Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
File: QPwHKZcRrfoiLiexKLdtHZdFBYI.mft (raw, json)
Hash identifier: RM9EXnyKa+/Mes0aDp+3VudP21zwbw4GtkZ373wQ0yU=
Subject key identifier: 12:BF:5A:70:36:94:2A:EB:EE:08:8C:5D:81:95:BC:99:99:09:20:EB
Authority key identifier: 40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
Certificate issuer: /CN=40fc07299711adfa222e27b128b76d1d97450582
Certificate serial: 019D9A076D2489C1640035FB183DC767FD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
Manifest number: 1570
Signing time: Fri 17 Apr 2026 06:01:10 +0000
Manifest this update: Fri 17 Apr 2026 06:01:10 +0000
Manifest next update: Sat 18 Apr 2026 06:01:10 +0000
Files and hashes: 1: QPwHKZcRrfoiLiexKLdtHZdFBYI.crl (hash: yQHtE3KXCLLOGNmBXKnUkcUGgurNERUDuNiuJQTYviI=)
2: n3unGkFIp8-n-TNUkOQRjOKqebU.roa (hash: CIWlXFkIaFdHtn2kvnhoUCJuy+xps7328gEToUVe6jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:6d:24:89:c1:64:00:35:fb:18:3d:c7:67:fd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fc07299711adfa222e27b128b76d1d97450582
Validity
Not Before: Apr 17 06:01:10 2026 GMT
Not After : Apr 18 06:01:10 2026 GMT
Subject: CN=12bf5a7036942aebee088c5d8195bc99990920eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:9e:da:39:51:6d:a1:e4:43:80:99:72:47:
84:3f:e4:c3:cd:52:db:cb:db:17:44:37:c6:ce:c4:
37:df:f7:5b:fe:b6:27:c5:4a:95:e9:e0:89:8f:ec:
3f:b2:75:f6:c3:79:6d:58:ad:9a:60:81:af:4b:2a:
76:71:de:46:fe:e3:5d:77:61:c1:ba:1a:2c:58:72:
3b:5c:0d:f1:68:4a:ab:a3:27:e6:1c:98:85:7b:33:
dd:9d:98:38:b1:00:12:da:56:43:f0:a0:f1:ef:f1:
b3:e7:ff:99:66:99:53:3d:4c:70:2e:74:77:10:5e:
eb:99:d0:ff:9f:a8:da:c7:de:dd:31:b3:c1:66:29:
94:dd:21:dd:7a:96:36:2c:89:38:18:eb:64:3a:0d:
4b:0b:1f:ff:43:73:3c:22:89:c7:33:74:80:03:78:
ad:5f:62:53:eb:7d:90:2f:dc:f7:c5:43:99:89:57:
6c:dc:8e:b5:1f:47:b6:5b:b6:40:52:11:ee:e4:7c:
74:4c:98:a6:58:c7:4a:a3:76:9b:0e:1e:93:8a:38:
81:64:c1:b0:f5:54:35:4e:28:9d:be:cb:42:d1:32:
11:62:59:be:dd:e4:43:e5:e1:8f:b3:ce:71:ce:7c:
03:5c:f8:6b:72:2b:18:f8:90:46:8f:7b:22:4b:85:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BF:5A:70:36:94:2A:EB:EE:08:8C:5D:81:95:BC:99:99:09:20:EB
X509v3 Authority Key Identifier:
keyid:40:FC:07:29:97:11:AD:FA:22:2E:27:B1:28:B7:6D:1D:97:45:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPwHKZcRrfoiLiexKLdtHZdFBYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5dc87a-f329-4c44-8235-77e3beab61eb/1/QPwHKZcRrfoiLiexKLdtHZdFBYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:5e:18:85:f7:88:d1:ec:e0:9c:bb:9b:de:24:22:4f:ce:
e8:03:d0:b7:02:be:56:1e:30:ae:0d:b1:02:22:82:88:35:89:
6b:ac:42:14:c2:44:eb:47:4b:9a:3f:9b:2a:b8:55:cf:00:44:
ce:ad:43:fc:39:6b:52:d6:07:01:6a:f3:52:2b:56:d1:cf:a2:
51:34:66:30:58:27:de:58:d4:af:81:a5:e5:99:b5:10:6c:6a:
47:d0:0c:7c:64:19:e5:e2:c0:9f:5e:27:73:6e:d5:d1:c8:97:
15:1c:9a:7e:ee:39:21:72:fc:c8:18:04:e3:35:85:42:f4:e2:
95:08:11:9e:56:83:15:70:6a:19:a2:87:e5:08:ba:09:22:95:
17:70:35:0c:45:66:47:ad:16:78:3f:a8:03:06:00:65:d3:48:
60:fe:e2:ba:07:18:ca:31:a1:c0:65:0c:3b:79:a2:d2:cc:4c:
70:9a:80:7f:99:85:74:bc:2a:41:04:94:4f:7a:65:3d:a7:cf:
3f:4a:50:3b:cb:ab:26:6c:83:ec:bb:57:68:cb:6c:b2:18:d0:
19:8e:8f:72:33:a5:d2:98:d3:4f:f5:1a:78:83:a8:dd:fa:57:
0c:1f:98:f9:89:48:78:7a:14:2a:53:68:04:26:9c:79:3f:7a:
64:f4:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:48 2026 by rpki-client