Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: sig4hq5NCVsMfI89ifvoE1fOgyvsW/QFX7sEyfXwLk4=
Subject key identifier: 74:E5:F1:35:E0:FE:AE:F4:40:E9:7A:AE:96:0D:E5:DF:AE:E0:AB:AA
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 019D9AE31A0C293C278E579966D4F2EB27A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:01:07 +0000
Manifest this update: Fri 17 Apr 2026 10:01:07 +0000
Manifest next update: Sat 18 Apr 2026 10:01:07 +0000
Files and hashes: 1: OuWJs9Uzxdf-ZKAcWIAL89IuopI.roa (hash: 16WKJl9nAt0F5mIivt4fYmu6w5/8Iqob4RhznilyhtM=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: axTF4XaM/GBJh18cW1HP0eaRL/pyUJslXmcbXbGU6jU=)
3: ken38hVxmy14aPMAbzAPgPTg5Qc.roa (hash: TJhvTJDZL4uFVPaDoKqNX3HyglY2ChDkoRzq0njH+TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1a:0c:29:3c:27:8e:57:99:66:d4:f2:eb:27:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Apr 17 10:01:07 2026 GMT
Not After : Apr 18 10:01:07 2026 GMT
Subject: CN=74e5f135e0feaef440e97aae960de5dfaee0abaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:be:0b:be:f5:33:73:cf:cb:22:22:a3:35:
4b:d3:3b:7a:97:0a:d9:be:6e:6b:00:95:dd:cf:a1:
e8:e6:bb:04:d6:38:02:a9:98:41:94:ec:20:6d:67:
64:0c:0a:d0:1c:75:fd:a7:54:9d:c3:df:f6:09:6a:
7f:ee:18:40:19:40:e1:97:84:16:f4:61:e4:77:a1:
b7:38:39:dd:4a:56:f8:67:a3:5a:b4:6a:99:c4:e8:
ec:b1:22:4d:46:78:42:2b:eb:15:0f:93:4a:d6:c0:
73:4c:89:25:4e:68:69:d4:87:4e:38:00:d9:9d:89:
cd:23:a4:f4:f9:87:be:fa:2e:53:aa:98:31:a0:c7:
64:4b:49:0b:be:83:9b:60:65:dd:b9:af:71:06:76:
30:3f:4e:cb:b4:ae:86:f6:84:d2:76:bd:af:c4:0e:
ad:14:1e:b3:66:ff:06:b4:69:ef:21:a8:9b:cf:f0:
c7:d7:7d:36:a3:af:aa:cf:7c:97:89:67:71:b4:84:
57:de:64:1e:3d:63:73:0a:ea:d9:98:92:67:c4:ea:
c9:bb:eb:c1:81:32:82:86:78:53:2a:65:a1:7f:be:
6b:e7:fd:57:d9:68:7e:7a:f0:04:02:c2:49:81:75:
4b:15:56:e6:4d:c7:be:af:c3:ed:45:cc:15:5d:a2:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:F1:35:E0:FE:AE:F4:40:E9:7A:AE:96:0D:E5:DF:AE:E0:AB:AA
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:09:78:21:fa:e3:22:0d:dd:16:48:60:e1:03:06:cc:0d:4a:
5f:45:61:55:a7:71:88:4c:a0:d8:48:27:67:a0:50:14:ae:b4:
7d:99:f5:5f:81:e3:2e:b3:87:85:f9:2b:88:d1:7d:bb:ac:82:
c7:bd:eb:22:d2:4b:1c:c5:98:ed:5e:8c:45:a6:b7:27:9d:bc:
8a:da:05:ef:9f:1b:f1:d1:a7:09:28:7f:9c:25:a0:8f:ee:ac:
1b:10:9b:74:9e:df:82:17:c9:0b:04:e7:00:26:d8:56:5e:2b:
85:74:07:2d:f6:15:c2:66:62:9b:45:df:91:4b:38:70:ae:f9:
ca:fb:85:88:6b:c3:13:23:37:e6:6f:54:81:65:df:2c:25:96:
a6:06:40:18:15:27:68:b8:24:12:1d:bb:88:6e:3b:d4:43:fa:
f4:bc:08:55:87:2f:26:f3:44:81:dc:cb:e9:ac:bb:ff:47:03:
60:3f:e9:e3:2e:ac:d2:aa:b6:3d:85:1c:04:5c:23:7d:5c:f4:
7f:01:f0:0c:c9:55:3b:dd:62:fe:34:6c:d6:ad:7c:76:74:c6:
07:5e:e0:98:60:9b:6d:73:e0:31:c0:af:1f:2a:21:9a:cb:8d:
f7:67:80:f0:eb:90:19:ff:53:56:ac:e1:8f:98:0e:39:5b:d8:
57:60:e0:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4xoMKTwnjleZZtTy6yekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx
YTI4YjkwHhcNMjYwNDE3MTAwMTA3WhcNMjYwNDE4MTAwMTA3WjAzMTEwLwYDVQQD
Eyg3NGU1ZjEzNWUwZmVhZWY0NDBlOTdhYWU5NjBkZTVkZmFlZTBhYmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA6+C771M3PPyyIiozVL0zt6lwrZ
vm5rAJXdz6Ho5rsE1jgCqZhBlOwgbWdkDArQHHX9p1Sdw9/2CWp/7hhAGUDhl4QW
9GHkd6G3ODndSlb4Z6NatGqZxOjssSJNRnhCK+sVD5NK1sBzTIklTmhp1IdOOADZ
nYnNI6T0+Ye++i5TqpgxoMdkS0kLvoObYGXdua9xBnYwP07LtK6G9oTSdr2vxA6t
FB6zZv8GtGnvIaibz/DH1302o6+qz3yXiWdxtIRX3mQePWNzCurZmJJnxOrJu+vB
gTKChnhTKmWhf75r5/1X2Wh+evAEAsJJgXVLFVbmTce+r8PtRcwVXaK89QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTl8TXg/q70QOl6rpYN5d+u4KuqMB8GA1UdIwQY
MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt
ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5
LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAl4Ifrj
Ig3dFkhg4QMGzA1KX0VhVadxiEyg2EgnZ6BQFK60fZn1X4HjLrOHhfkriNF9u6yC
x73rItJLHMWY7V6MRaa3J528itoF758b8dGnCSh/nCWgj+6sGxCbdJ7fghfJCwTn
ACbYVl4rhXQHLfYVwmZim0XfkUs4cK75yvuFiGvDEyM35m9UgWXfLCWWpgZAGBUn
aLgkEh27iG471EP69LwIVYcvJvNEgdzL6ay7/0cDYD/p4y6s0qq2PYUcBFwjfVz0
fwHwDMlVO91i/jRs1q18dnTGB17gmGCbbXPgMcCvHyohmsuN92eA8OuQGf9TVqzh
j5gOOVvYV2DgOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:44 2026 by rpki-client