Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: zOk1I6+NLaNbc679zG64AoiB/xWuLf35zfcZHISrXh8=
Subject key identifier: 09:3D:FB:BA:77:00:67:01:65:72:8B:3E:CC:9D:FA:BF:38:25:83:A7
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 019D9A0708D1C860BBA3ABB6A047FD4FB6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:45 +0000
Manifest this update: Fri 17 Apr 2026 06:00:45 +0000
Manifest next update: Sat 18 Apr 2026 06:00:45 +0000
Files and hashes: 1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: Q7bESswmkRj4nwJoifZ0BZJ2LJaZk/EnpTNvm5dkfKM=)
2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:08:d1:c8:60:bb:a3:ab:b6:a0:47:fd:4f:b6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Apr 17 06:00:45 2026 GMT
Not After : Apr 18 06:00:45 2026 GMT
Subject: CN=093dfbba7700670165728b3ecc9dfabf382583a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:47:7a:2d:ce:c2:86:86:bc:3f:df:a5:0f:
1b:0a:1c:8b:37:9f:b6:f4:be:72:4a:8e:2e:d9:d6:
d5:5e:04:9d:06:79:51:1c:6b:88:59:74:58:9c:63:
f9:7c:f9:02:61:d8:ee:63:09:69:a6:37:bd:69:4b:
09:30:67:c4:10:88:4b:b6:88:09:4d:ae:4a:e3:d1:
18:e3:56:d7:16:f5:e6:8c:7f:59:0f:0a:38:69:f4:
b1:a2:db:3b:b4:01:29:90:ba:4d:76:0c:fd:51:81:
c5:c9:79:5d:0f:63:92:25:20:c5:6a:5d:97:19:b8:
25:18:39:a7:60:cd:e5:f7:7a:bf:58:3d:d5:31:ed:
bc:6b:cc:83:26:8b:cc:b1:71:4d:15:5d:9d:b5:cc:
9b:a2:14:d0:84:7d:15:71:b7:4c:9c:1e:1b:f9:0a:
7a:b4:37:aa:73:63:79:3a:1e:c4:1d:01:ce:57:00:
90:64:8f:8a:d7:28:fa:77:28:5a:09:6f:b8:32:b8:
2e:ca:b0:c0:3f:06:b5:c3:1e:d8:dd:16:c7:6b:35:
3c:a0:99:05:8d:a9:29:fa:9a:ae:7a:aa:7b:87:62:
37:c6:e6:c1:39:9a:d7:b7:8a:7c:d1:08:25:cc:f7:
e3:d4:ca:b6:e4:21:f4:7e:77:da:58:b9:42:11:e6:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:FB:BA:77:00:67:01:65:72:8B:3E:CC:9D:FA:BF:38:25:83:A7
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:82:c1:b0:44:f8:72:ca:bd:13:9e:a9:2f:89:52:91:e4:61:
f9:f8:ea:98:9b:57:1f:90:d7:3d:e9:17:0b:82:48:6d:2f:8b:
4e:4d:5f:15:4e:03:d8:f7:af:ca:c9:4d:70:ea:96:31:f8:6d:
d9:54:ea:ca:1b:ef:40:f0:51:f9:8c:59:af:62:a7:34:9c:47:
40:88:90:74:6d:27:e0:b7:47:97:90:36:dd:fb:6a:04:23:ea:
6d:50:a8:0b:e6:78:03:2f:61:d8:87:05:f1:63:3e:65:4a:a4:
20:97:f0:1f:b3:84:7b:3d:b2:4a:f7:25:fd:5e:91:5c:cd:80:
4f:9a:0d:f8:df:5f:1a:f1:2d:11:d1:25:e6:f5:f9:ca:19:f8:
e0:50:16:9b:89:82:74:ae:de:82:0d:b2:b0:cf:6f:e2:fc:c3:
65:9a:07:e5:a2:1b:e1:84:87:25:42:1e:a5:67:20:59:7a:6b:
57:14:5d:7b:81:bc:ca:b3:62:a2:d1:2e:65:df:14:ce:cb:57:
eb:5b:76:14:bf:91:77:89:b1:32:34:66:d8:aa:e3:0d:65:fd:
22:79:41:31:e8:a6:83:1b:b7:56:cd:05:51:3e:42:4d:cb:a2:
ab:5f:62:f6:33:51:cf:af:70:85:76:81:25:bd:bf:47:7e:f9:
b7:b0:79:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBwjRyGC7o6u2oEf9T7ahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw
ZTk0MTgwHhcNMjYwNDE3MDYwMDQ1WhcNMjYwNDE4MDYwMDQ1WjAzMTEwLwYDVQQD
EygwOTNkZmJiYTc3MDA2NzAxNjU3MjhiM2VjYzlkZmFiZjM4MjU4M2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tJHei3OwoaGvD/fpQ8bChyLN5+2
9L5ySo4u2dbVXgSdBnlRHGuIWXRYnGP5fPkCYdjuYwlppje9aUsJMGfEEIhLtogJ
Ta5K49EY41bXFvXmjH9ZDwo4afSxots7tAEpkLpNdgz9UYHFyXldD2OSJSDFal2X
GbglGDmnYM3l93q/WD3VMe28a8yDJovMsXFNFV2dtcybohTQhH0VcbdMnB4b+Qp6
tDeqc2N5Oh7EHQHOVwCQZI+K1yj6dyhaCW+4MrguyrDAPwa1wx7Y3RbHazU8oJkF
jakp+pqueqp7h2I3xubBOZrXt4p80QglzPfj1Mq25CH0fnfaWLlCEeasFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk9+7p3AGcBZXKLPsyd+r84JYOnMB8GA1UdIwQY
MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt
NDA3MzViMmY4NDgxLzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx
LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYLBsET4
csq9E56pL4lSkeRh+fjqmJtXH5DXPekXC4JIbS+LTk1fFU4D2PevyslNcOqWMfht
2VTqyhvvQPBR+YxZr2KnNJxHQIiQdG0n4LdHl5A23ftqBCPqbVCoC+Z4Ay9h2IcF
8WM+ZUqkIJfwH7OEez2ySvcl/V6RXM2AT5oN+N9fGvEtEdEl5vX5yhn44FAWm4mC
dK7egg2ysM9v4vzDZZoH5aIb4YSHJUIepWcgWXprVxRde4G8yrNiotEuZd8UzstX
61t2FL+Rd4mxMjRm2KrjDWX9InlBMeimgxu3Vs0FUT5CTcuiq19i9jNRz69whXaB
Jb2/R375t7B5rA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:52 2026 by rpki-client