Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: 50PrwnJRa8DUw/CyBm1rHeY55U1nkGK49q1H77fTWGc=
Subject key identifier: B7:FF:CF:CF:2E:82:21:C2:EB:91:28:BF:DD:EC:AF:A0:22:AF:DE:D1
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019D992B49DB784165C558ABC6C421F661D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
2: gjHfWoEHc9QTn6Mvq7ZDpa1HWi0.roa (hash: qlBolvwxAE3Oa4lo8khdT9eAg5j/fv2rE6rmykA9rEE=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: 2r24GItDy2ZbUKsesRHrYdhFPoWW43ibpvzfiHpv4lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:49:db:78:41:65:c5:58:ab:c6:c4:21:f6:61:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=b7ffcfcf2e8221c2eb9128bfddecafa022afded1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:6e:3a:a4:92:87:22:84:b6:29:74:65:ab:
d8:0b:82:d8:67:7d:4b:63:cb:f6:f8:e2:b5:29:f9:
32:d2:b9:e5:f7:27:26:47:20:10:33:1d:22:49:b1:
28:71:3b:76:76:b0:c1:7e:5d:47:8b:d1:84:85:7b:
78:aa:70:b4:e8:b8:de:a4:55:f7:1c:7c:18:13:84:
3f:3e:01:10:0f:14:e1:bd:01:c7:82:d5:be:37:a5:
67:32:8a:d6:bd:4e:3c:64:70:2c:32:64:62:dc:99:
19:1a:62:7a:1a:fc:fb:dc:2a:c1:41:ed:57:5f:a4:
fb:4f:ca:30:90:d2:c5:10:ad:57:63:69:e9:96:07:
16:d2:3f:91:5b:94:cc:3b:b5:78:87:37:fa:cc:d0:
39:17:44:50:1a:ce:a0:f8:bc:39:d0:c5:d1:79:e2:
60:5c:57:a6:f2:0e:dc:72:66:42:62:8c:20:bf:43:
21:a4:1b:3e:23:31:e8:f9:51:a3:2c:1f:f4:fb:4a:
92:d7:df:8a:bb:69:10:9e:77:a1:5e:fa:07:c8:c6:
c1:3e:bf:23:9b:e3:74:93:33:6e:c8:a6:04:51:6f:
0a:06:a9:8e:50:98:26:fc:32:74:4d:40:2a:cb:90:
7f:0d:ce:b9:9e:76:8f:d6:e7:41:3c:fd:ef:17:b9:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FF:CF:CF:2E:82:21:C2:EB:91:28:BF:DD:EC:AF:A0:22:AF:DE:D1
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:96:85:44:e3:6f:3d:97:1e:7c:a5:a6:14:01:3f:2a:fe:68:
fb:25:1b:56:51:f5:5c:c9:52:a3:40:a4:c2:93:3a:20:bd:b6:
6e:8f:58:f0:f1:14:a6:07:a2:91:d6:c0:9a:29:55:92:53:14:
11:07:5b:01:32:28:29:f9:cd:98:0e:9d:84:f4:2c:22:fc:6c:
05:ed:97:b5:b2:82:39:d7:4c:b2:32:05:df:2e:20:58:0f:d1:
d6:f3:29:e9:e0:db:3a:fa:fa:8e:06:a7:07:c2:33:7d:4d:1a:
09:bc:b5:09:3f:38:67:10:41:39:53:70:f0:b5:59:84:97:6a:
31:f8:25:66:52:d4:e2:88:f1:b0:be:2b:af:0c:94:03:a8:af:
21:38:99:6c:65:a0:66:c8:88:6e:43:55:69:10:68:b1:f5:bd:
c1:9c:5a:5b:5a:ae:f8:d0:0a:ae:62:5d:fa:50:56:19:65:b5:
ee:3f:8c:1b:2c:4a:da:6a:1b:ae:8a:fb:73:4e:b3:77:46:e0:
07:db:05:40:f4:c5:4d:01:1a:3a:ac:cd:6f:cd:c2:94:ac:09:
76:cc:9f:3a:ed:72:54:c5:cb:8a:a4:e5:79:00:93:7d:5e:80:
ff:42:26:0f:8d:1d:de:06:fa:88:e8:8d:fc:46:a4:4d:33:ea:
53:a0:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:26 2026 by rpki-client