Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
File: qap8qvmnyjedaW0a3VfA7dBVP_k.mft (raw, json)
Hash identifier: LWYW3n674rXXTWY3PYK7H+dUTqfoSVjVZniGPDjQ0pQ=
Subject key identifier: C0:D7:5E:DF:BF:09:D4:E8:EE:F5:9A:11:04:99:97:D1:B1:7B:E6:20
Authority key identifier: A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
Certificate issuer: /CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Certificate serial: 019D9B87FC65017F479C8ECE154623ABC084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
Manifest number: 28
Signing time: Fri 17 Apr 2026 13:01:13 +0000
Manifest this update: Fri 17 Apr 2026 13:01:13 +0000
Manifest next update: Sat 18 Apr 2026 13:01:13 +0000
Files and hashes: 1: GCbuRd6csJQHzpB8lvnWZve0UIs.roa (hash: auu2xsjWmwNZtuETF+y7lmmBrOPk6zT22UOZl16juME=)
2: qap8qvmnyjedaW0a3VfA7dBVP_k.crl (hash: CyugB+vXiZV8F0wNkzwzXRRVcT9KOv9PgFCuYoPP4g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:fc:65:01:7f:47:9c:8e:ce:15:46:23:ab:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Validity
Not Before: Apr 17 13:01:13 2026 GMT
Not After : Apr 18 13:01:13 2026 GMT
Subject: CN=c0d75edfbf09d4e8eef59a11049997d1b17be620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:0a:73:7c:84:ab:7b:46:a5:f0:0d:d2:44:
0a:1a:3d:e3:bf:40:06:d6:0e:b8:2c:bf:88:b6:eb:
b0:23:5c:96:4b:fb:03:1a:aa:12:47:fe:4c:8f:c0:
80:d6:96:bf:b1:f4:54:c7:b8:e6:0d:2e:93:4f:a1:
db:83:67:20:68:f4:eb:14:c2:0a:6b:e8:ca:be:28:
b3:fc:d6:26:61:92:3d:d1:7a:5b:a3:ae:85:4c:99:
3d:37:20:ba:3d:a5:7c:1b:e8:e8:c9:8d:0f:db:a9:
57:d6:10:31:85:99:0c:16:b3:64:f7:26:c7:68:fb:
25:df:e8:d2:51:21:bd:57:90:6f:35:7e:c6:a1:56:
dd:f8:44:ad:48:78:34:11:68:4b:42:a0:bf:2f:05:
cf:08:60:39:2a:84:a7:7c:6f:f4:a7:2f:d3:54:8f:
87:ee:57:84:94:44:1f:3c:e7:d2:29:83:28:c5:cd:
62:3d:15:d8:93:be:12:75:42:90:97:ff:d4:51:e0:
a3:99:8a:86:19:ef:ed:53:f3:55:f3:4a:5e:bf:d1:
9c:67:e7:ce:72:df:a2:64:bb:2b:0a:09:41:79:6d:
cf:43:e4:ab:6e:44:36:4f:00:ab:77:7a:cb:81:4e:
1b:a8:27:6c:34:0c:dc:2b:52:d8:2a:21:89:e1:b1:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:5E:DF:BF:09:D4:E8:EE:F5:9A:11:04:99:97:D1:B1:7B:E6:20
X509v3 Authority Key Identifier:
keyid:A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6b:3a:35:64:90:91:eb:d1:c8:56:2a:b9:f5:f7:0d:92:c1:
7b:a9:01:d8:b4:f7:af:9a:ec:7d:7f:80:1d:ae:c2:cc:6c:f4:
b4:aa:9f:70:62:8c:e3:42:1e:ad:a8:02:01:34:17:b8:2b:65:
57:d1:11:3c:f5:6d:91:8d:0d:17:08:ab:ad:f9:99:1e:23:1a:
6c:a2:88:0d:89:75:7b:44:a8:7d:18:05:45:bf:ef:c0:b1:58:
d9:1e:57:59:a2:bf:89:5b:60:27:4b:87:5d:61:60:9d:37:5c:
2e:ba:cd:cb:84:d0:4b:9e:fc:ac:a0:aa:30:2c:bb:e8:ec:e8:
14:90:b1:bd:29:2a:36:50:c7:e8:f3:ed:20:38:aa:28:16:75:
c6:8a:ac:b4:c5:ea:b3:84:3f:3f:72:97:90:a6:e5:cd:b7:2f:
b4:99:17:45:17:00:fd:bc:c7:04:9e:27:ca:1d:e7:40:ef:bb:
ad:ca:6d:75:49:ed:8f:44:84:2f:b2:7a:06:7b:48:d5:0c:08:
ce:1b:1d:9c:f0:a5:b8:8b:57:bb:16:f7:63:df:dc:56:7c:50:
4b:f8:5b:e0:45:e1:59:e9:71:3f:5f:98:df:6a:54:94:d6:d9:
b4:01:ef:6f:d4:c5:32:0e:0a:43:7d:76:76:4e:91:ca:66:57:
a7:49:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:47 2026 by rpki-client