Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: EFwiTDDkMRmyRUmwN1cMSJIzvJGOZW2dgFdChcu5cZw=
Subject key identifier: 53:CC:F2:CD:59:FD:E3:F6:FF:40:D8:6C:2D:A4:6E:05:9D:C5:EB:0E
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 019DA3AEB82FE045F691932115CDEE807F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 0B18
Signing time: Sun 19 Apr 2026 03:00:29 +0000
Manifest this update: Sun 19 Apr 2026 03:00:29 +0000
Manifest next update: Mon 20 Apr 2026 03:00:29 +0000
Files and hashes: 1: WXDefoGzoUIZ3AxVVx77aC_MDc4.roa (hash: 0/oY/YwsoelOzPNcClAu/TuufBye/1HGrabd5S28VWg=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: jW2n6BwduqjPgiIjXNkxIQZUZHz6Iu6YfwHvhk0knGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:b8:2f:e0:45:f6:91:93:21:15:cd:ee:80:7f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Apr 19 03:00:29 2026 GMT
Not After : Apr 20 03:00:29 2026 GMT
Subject: CN=53ccf2cd59fde3f6ff40d86c2da46e059dc5eb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:33:7d:8e:be:49:e3:f5:4e:51:ed:1e:d0:
15:bc:80:71:c9:02:28:88:49:b4:29:13:5c:73:05:
f3:b7:bd:bf:c7:ab:03:54:77:dd:82:14:f7:85:f7:
84:df:c3:dc:9e:33:f8:fa:db:a8:ff:c8:32:03:5e:
9c:3d:14:23:ae:e8:8b:e6:c7:96:b0:0e:1a:ef:f4:
aa:f8:aa:0a:72:32:d0:26:e6:29:81:ee:65:85:24:
51:f9:9d:0a:be:f4:5d:a6:0d:07:65:b4:be:53:ad:
eb:72:64:0e:f2:46:30:e0:76:c8:ea:b3:bd:5a:be:
45:2b:ff:a2:73:9a:12:92:19:ad:98:22:80:3d:de:
5a:17:61:b7:e1:b3:8a:d4:aa:a8:95:b6:4c:9e:13:
76:ba:c9:d8:ed:ee:5e:cc:e7:f1:f0:d1:a7:41:c1:
ab:71:9b:ea:01:2a:26:9b:52:34:11:71:55:7d:4c:
a1:4b:5c:26:da:c0:9d:ff:44:44:19:20:c1:2a:31:
49:2c:b8:7e:39:8f:63:36:db:72:ac:14:cd:b8:52:
0e:6d:b1:1e:e9:5f:94:d3:f9:a9:54:a2:5f:de:db:
7e:36:e9:72:bd:1f:ea:89:a5:18:64:cc:3b:73:56:
ae:96:45:0f:e1:66:77:41:3d:50:90:c5:70:46:a7:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CC:F2:CD:59:FD:E3:F6:FF:40:D8:6C:2D:A4:6E:05:9D:C5:EB:0E
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f1:a7:9d:24:af:d8:58:a6:29:f1:69:3b:8a:7f:44:be:7e:
b5:b1:b1:86:21:a1:6a:0c:fa:1a:48:5a:02:4d:1e:f4:52:eb:
09:92:41:2c:35:54:9c:84:c8:e4:c2:af:9f:6a:5a:38:45:bf:
17:2a:fb:a9:5c:e4:ee:ea:65:90:1b:45:99:1a:a2:65:49:86:
a7:cf:4b:81:ea:e0:6f:f0:c4:84:d9:9d:95:c8:43:a8:dd:aa:
f7:29:4f:2f:fd:c3:33:82:3b:62:f8:44:5b:63:6e:54:7c:7a:
39:30:df:83:e4:68:b4:15:20:4c:a4:b4:2b:ac:47:41:d2:0c:
c3:0b:be:7f:f8:e6:03:9e:78:75:41:b4:f9:cd:76:21:66:89:
73:b4:fe:bd:64:fd:d6:30:bc:ea:d5:46:41:76:34:c8:9e:a5:
86:2b:75:fe:73:c8:e1:36:7c:7a:ef:07:ff:b9:96:9d:e3:5c:
a1:36:ea:9e:cb:95:b5:bb:67:f0:09:52:24:88:dc:99:7f:74:
2f:de:a0:1f:2a:15:6d:d9:83:b7:94:57:52:e4:cf:34:a0:a7:
e2:e0:02:25:c2:42:fa:2d:ca:57:d8:98:aa:92:4c:3d:9c:90:
80:eb:11:57:bd:ee:9a:da:3d:ee:c7:43:d3:69:2f:96:03:ca:
17:5f:15:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:17 2026 by rpki-client