4a:68:a6:90:37:49:e6:
f1:2b:48:15:c9:2b:08:02:67:e9:72:a1:67:bc:16:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D1:F1:2A:27:DD:C3:AC:20:21:E5:38:5B:E7:34:0B:A4:6D:41:BE
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c5:bb:a1:cb:5f:6f:ab:cc:0e:63:02:bb:32:0a:8e:5b:67:
81:4a:00:21:65:0d:1f:9a:27:de:e1:0b:16:a6:0c:e2:2f:97:
79:71:d8:5e:7f:6f:80:03:e2:ac:03:12:08:c5:68:85:a8:06:
c4:2d:d4:33:f0:b5:d1:f0:02:ba:a9:c8:b7:e8:d0:56:fb:4b:
a9:41:da:5e:4c:4b:a6:36:b3:c0:c0:2a:eb:7c:09:60:a4:c5:
dd:a7:9b:4d:58:74:e7:6b:4e:43:0f:80:56:ec:c2:15:34:88:
77:a2:98:ff:64:2b:fe:a1:55:0a:f6:1b:72:6b:11:52:e2:5c:
bc:76:62:3f:6c:14:1b:a4:b9:55:c9:8d:f0:0b:68:7d:74:14:
97:b1:10:5f:83:d1:02:bf:c6:80:d7:e8:84:be:22:72:15:e0:
1c:3e:23:f7:3d:75:2f:ba:64:7b:54:72:c3:6f:78:38:1a:9b:
6f:1a:a5:47:18:2b:c5:e5:66:95:37:5f:f9:4e:d4:e7:31:f3:
a5:f9:21:61:a9:ba:17:68:6c:67:1c:a7:6a:f6:0c:69:36:4f:
ba:4f:4a:51:db:8e:d2:fc:ec:75:8a:34:45:3f:c0:c7:6b:58:
e7:57:0f:a1:d5:6e:4d:00:4b:cd:ef:58:b4:c2:c7:d3:bc:64:
bc:6a:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:00 2026 by rpki-client