Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: E+/DGqFuxAEFW6zA/FFR1dudMItVcBchlk1hDKa/D4o=
Subject key identifier: 48:1E:A5:F7:CA:86:83:6F:88:6B:19:B3:5E:0A:24:56:E1:AF:AE:E4
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019D9BBE3C714265220A25E553BD0F208FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 1536
Signing time: Fri 17 Apr 2026 14:00:28 +0000
Manifest this update: Fri 17 Apr 2026 14:00:28 +0000
Manifest next update: Sat 18 Apr 2026 14:00:28 +0000
Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: MUwgsH0po68c+tg58JgH9I78zfiXd0taRkJ7zZyL/DI=)
2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:3c:71:42:65:22:0a:25:e5:53:bd:0f:20:8f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Apr 17 14:00:28 2026 GMT
Not After : Apr 18 14:00:28 2026 GMT
Subject: CN=481ea5f7ca86836f886b19b35e0a2456e1afaee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:82:9d:8e:61:ea:d9:fb:9d:20:2e:99:54:
93:3e:36:0b:f5:b2:1b:9f:e6:7d:89:8e:b7:a7:b7:
d7:c9:3b:c4:20:82:62:c6:f7:cf:0f:7c:71:1a:40:
5f:8f:47:e7:9e:cd:d1:79:3b:d1:0b:0b:f3:95:73:
e3:87:d4:3f:5b:4f:f9:1c:a4:8a:70:d4:ff:81:d7:
ea:1e:fa:bc:6b:4c:85:d7:e3:5a:1c:e5:f7:62:fd:
a9:39:cd:5e:f6:1b:21:86:00:40:fa:0b:d0:c8:52:
21:48:37:bc:26:a2:99:a5:89:b8:06:f0:a0:0a:98:
0c:39:86:9a:13:72:f7:2b:ba:55:38:a3:28:3b:09:
3f:f1:7c:f9:7e:7c:f9:7a:40:0f:ab:c2:25:6d:03:
79:45:c8:b7:0b:6f:4c:1d:38:77:ae:81:d4:eb:e4:
d4:90:4b:35:75:ad:73:6a:c3:6d:70:a0:f1:b1:4f:
6f:d0:8d:2f:12:fe:5b:ba:26:2f:5b:d5:22:48:cc:
d3:36:ba:2a:d9:cf:3e:50:71:a6:4c:33:e8:36:74:
82:3a:ce:ba:df:23:b9:f0:b7:61:4f:19:92:9d:6e:
d4:da:78:a0:59:d3:57:e9:02:9b:ac:c3:a2:23:1e:
d9:93:a6:54:cb:f1:41:34:3a:3e:63:f1:38:67:da:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1E:A5:F7:CA:86:83:6F:88:6B:19:B3:5E:0A:24:56:E1:AF:AE:E4
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:de:d0:d3:f4:9c:b3:5b:a0:fc:13:d9:57:28:ad:ba:74:63:
f1:04:b4:c3:8e:80:eb:12:0f:9e:e9:2b:a8:e2:f9:66:67:82:
c3:36:ad:75:0b:bf:20:28:0b:03:44:2d:85:a2:01:af:e7:1d:
c3:98:03:dd:0d:b3:9c:f8:ac:7d:42:2c:af:1f:83:cf:d8:52:
45:82:40:c7:18:99:7f:8a:be:ea:fd:3b:95:2c:3d:96:2e:42:
02:7d:20:be:86:59:4b:eb:e5:89:71:67:7d:3c:17:cb:39:44:
79:1b:b4:b2:d4:8c:29:da:29:d4:1c:15:97:8f:0c:f1:a7:fb:
d3:c0:d1:50:a2:04:72:98:cf:6a:4b:73:b3:3b:6a:f7:39:24:
63:56:56:10:79:95:9d:0a:e1:9d:24:1e:c8:b0:c7:d3:e8:f3:
03:f6:9d:20:3a:28:cc:65:d0:a4:f0:4a:28:78:77:29:64:5d:
f0:93:a6:2e:86:ee:2a:b1:d7:d4:9a:be:a2:80:6a:7e:d5:7b:
e8:53:cf:a6:11:f4:ba:f3:d3:c6:ee:da:cb:6c:a3:b4:a2:f5:
12:48:eb:78:c2:03:ae:85:b7:9c:47:e5:7e:e1:c0:e8:58:95:
d3:e4:0b:be:c2:c0:0f:5e:42:3a:7b:bb:e9:d3:2d:e7:3c:37:
cf:fe:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:50 2026 by rpki-client