Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: akblQ+t081ITnGpTwzygeIgil+WXXeE65vTuvKLGm4U=
Subject key identifier: 97:36:DE:0D:AF:A8:CB:FE:32:0C:35:B1:AD:6A:0D:A8:13:88:2A:CF
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 019D9BBEB27A3F357C67B166D20DE2CAC15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 14:00:59 +0000
Manifest this update: Fri 17 Apr 2026 14:00:59 +0000
Manifest next update: Sat 18 Apr 2026 14:00:59 +0000
Files and hashes: 1: pZAFv0jFSIg3T6apn7mzvuziSbo.roa (hash: Mivi7UE7PO7E6vo4gXQ02GjqhdIj6xXgGbCncGPuXD8=)
2: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: tNMEPnc6AFa3kPY/GJgtHX4pLEqApyg0VZ3OQomSoIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:b2:7a:3f:35:7c:67:b1:66:d2:0d:e2:ca:c1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Apr 17 14:00:59 2026 GMT
Not After : Apr 18 14:00:59 2026 GMT
Subject: CN=9736de0dafa8cbfe320c35b1ad6a0da813882acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:99:2c:b0:0a:c8:66:2f:25:99:70:5e:2d:
cb:d5:4a:d9:d2:5b:e0:28:a9:c4:33:b9:31:9d:ed:
4f:9d:6a:65:eb:be:d0:03:eb:a6:f4:5e:2e:ec:56:
3d:d5:5b:36:e9:73:37:ae:6f:a5:18:29:1c:4d:ad:
a5:58:ce:72:7c:4e:c9:b4:ca:e9:dd:81:3c:e2:b7:
a8:db:c2:c7:98:f4:50:01:ae:54:dc:d1:70:35:4e:
cd:e0:57:55:03:87:93:b0:20:ca:92:87:dd:f1:03:
eb:c6:4b:99:b2:4c:66:ef:3e:27:10:2c:69:dd:89:
9c:22:48:bd:1b:37:e6:a5:63:52:22:30:19:37:ec:
1b:bd:68:ca:9e:48:4f:c4:28:21:24:47:88:b8:d1:
0f:63:3d:f3:ac:69:f1:0f:dc:ce:ee:2c:dc:63:a9:
c9:ba:a2:66:02:bc:05:6d:6c:f1:13:e0:71:6c:41:
1c:6c:da:4d:d2:9a:ab:de:ad:5e:0e:d5:24:92:33:
84:9c:c7:02:87:53:0e:8d:71:df:0c:5c:ce:22:67:
7a:4e:ef:48:23:75:1c:f8:3d:00:dd:3a:27:7d:bb:
2c:fe:2a:03:13:71:1c:6f:4b:3f:cf:ef:20:f3:b9:
cb:97:6c:f0:34:a2:5e:d8:de:56:c1:88:27:dd:b2:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:DE:0D:AF:A8:CB:FE:32:0C:35:B1:AD:6A:0D:A8:13:88:2A:CF
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:93:8c:43:eb:95:ba:d0:48:58:c8:69:ba:ee:9e:80:13:
42:82:81:12:65:cc:da:fe:62:98:97:96:53:65:d7:06:2d:1c:
de:0b:bb:1c:bd:a7:41:6f:72:53:1f:b6:68:28:ae:da:6f:76:
61:39:09:bf:78:f1:26:15:11:e7:40:a4:aa:9e:41:48:43:d3:
8b:ba:aa:a3:a9:a3:9b:c0:22:88:84:75:57:91:84:0a:1c:2b:
28:17:39:e1:71:3e:a7:ea:cf:86:3f:98:98:7b:38:ad:06:85:
b9:de:4e:fb:22:5f:5c:d0:68:c8:9d:90:54:d8:73:d8:34:aa:
f9:10:51:1f:a2:ca:d6:41:4e:a7:ff:12:50:4e:80:78:67:16:
8e:b7:83:a5:29:8b:2d:b2:82:dd:82:10:90:8a:90:bf:af:c1:
2e:c4:40:5f:7e:b0:0f:f3:24:6c:33:f0:46:52:dd:a1:e4:77:
c5:94:e6:be:7f:28:65:2c:21:5b:32:36:8f:50:8e:d8:13:1d:
56:e2:41:3d:a3:f1:1a:59:de:74:3a:67:b3:4c:48:85:13:c2:
74:65:73:f1:3c:72:27:72:4e:c0:2d:96:4c:e9:70:eb:2d:69:
38:1b:0c:49:df:82:0a:09:4c:84:35:35:20:69:bd:d0:38:48:
6b:c9:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:17 2026 by rpki-client