Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: r56xex4y4tvYJ1Evc3HMxrHt4yVjj2iPHrlye93XuLo=
Subject key identifier: 02:E7:AC:D3:7A:25:A7:AB:E7:87:3E:DD:B3:2C:6E:F9:03:DC:FD:FA
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 019D984FB9B1A3553FD39C6DB17E6E46FC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 0F13
Signing time: Thu 16 Apr 2026 22:00:54 +0000
Manifest this update: Thu 16 Apr 2026 22:00:54 +0000
Manifest next update: Fri 17 Apr 2026 22:00:54 +0000
Files and hashes: 1: RGHMhabHZkPW5wXprVh6WUeUNEU.roa (hash: aWxpktwD4HwK4DqUq/i3jSDZlGsjYGbb6rrk+6zxpz0=)
2: hW9pmZmoOAPv4EQxUHQXTXDJr6s.roa (hash: mjwhxdNEgH8aH/IfZWkqyz4fW356i+YVNu/YE2e6m8A=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: AtzB0I65DeuQRhXjHapj/Bc6Hli/cSwdSqLj9Hg1cw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b9:b1:a3:55:3f:d3:9c:6d:b1:7e:6e:46:fc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Apr 16 22:00:54 2026 GMT
Not After : Apr 17 22:00:54 2026 GMT
Subject: CN=02e7acd37a25a7abe7873eddb32c6ef903dcfdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:19:62:2a:22:5c:50:e0:e4:e4:a8:ba:01:
e0:25:c0:f3:66:d0:71:27:c3:a7:bf:62:98:63:33:
1c:79:dd:a4:fd:51:3f:43:de:ad:13:b6:7b:b0:2f:
b0:07:22:39:1e:87:ae:d1:be:9a:28:77:53:05:c1:
5d:3c:91:9b:2c:b6:60:d2:f2:f4:9f:64:5b:f7:a4:
cc:1f:12:75:99:a5:14:b4:ad:ce:fa:d5:c9:25:f8:
a1:36:d3:94:fe:f8:b6:cd:9c:2e:a7:99:90:04:0e:
80:9a:a0:08:4c:90:67:3a:b3:09:69:84:31:c7:d5:
ef:bd:59:be:37:7f:c3:4f:5d:73:ac:71:a9:a4:6f:
32:77:87:09:d8:0a:81:8b:ca:35:ff:6d:97:d4:51:
04:72:1f:95:30:c6:90:fa:0f:b7:98:17:ac:76:ea:
3b:dc:63:54:2a:30:4e:03:9c:2c:d2:9e:3b:ea:d9:
06:00:87:f4:1c:a6:07:b6:c7:34:fb:bb:a9:2e:36:
79:a7:fa:5b:e8:6d:52:ae:47:d0:f3:6f:66:80:d2:
34:8e:80:d6:86:fd:69:c3:27:30:43:61:dc:d2:0a:
c2:aa:45:97:53:d7:9a:e1:1e:1c:19:62:a6:72:e0:
cc:cb:58:9a:25:2b:ca:ef:38:d6:f9:84:bd:ef:ca:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E7:AC:D3:7A:25:A7:AB:E7:87:3E:DD:B3:2C:6E:F9:03:DC:FD:FA
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9c:e1:6c:e2:cf:b1:b8:80:70:8e:f0:cf:db:71:56:ad:3c:
16:4a:95:b8:2e:02:97:37:ee:ad:7d:95:aa:ab:f5:52:7e:39:
41:67:fb:19:7b:b6:68:1a:5e:3e:38:68:7b:7b:67:41:71:f2:
c4:d8:56:ca:31:44:20:58:d4:82:7d:95:e5:56:a1:2b:f2:09:
95:e7:12:77:73:bf:8b:90:c6:08:f0:a0:ab:75:87:24:d7:18:
39:9b:c4:93:c8:28:6b:c8:36:fb:b3:ea:0c:ec:e7:c2:67:45:
c6:9c:79:b2:e1:18:4a:1f:63:f9:3d:1e:41:2a:d6:20:7d:ce:
fb:19:e5:3d:9f:ca:91:c2:e7:dc:32:89:00:db:f6:91:b4:bf:
fc:77:b3:2d:92:df:c2:41:fb:db:f7:39:3d:42:d0:00:1b:8e:
5b:f8:12:37:93:b7:a5:9d:9c:bb:ad:53:60:97:07:b1:28:50:
19:ba:36:b6:69:59:76:aa:74:57:51:4e:4b:f2:d9:cb:cb:f4:
29:15:30:43:be:9b:dd:2e:1b:07:13:a1:d0:2f:d0:0b:2f:8a:
53:2c:47:a6:ca:91:99:80:2e:79:62:64:63:51:00:d5:af:ab:
6c:8b:6c:e0:ac:51:9b:ea:e2:be:ab:b7:c7:04:bf:b5:52:75:
f5:70:db:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:36 2026 by rpki-client