Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: hlarBrvFaJ4mwNckRBhEZSMfoJYq38+tqQ6PDZP4Rx8=
Subject key identifier: 59:0F:F0:F0:4D:4C:31:03:00:82:65:AA:30:DE:67:34:B0:A2:9C:75
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 019DA30A0E83749D96E77B0F80058CD0B97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 00:00:38 +0000
Manifest this update: Sun 19 Apr 2026 00:00:38 +0000
Manifest next update: Mon 20 Apr 2026 00:00:38 +0000
Files and hashes: 1: OLNyTBFLB0GRgG6WCzbXR7UvRrA.roa (hash: I/YlyloEBTVluHRzMYW18o3EO4jxYYroq7F9Zg2Jggo=)
2: fCBNQoZpXWRf7HiESYlfI6ubNuI.roa (hash: Xi95Rj4tFLGoeBm6XrdM9ofNJV6OvWlEYiGW/UAuLU4=)
3: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: 6T+hQ4DoXKIwr74yqjU9QycShbEvSKXJmcjkSGhdeKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:0e:83:74:9d:96:e7:7b:0f:80:05:8c:d0:b9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Apr 19 00:00:38 2026 GMT
Not After : Apr 20 00:00:38 2026 GMT
Subject: CN=590ff0f04d4c3103008265aa30de6734b0a29c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:e2:2d:10:cc:de:84:7d:fc:6e:7e:ed:c1:
52:ed:88:af:87:b6:10:92:f8:4c:56:b9:d5:ba:07:
98:24:bc:91:7f:69:6f:1f:8c:ca:0a:54:68:41:da:
4c:9a:4b:d7:42:05:bc:4e:ce:bf:dc:66:96:fa:fd:
ee:c9:3c:d7:1a:3f:7f:6c:8d:ae:bf:ed:b3:cd:8f:
a3:61:19:84:c6:34:c1:33:e3:9d:41:00:cb:21:95:
2c:78:45:78:d7:92:84:97:a7:bf:e5:a5:8f:08:25:
b0:b0:02:f9:84:39:2d:c7:66:84:d5:18:a5:60:47:
08:3c:a2:4a:6b:dd:22:5a:9d:94:a2:99:5b:12:73:
26:d0:af:b4:65:1e:54:26:c2:2c:d5:30:fa:96:eb:
5c:ea:ac:bc:46:0b:65:34:45:31:34:3e:6f:a0:c5:
ef:22:cc:9b:74:a3:b6:bf:16:9c:31:e9:97:3f:be:
25:f7:d1:63:6d:39:c0:1d:d1:45:af:a9:9b:c5:93:
d0:18:2c:69:90:86:c2:c3:5b:8d:8f:e7:d4:bc:84:
d4:b2:c8:05:97:15:9e:af:08:a5:a1:d0:01:d9:7d:
8c:dc:1b:80:90:40:69:b5:53:38:e5:a0:3a:22:69:
8c:d2:32:3a:6b:34:f5:14:29:cb:23:46:7c:a8:9c:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:F0:F0:4D:4C:31:03:00:82:65:AA:30:DE:67:34:B0:A2:9C:75
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:db:65:ce:ec:f4:cb:43:9f:c2:64:58:00:c0:c1:15:49:42:
87:ba:2b:04:00:1f:2f:95:f2:15:04:12:3b:98:f9:4a:6d:16:
eb:d2:57:3d:2d:00:d8:da:f3:e0:f3:4f:24:f1:ff:aa:8b:b3:
27:da:3e:a3:51:10:05:14:e6:3d:61:bc:6a:45:0d:13:e4:fb:
7c:1c:01:f0:1b:e1:3c:6f:52:8a:8c:4c:47:9c:eb:d6:75:32:
d5:e6:83:d7:c3:5c:67:fb:1e:87:92:34:8b:be:92:4c:60:f9:
b2:90:c9:73:c5:37:b4:1c:0b:16:06:24:fc:f5:49:20:ec:28:
55:c7:a0:d6:08:61:e3:c9:25:04:a1:fb:ff:62:e3:b5:e5:d5:
a1:4b:61:68:e6:9f:20:b6:9c:79:64:12:8e:86:33:fe:0e:8a:
ee:7a:ed:cc:29:b8:95:3e:95:4b:e7:ae:e7:aa:f9:0f:c7:a2:
41:2f:90:d4:26:48:f8:f6:45:ef:c2:30:e3:4d:90:e6:ce:ae:
fc:6a:84:75:6a:01:75:7f:b6:a1:46:dc:74:83:d2:3f:2b:31:
80:25:0b:f1:f3:8b:3f:e1:12:27:b7:f9:f4:34:71:1f:03:38:
73:be:0e:88:89:de:2f:8f:69:ad:75:95:60:bb:d9:5d:55:c2:
8a:5e:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:46 2026 by rpki-client