Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: UKX7jVXQOjDFAP8c9hm/W2CRaaUcjB0iGsdnbCI+kYE=
Subject key identifier: 0F:33:3B:44:86:69:25:6E:A6:09:0F:61:21:A4:AA:B2:C3:6B:71:3C
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 019D9D75EDC08243D00605B826E9CBD56276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 22:00:44 +0000
Manifest this update: Fri 17 Apr 2026 22:00:44 +0000
Manifest next update: Sat 18 Apr 2026 22:00:44 +0000
Files and hashes: 1: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: LhwuXnL/Oduain5LZ42I8d58CiBsxN6tbPC65aU3t2k=)
2: hGGdrn8Q-dhLWfi_gTkJoK3l29E.roa (hash: 9MCdA6GuzpZs6FZt15tnmy+ZE9OMe0TMy0YGpKngBio=)
3: iNjCT_BLZd9vl0rv4dLzCKK08gs.roa (hash: mlyMniHzelFP8RaHqU3fioWDlio2eP7RJTE7Lvl+uWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:ed:c0:82:43:d0:06:05:b8:26:e9:cb:d5:62:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Apr 17 22:00:44 2026 GMT
Not After : Apr 18 22:00:44 2026 GMT
Subject: CN=0f333b448669256ea6090f6121a4aab2c36b713c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:9b:62:2c:08:b8:70:34:95:6b:29:29:95:
55:9c:bf:dc:1a:6f:d3:f9:a2:e5:75:9e:79:92:b1:
99:94:8f:9d:e9:d9:b5:ff:ad:61:ff:f0:75:81:75:
a8:80:b5:98:2d:c4:2a:2a:4e:3d:bd:71:02:f5:43:
0c:e4:77:18:d4:5c:3d:58:2f:f0:9c:2d:ca:a4:c9:
ed:9b:22:7c:cb:6a:fc:08:3d:f8:7c:3d:d5:14:c5:
dd:0b:2f:11:d1:c7:aa:39:4e:21:0d:65:c7:54:5d:
a1:e6:a8:ed:2b:31:fb:6b:ce:a9:2b:09:9d:f1:65:
76:08:37:08:ac:72:f4:54:69:ea:1f:18:68:26:95:
04:4c:61:5d:eb:0a:2d:2f:5a:e9:a4:4e:79:cf:d3:
83:5f:dd:64:45:2e:f0:bf:5c:73:9e:95:13:da:a6:
46:3c:32:25:5e:23:c1:70:3a:28:f2:e5:18:8c:d8:
8f:84:c4:66:8e:ef:28:94:3b:0d:9a:7c:e7:a0:6e:
ce:e5:9b:fd:13:19:ab:65:6b:f6:d4:3e:84:6a:40:
af:7c:76:0e:e5:68:56:a1:8d:98:b9:56:29:48:a1:
9b:89:1d:dc:25:5f:5c:7e:34:b4:37:14:67:7c:f8:
71:d5:8f:22:e4:a2:5f:f1:ad:ea:12:a3:7d:83:d2:
3f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:33:3B:44:86:69:25:6E:A6:09:0F:61:21:A4:AA:B2:C3:6B:71:3C
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:59:3b:14:ae:5c:f8:ab:29:27:b7:ec:5e:13:9a:8e:09:95:
dd:04:ca:81:e9:ac:39:7d:15:bd:b0:88:95:b0:41:5f:5a:0f:
bf:42:72:d0:fe:88:bf:7d:00:dc:ba:a6:6b:6c:af:dc:09:5e:
7d:e3:17:e5:e5:00:e1:39:15:e0:88:52:99:de:0b:ad:65:d0:
9e:98:fa:df:2d:23:35:d4:19:52:83:bd:14:a6:da:49:f3:87:
69:6a:b6:5a:71:b9:37:0b:3d:1b:62:38:a2:10:36:f8:bf:63:
45:38:f1:bf:3f:b7:4c:68:c1:82:ac:46:5b:98:f2:64:ba:65:
5d:54:e1:a8:c8:8a:94:da:0b:ec:e8:8a:41:fd:ef:90:3d:15:
5f:1c:37:34:fc:c7:b9:f8:10:28:5c:f5:7b:c6:db:9f:b7:4e:
c9:2c:9a:ca:e5:98:37:97:9c:f1:d9:0b:ff:40:76:5d:95:d4:
d7:f1:00:52:84:f2:0d:66:91:41:88:df:77:66:b8:e9:74:a7:
d2:a1:e7:c5:fd:57:05:ec:c4:ea:0c:f7:b1:93:0a:a3:0d:ee:
d8:a4:f5:9c:f4:d1:cd:7e:5b:ae:1d:00:7a:b9:34:ec:4c:b8:
bf:64:ea:8f:40:1a:d3:f5:76:ad:8f:a7:33:18:c5:05:b1:30:
9d:78:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:41:00 2026 by rpki-client