Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: biKTzywvgFxLM7RrL08Z6zPq7O8n1FGXBhqc8CY8ROE=
Subject key identifier: 3E:B9:91:08:7F:F4:DB:18:A8:E0:89:F8:66:B3:8C:E8:5D:C1:85:17
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 019DA45376B65B62E1F9914BA5508E9B76C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 06:00:26 +0000
Manifest this update: Sun 19 Apr 2026 06:00:26 +0000
Manifest next update: Mon 20 Apr 2026 06:00:26 +0000
Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: DFZcaJ7KI24ZUtsExsgiz9Z9TmFHXAhYyZgdOVrxLpY=)
2: Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa (hash: LMUW9+NLiMGnI7ZWrV590GSKNkkWYi8Hg05UOVRU3Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:76:b6:5b:62:e1:f9:91:4b:a5:50:8e:9b:76:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Apr 19 06:00:26 2026 GMT
Not After : Apr 20 06:00:26 2026 GMT
Subject: CN=3eb991087ff4db18a8e089f866b38ce85dc18517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:4e:96:df:0e:3f:22:1a:00:c7:f7:4c:38:
53:6d:b6:0b:73:72:f7:09:27:6f:29:c9:50:e3:44:
a0:35:2c:d4:7f:e6:15:9a:c8:9e:3c:c3:5b:98:35:
51:ea:b4:50:2b:38:09:b2:21:01:49:bc:2b:e3:29:
1a:39:97:f3:19:29:e3:5c:0a:76:d6:47:71:f0:f5:
69:06:ae:bb:84:08:8a:d1:8a:71:a9:4a:a1:6d:d0:
85:9a:f7:c9:a8:a0:a5:d6:6f:9d:c5:ec:9e:b7:ee:
2b:c6:39:b8:6f:76:f4:e6:fc:6b:64:a5:c5:3a:47:
60:58:8b:15:69:76:bd:df:27:a6:79:00:03:a6:3b:
ce:51:d2:8d:99:5d:f4:5d:e4:21:7d:53:39:06:74:
ab:49:f1:26:d9:00:8d:8c:4a:7e:41:f1:74:65:bf:
d0:dc:3e:98:9f:bc:e8:58:e1:63:4c:00:cc:d8:e4:
c8:48:c8:c4:9b:91:9f:95:39:52:ec:81:f8:e1:ad:
b0:2e:10:68:64:5a:7c:bb:9d:75:34:37:fd:b3:bc:
66:27:cd:e2:b1:c0:43:c3:5a:c2:29:c0:76:ee:3e:
9b:eb:3c:d7:22:7f:e0:ba:60:a0:6f:b1:d3:df:0d:
3c:4a:58:81:49:a8:80:fe:93:cf:3e:ed:94:62:57:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B9:91:08:7F:F4:DB:18:A8:E0:89:F8:66:B3:8C:E8:5D:C1:85:17
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ea:3a:0f:10:8d:96:d9:be:32:6d:29:98:6f:80:a8:73:e7:
b9:cd:04:2c:12:0c:70:67:a4:8a:f1:67:a8:bf:9f:a2:6f:63:
c8:be:a6:78:73:c9:99:01:5f:7d:fe:5d:1e:93:91:3d:42:3b:
70:8d:20:0d:93:40:71:8c:78:76:9f:9b:d7:45:c7:99:15:48:
27:2f:48:e6:e0:71:33:66:51:4d:42:d4:2b:56:8e:50:ec:e0:
9e:e6:c3:15:db:c6:36:ff:0c:49:3c:9e:82:b4:75:07:7b:e0:
9a:f4:b0:df:29:47:f6:27:90:ce:b9:54:35:df:4d:40:73:fb:
2d:c6:ea:f8:c2:77:a2:07:e0:6a:b0:09:96:c4:80:08:b2:e1:
c4:4d:02:10:be:da:a8:0e:1d:1f:08:15:d4:2b:e9:76:e4:0e:
06:f0:38:7d:19:f0:e3:6c:a1:6b:5b:8e:02:55:8d:c2:15:c4:
bf:9e:96:c9:4b:b8:85:aa:67:3f:75:ea:a0:17:9d:10:94:e7:
ea:f5:6c:78:84:8a:34:63:11:ec:f1:e1:5f:fb:a1:0b:76:fa:
65:1d:ad:5a:55:be:8a:63:56:72:79:61:5d:a7:94:0d:38:2a:
da:4b:43:51:2d:67:bf:46:5d:fd:34:95:9a:d2:89:fc:09:f9:
20:77:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:54 2026 by rpki-client