Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: m9XbXLMFJtuCldDXZnCTlJJ5n4zzcD+U47L2tFMtdeI=
Subject key identifier: C6:4C:B4:90:D9:3E:BE:36:63:52:62:67:48:17:7B:3A:04:FD:2D:50
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019D985092EDDA06DAA3BE294D5F2211F030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 18EC
Signing time: Thu 16 Apr 2026 22:01:50 +0000
Manifest this update: Thu 16 Apr 2026 22:01:50 +0000
Manifest next update: Fri 17 Apr 2026 22:01:50 +0000
Files and hashes: 1: p7BVCU62BRURJnqp18vcgZBi9lA.roa (hash: DLOPi5ESV+e2DHMAV+0PXNX8prnnrufqQAKqkUfKYls=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: jHaCXhxcW9yJdNXFdo6RXuar6UGeMAbbVqQKQ9UuZgo=)
3: tS7Ekl755jz7sx7rmhOe1p5tzfI.roa (hash: JxL6ENaZZO0bTihUCNQQ0Sy7sFcJ4MbgWVnIFPKdL6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:92:ed:da:06:da:a3:be:29:4d:5f:22:11:f0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Apr 16 22:01:50 2026 GMT
Not After : Apr 17 22:01:50 2026 GMT
Subject: CN=c64cb490d93ebe366352626748177b3a04fd2d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:c0:ae:be:08:06:6e:da:5f:6d:74:67:e0:
be:0a:f4:b7:58:ef:be:8a:97:10:9c:bd:d9:0e:1c:
ea:b0:2f:68:23:b5:80:4c:b1:97:ff:24:42:25:33:
2c:2c:7c:c7:6c:05:e9:b3:38:e0:e1:7a:22:99:18:
ee:a7:b0:3e:04:f9:c3:87:de:77:de:5c:8c:f0:e5:
9e:b8:12:b9:f3:54:8d:ce:7d:e5:c8:f8:3a:1c:e4:
80:b0:f3:d6:a5:cd:58:43:fb:d2:de:3e:6b:24:7b:
f8:89:38:8b:61:cc:f4:b1:d6:15:34:d6:02:aa:bd:
5f:7f:d6:77:2a:3f:be:0d:ce:4d:8e:d7:90:ae:8f:
36:8e:16:de:8e:f4:91:48:c0:91:b3:87:18:9e:0e:
ed:66:19:e7:e0:94:8b:78:50:ad:55:9e:c3:b9:fd:
e7:bc:fe:a4:89:74:f2:4b:2b:ae:f4:d6:b8:87:28:
f4:43:9b:a1:17:6f:7b:ea:8e:99:a2:e3:70:6d:12:
44:ea:d1:d5:d7:47:4f:db:87:d2:cd:ad:98:cf:09:
86:23:08:cf:60:4f:02:60:4e:39:71:b6:4b:91:46:
a6:6a:29:7d:a1:f6:6b:c5:70:04:e7:b2:2d:31:c7:
c7:bf:e9:fe:bd:b7:51:cb:1b:da:76:fe:73:92:ab:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4C:B4:90:D9:3E:BE:36:63:52:62:67:48:17:7B:3A:04:FD:2D:50
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:8e:05:9c:81:9f:97:62:8d:23:f4:ff:25:e0:37:85:43:
2f:49:03:a4:0e:2b:09:d6:22:1b:2c:2f:d1:10:43:5c:fd:3e:
11:f6:b3:b6:8c:e2:b8:6a:65:2d:f4:41:3c:96:a2:8c:b9:2d:
9a:30:31:c2:ed:40:e6:94:30:6c:a5:43:23:90:cc:1f:3c:34:
f1:8b:1e:2e:e9:f1:ec:0b:26:93:1d:4a:36:58:eb:aa:a4:fd:
e7:43:bc:64:15:08:a8:06:37:17:e4:56:e5:81:2c:24:4f:50:
be:53:cb:45:22:0f:fa:38:27:a0:3a:8c:b4:63:4a:46:bd:2f:
c5:09:bc:f7:f1:54:4f:e1:d3:a3:00:78:01:b2:41:53:e2:6b:
87:2d:3a:e0:94:2d:ba:f3:79:02:51:ab:fa:7a:01:cc:43:24:
b3:08:72:0c:56:32:8c:5a:a8:aa:be:4d:6c:e0:dc:02:e0:dc:
0d:9a:a7:f5:7b:91:82:d0:87:d1:d2:af:d1:04:1a:fc:b3:a4:
ce:6f:ac:37:57:96:bd:a4:19:9b:34:36:85:ce:96:cb:62:98:
54:7f:81:6a:57:88:a5:29:b3:e0:24:00:cd:f8:6b:4c:e9:18:
27:2f:5b:46:d9:1b:8b:0c:30:2d:bf:4b:21:f3:fa:f4:be:60:
a8:36:0e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUJLt2gbao74pTV8iEfAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjYwNDE2MjIwMTUwWhcNMjYwNDE3MjIwMTUwWjAzMTEwLwYDVQQD
EyhjNjRjYjQ5MGQ5M2ViZTM2NjM1MjYyNjc0ODE3N2IzYTA0ZmQyZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqvArr4IBm7aX210Z+C+CvS3WO++
ipcQnL3ZDhzqsC9oI7WATLGX/yRCJTMsLHzHbAXpszjg4XoimRjup7A+BPnDh953
3lyM8OWeuBK581SNzn3lyPg6HOSAsPPWpc1YQ/vS3j5rJHv4iTiLYcz0sdYVNNYC
qr1ff9Z3Kj++Dc5NjteQro82jhbejvSRSMCRs4cYng7tZhnn4JSLeFCtVZ7Duf3n
vP6kiXTySyuu9Na4hyj0Q5uhF2976o6ZouNwbRJE6tHV10dP24fSza2YzwmGIwjP
YE8CYE45cbZLkUamail9ofZrxXAE57ItMcfHv+n+vbdRyxvadv5zkqsYUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZMtJDZPr42Y1JiZ0gXezoE/S1QMB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhuOBZyB
n5dijSP0/yXgN4VDL0kDpA4rCdYiGywv0RBDXP0+EfaztoziuGplLfRBPJaijLkt
mjAxwu1A5pQwbKVDI5DMHzw08YseLunx7Asmkx1KNljrqqT950O8ZBUIqAY3F+RW
5YEsJE9QvlPLRSIP+jgnoDqMtGNKRr0vxQm89/FUT+HTowB4AbJBU+Jrhy064JQt
uvN5AlGr+noBzEMkswhyDFYyjFqoqr5NbODcAuDcDZqn9XuRgtCH0dKv0QQa/LOk
zm+sN1eWvaQZmzQ2hc6Wy2KYVH+BaleIpSmz4CQAzfhrTOkYJy9bRtkbiwwwLb9L
IfP69L5gqDYOlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:29 2026 by rpki-client