Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: zOqHX9JlEa2SxIBw+bW91t8ac7sJWg02ecrNJbanoaE=
Subject key identifier: 54:7E:92:B4:94:F8:79:38:79:8E:94:6C:BE:ED:A2:40:51:68:6D:77
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019D9AABE20D3E2F4F350FBF9E404FAD60A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1866
Signing time: Fri 17 Apr 2026 09:00:48 +0000
Manifest this update: Fri 17 Apr 2026 09:00:48 +0000
Manifest next update: Sat 18 Apr 2026 09:00:48 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: drrpX/AF2NJCLfdLQUMfCivZ3UZNGE9CKfboJ0ElMcg=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e2:0d:3e:2f:4f:35:0f:bf:9e:40:4f:ad:60:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Apr 17 09:00:48 2026 GMT
Not After : Apr 18 09:00:48 2026 GMT
Subject: CN=547e92b494f87938798e946cbeeda24051686d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:58:d7:04:69:88:89:9c:4d:71:d0:f0:ef:
75:75:42:d4:c9:65:e4:71:ab:0b:8f:28:a5:8b:7a:
5a:7b:4f:b2:2d:91:b6:5a:c0:c0:a1:79:92:57:0e:
a9:21:d4:6f:d8:19:4d:e2:92:bd:88:d2:b5:49:6d:
36:3a:6d:a6:ff:d7:31:84:4e:17:28:61:cb:36:90:
5a:98:fa:7f:c6:8a:6e:a4:15:a5:06:97:dd:01:60:
9e:57:3c:3e:e4:46:42:cb:0d:24:da:6d:6b:88:05:
b0:4f:17:ae:1c:da:96:1f:f5:af:fd:61:03:e6:61:
36:75:94:01:d7:e4:a2:97:73:c8:b1:d5:d4:3f:ad:
cf:b5:92:6a:74:51:fd:c5:9f:7a:54:e9:46:53:0e:
6e:7c:b6:dc:06:05:71:c5:71:70:23:70:e9:b9:05:
0b:54:94:ee:20:31:49:4f:cc:4a:fe:49:09:e9:11:
e0:c0:8a:03:2b:ed:5b:91:4f:26:7e:14:57:3c:5c:
22:90:89:cf:80:23:09:53:c6:4f:c1:e4:26:86:08:
71:5f:66:05:f8:97:b7:45:f0:80:c7:57:6a:43:ac:
9e:44:32:ff:42:95:cc:35:f4:d1:6e:25:cc:14:10:
69:74:21:43:34:5b:06:d9:78:1d:f8:ec:2c:f5:f4:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:92:B4:94:F8:79:38:79:8E:94:6C:BE:ED:A2:40:51:68:6D:77
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:00:59:ad:d2:1c:e9:95:fa:1d:30:a0:8b:c3:39:e5:54:5e:
a8:fc:a5:e0:be:d9:d7:bf:b4:7f:81:af:4f:28:9a:cc:87:bb:
f0:04:c4:02:a2:9a:4d:c1:65:75:47:9e:f1:e3:bb:2a:ad:da:
da:7c:93:5f:24:c2:95:94:d6:e0:32:2a:99:34:a3:72:9c:97:
41:5a:2b:b5:89:79:89:b6:0b:ca:89:8a:d6:f8:07:8a:0d:14:
ab:0f:44:bc:0c:2a:a6:2e:c2:54:ce:41:29:51:56:94:fc:45:
1e:ea:ad:c5:66:2e:50:ea:93:a4:9a:47:9d:aa:7f:3f:0c:58:
b3:74:77:70:17:26:3e:d6:25:0c:51:d2:15:9c:34:ac:98:b8:
ef:bc:c5:5a:bb:c8:4f:3e:ba:eb:04:4c:ce:e2:38:2b:d4:b2:
07:f1:a7:8e:c7:92:b0:cb:7a:5b:0c:0e:dc:3d:4e:a5:36:62:
5a:c7:c9:e3:65:56:a4:ed:67:a8:1b:57:31:06:f0:c5:08:da:
21:b8:c4:94:69:15:c7:7c:d5:3f:40:17:50:e3:18:36:7f:64:
64:03:ef:97:a4:80:8a:a2:cc:dd:1f:d6:e1:fa:34:5a:9b:bc:
a7:7f:24:fc:f8:23:b0:65:13:c4:c4:81:77:70:15:ee:45:b1:
78:bf:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:48 2026 by rpki-client