Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: 8uJBNRQHw2TGc5P5YQivEkp9L6WdmRJ1ISEwQJ9Sf5E=
Subject key identifier: B5:21:48:C9:45:5A:53:D7:9D:37:08:9D:29:3A:C3:B6:5D:FD:1E:BD
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 019D98BD7CDACE8BA1E959C692C099385E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 00:00:48 +0000
Manifest this update: Fri 17 Apr 2026 00:00:48 +0000
Manifest next update: Sat 18 Apr 2026 00:00:48 +0000
Files and hashes: 1: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: ch07hIsyrpnlUIpApTSCDayyKD1ikR8W20pJvZ6I4rE=)
2: u73VKktNNDp99ZZ8-aw2FkAHHqE.roa (hash: 50jFlydOYBg1FIR0dL8Ur0REyQFfT4z/eOZDEpcxAyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:7c:da:ce:8b:a1:e9:59:c6:92:c0:99:38:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Apr 17 00:00:48 2026 GMT
Not After : Apr 18 00:00:48 2026 GMT
Subject: CN=b52148c9455a53d79d37089d293ac3b65dfd1ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:a9:71:8b:95:09:b6:a9:eb:8b:9b:b0:cf:
98:31:74:cc:2b:44:7e:86:74:0d:28:99:b1:8d:3e:
1d:ee:1b:9a:57:4d:37:57:56:22:b0:47:03:07:b2:
41:28:1f:8f:3b:9f:a2:9d:35:d5:71:b4:c9:64:3b:
18:86:15:48:58:78:51:33:e8:f8:7a:96:5d:1b:f3:
0c:57:26:0b:99:1d:c9:53:d1:ea:a1:a8:5d:15:4e:
77:7e:96:e6:89:82:3e:f5:6b:73:d0:12:fd:11:d2:
2e:6b:ac:90:d2:08:40:e0:1e:c9:bc:cb:fa:2c:a0:
90:36:e5:e5:b3:7b:1e:c2:d5:0d:f5:8f:11:e6:18:
fc:8c:d7:01:97:34:4f:8c:d3:5f:58:26:5f:f3:e1:
e9:00:a4:1a:4a:20:23:7f:e2:54:0b:89:df:73:ba:
41:9c:0f:2e:0d:85:98:c5:32:f4:71:cf:42:4e:46:
a0:66:8b:a1:7a:a9:85:73:c4:e3:b2:23:ba:56:7b:
69:fe:f5:3a:f4:f8:35:b8:0c:ed:1a:d5:ab:81:56:
51:35:63:db:ad:76:28:d3:8b:89:33:8f:2c:34:7b:
ad:bd:4b:ad:4e:da:3a:45:67:d5:79:22:83:89:ac:
78:b4:62:3a:3a:ff:fb:57:82:63:99:98:50:a7:7f:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:48:C9:45:5A:53:D7:9D:37:08:9D:29:3A:C3:B6:5D:FD:1E:BD
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:91:43:4d:bb:24:bd:34:39:23:25:ff:b1:be:a4:6b:a3:56:
46:09:ed:31:bb:e3:a1:c1:3a:cf:20:5c:16:61:94:61:b3:ee:
97:26:80:34:99:41:e4:39:cb:73:56:1a:6a:47:c4:f2:8f:9f:
b5:e1:29:e9:4b:1f:3f:93:bb:3e:fb:8b:80:de:d7:78:90:bd:
9a:f2:ad:0e:08:36:34:eb:0e:b8:3e:a6:04:4e:3d:d9:66:b9:
43:cd:aa:63:0d:b1:58:14:80:64:a6:99:25:94:4e:48:3d:5f:
66:59:11:a1:08:e4:87:09:a9:4d:15:c8:6a:91:d1:e6:3c:d1:
ef:45:4c:e7:26:33:27:12:b9:6a:a3:25:db:74:2f:b1:63:1d:
fe:36:9e:06:24:8e:44:6d:dc:c9:0a:1d:38:47:7b:90:b8:13:
c7:df:0b:c5:56:54:ae:65:c2:6b:1d:92:7c:29:7c:48:a4:3e:
c9:ff:1c:0a:72:fd:78:51:14:31:86:f7:20:75:de:ab:81:60:
e0:7d:99:6d:a1:85:cc:ba:b0:0b:3c:50:bd:bd:ab:be:c3:9c:
96:d5:23:fa:a6:6c:ad:db:6e:a3:e9:c3:4b:62:c1:f2:98:ec:
2c:fb:1d:fa:ea:80:69:7a:c5:57:ba:31:9c:75:1c:a6:86:6f:
44:ef:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:31 2026 by rpki-client