Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: NrjnI6KZCuA2ANiIjOaT/O/p1tLS0W6xipzRQarfX4c=
Subject key identifier: 9B:01:E2:50:DC:AA:2C:90:95:90:F3:A4:D7:5D:9F:23:E5:D9:A7:1C
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019D9B50BC9E5C5CA2ED9AF598FC6BA8A617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 12:00:52 +0000
Manifest this update: Fri 17 Apr 2026 12:00:52 +0000
Manifest next update: Sat 18 Apr 2026 12:00:52 +0000
Files and hashes: 1: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
2: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: YMej5tHU3QL4AEYoHL+TEQ8WbNimYW6hgoPIj193iJA=)
3: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:bc:9e:5c:5c:a2:ed:9a:f5:98:fc:6b:a8:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Apr 17 12:00:52 2026 GMT
Not After : Apr 18 12:00:52 2026 GMT
Subject: CN=9b01e250dcaa2c909590f3a4d75d9f23e5d9a71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:65:d6:33:bf:09:29:0d:56:dc:00:7e:b4:
38:1e:98:aa:bf:5a:60:30:39:b0:31:a5:8f:f5:9e:
79:88:0f:c3:e7:0c:6c:4a:36:3e:c6:d8:2e:9e:ca:
ae:d6:6b:ca:a5:c0:2f:88:91:9a:49:72:54:5b:cf:
fa:50:23:61:31:4d:7f:83:94:a6:82:b8:16:64:33:
4f:ea:18:13:64:84:d5:6b:c3:44:5d:d3:b0:e1:93:
c3:4a:c8:2d:8f:f8:89:5b:15:de:58:74:5a:76:ec:
ad:d3:b9:bc:27:63:f9:5f:af:08:8f:0a:c7:63:72:
40:79:aa:19:a6:6b:8e:27:87:83:bc:c2:3b:ef:68:
50:9f:a1:5a:f9:c3:33:d9:85:5b:15:de:49:0b:3f:
c1:e4:59:d3:e1:b7:e0:57:a4:77:81:88:0b:b5:11:
f9:ed:4e:a1:f0:14:73:13:d3:af:d4:cd:4f:ce:1c:
59:18:0b:3b:c2:3c:98:a4:9d:3a:88:08:32:a2:e6:
77:fc:16:3a:12:80:15:90:d9:74:47:5b:98:f8:2e:
76:2c:66:2b:cc:c1:0e:6c:c2:5a:a0:99:1a:a8:7f:
dd:6e:a0:9a:4a:2b:de:d5:18:69:a6:c5:13:22:87:
35:6e:2c:9e:e4:4b:d7:4f:ad:f3:90:d1:08:a8:72:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:01:E2:50:DC:AA:2C:90:95:90:F3:A4:D7:5D:9F:23:E5:D9:A7:1C
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f4:d3:01:fa:95:21:c0:d2:3c:54:32:48:01:42:53:25:ec:
62:76:f4:d4:be:db:37:af:26:fc:7c:6a:70:a1:35:5a:7a:8b:
74:d3:6d:0b:f9:0e:91:19:e6:f4:94:71:89:2b:c8:e3:3b:2a:
54:e4:c8:b8:53:e0:c0:f2:6f:62:2d:a5:b5:83:4d:ea:04:a4:
2d:aa:d2:20:15:ee:ae:3b:de:7c:82:14:6c:00:99:d9:4a:41:
62:cf:80:e3:dd:19:ff:e1:09:85:ea:25:34:81:a2:dd:5f:af:
95:c3:9d:3a:1f:1f:fc:79:39:e2:d1:9b:e9:82:5f:e3:3f:f4:
14:ac:32:d4:5c:28:1b:9a:08:61:43:72:66:92:f3:df:c5:65:
f2:35:a6:14:9d:cb:54:a3:fb:39:42:65:08:2b:3f:8b:54:44:
57:40:7f:ba:ae:d7:8f:bd:8e:fc:42:06:d8:ef:e4:79:0e:96:
c0:8b:94:ff:1c:10:27:6e:da:27:2e:80:5d:a8:26:5d:4f:6e:
dd:73:3f:9a:a6:6e:7f:b7:27:8b:90:25:86:33:62:09:39:c9:
e5:ab:16:16:e0:82:6d:bb:06:02:d2:09:57:4b:13:25:8b:eb:
53:ee:91:8e:29:04:c4:21:25:c7:83:38:bf:95:2a:c5:61:52:
c6:bc:06:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bULyeXFyi7Zr1mPxrqKYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm
NGNlM2MwHhcNMjYwNDE3MTIwMDUyWhcNMjYwNDE4MTIwMDUyWjAzMTEwLwYDVQQD
Eyg5YjAxZTI1MGRjYWEyYzkwOTU5MGYzYTRkNzVkOWYyM2U1ZDlhNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyohl1jO/CSkNVtwAfrQ4Hpiqv1pg
MDmwMaWP9Z55iA/D5wxsSjY+xtgunsqu1mvKpcAviJGaSXJUW8/6UCNhMU1/g5Sm
grgWZDNP6hgTZITVa8NEXdOw4ZPDSsgtj/iJWxXeWHRaduyt07m8J2P5X68IjwrH
Y3JAeaoZpmuOJ4eDvMI772hQn6Fa+cMz2YVbFd5JCz/B5FnT4bfgV6R3gYgLtRH5
7U6h8BRzE9Ov1M1PzhxZGAs7wjyYpJ06iAgyouZ3/BY6EoAVkNl0R1uY+C52LGYr
zMEObMJaoJkaqH/dbqCaSive1RhppsUTIoc1biye5EvXT63zkNEIqHIUuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsB4lDcqiyQlZDzpNddnyPl2accMB8GA1UdIwQY
MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt
Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw
LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfTTAfqV
IcDSPFQySAFCUyXsYnb01L7bN68m/HxqcKE1WnqLdNNtC/kOkRnm9JRxiSvI4zsq
VOTIuFPgwPJvYi2ltYNN6gSkLarSIBXurjvefIIUbACZ2UpBYs+A490Z/+EJheol
NIGi3V+vlcOdOh8f/Hk54tGb6YJf4z/0FKwy1FwoG5oIYUNyZpLz38Vl8jWmFJ3L
VKP7OUJlCCs/i1REV0B/uq7Xj72O/EIG2O/keQ6WwIuU/xwQJ27aJy6AXagmXU9u
3XM/mqZuf7cni5AlhjNiCTnJ5asWFuCCbbsGAtIJV0sTJYvrU+6RjikExCElx4M4
v5UqxWFSxrwGmw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:50 2026 by rpki-client