Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
File: Qqq-41QockWGZCkvpZLj914autQ.mft (raw, json)
Hash identifier: I+AWlIwlskHw44mfcmfiNvU3WfnzBfM5bYwikrLwj24=
Subject key identifier: 8C:36:A7:2A:DC:EC:AB:50:8F:C4:4C:49:40:9A:15:B7:63:8D:95:EE
Authority key identifier: 42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
Certificate issuer: /CN=42aabee3542872458664292fa592e3f75e1abad4
Certificate serial: 019D9A751E416E36AD394E9932F2CCD9A7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 08:00:59 +0000
Manifest this update: Fri 17 Apr 2026 08:00:59 +0000
Manifest next update: Sat 18 Apr 2026 08:00:59 +0000
Files and hashes: 1: EkG3e2CzMWqMey50Z0zLUoced24.roa (hash: zN704C7SP9ziI6h8RBTc9pIfbTJJHW3SA5CkRr77PJo=)
2: Qqq-41QockWGZCkvpZLj914autQ.crl (hash: XkOcznbmNvb9V877PO2qW3tafRiXNecHBGJMSpzfgdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1e:41:6e:36:ad:39:4e:99:32:f2:cc:d9:a7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42aabee3542872458664292fa592e3f75e1abad4
Validity
Not Before: Apr 17 08:00:59 2026 GMT
Not After : Apr 18 08:00:59 2026 GMT
Subject: CN=8c36a72adcecab508fc44c49409a15b7638d95ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:81:60:86:2a:4e:27:42:2a:53:a4:bc:0d:
33:f3:28:a1:62:97:b8:3e:db:cd:6f:10:08:19:16:
56:62:c3:b6:ba:f2:10:db:ac:4e:f7:f8:46:81:67:
49:a3:2e:7d:2c:9f:0e:1e:c7:82:7e:e8:95:48:89:
80:40:19:ad:87:d7:87:b7:fe:44:f8:02:e9:0d:5a:
32:b7:31:e5:d6:bf:5b:8d:37:df:10:2b:75:a9:20:
04:03:6b:85:56:31:d2:08:1c:40:7e:e8:8e:78:cb:
d1:6b:c7:9b:2d:c4:bd:c1:c7:fc:94:7f:3c:40:04:
49:cc:0a:22:4d:4b:7c:42:12:1d:99:0c:9d:db:0c:
2d:41:4c:c2:0c:42:d9:40:aa:49:08:ca:32:d6:51:
c3:b9:42:7a:45:29:28:08:5f:3e:37:03:e8:8f:c1:
05:b9:b0:32:77:0e:e9:b2:d6:d5:83:34:fe:ba:d6:
55:64:6c:2e:e7:62:ce:3a:7d:f1:42:59:d9:db:1b:
a3:35:8d:0e:32:9b:d5:99:c6:ed:0b:18:1b:f5:bd:
67:46:59:4c:7b:18:a1:4b:4b:b6:77:70:5f:73:82:
93:70:04:f3:e2:dd:3e:d4:c5:c3:f5:5e:2b:bc:e2:
a6:1c:98:25:bd:a6:4b:b3:bb:27:32:1e:6c:a2:7a:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:A7:2A:DC:EC:AB:50:8F:C4:4C:49:40:9A:15:B7:63:8D:95:EE
X509v3 Authority Key Identifier:
keyid:42:AA:BE:E3:54:28:72:45:86:64:29:2F:A5:92:E3:F7:5E:1A:BA:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qqq-41QockWGZCkvpZLj914autQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c989ab-840c-4023-b842-ab3bdf8e5c48/1/Qqq-41QockWGZCkvpZLj914autQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bc:6d:cf:3a:8d:83:49:ec:d6:68:0a:8f:c7:41:e8:5f:df:
cc:d6:6d:13:ff:6d:96:08:02:e3:e6:da:c8:4c:72:a0:fe:b0:
e8:94:b5:ba:26:33:a0:58:9c:40:9e:44:8c:1c:0c:a7:e8:ab:
6d:7f:23:76:a7:27:1d:ed:a8:ab:bc:19:c5:7c:c0:c3:f1:bb:
be:a3:a3:37:0b:d0:8a:3b:b0:2f:c0:41:0b:2b:d1:ad:c1:fe:
d5:25:91:2c:b4:3d:8e:cb:5c:6e:77:06:5f:d8:9d:62:04:7c:
89:ab:98:fb:e3:9a:de:c2:3c:9b:31:94:f5:08:9f:66:55:a6:
eb:79:ba:6d:72:9c:eb:b0:9b:fd:b5:42:32:4b:7b:77:fc:03:
ce:35:77:f6:37:ab:10:9d:f0:25:05:ed:9c:49:c1:9f:1a:d2:
75:bb:ff:e5:cc:aa:eb:2c:5d:9c:0d:0f:ba:9f:6c:21:8d:24:
50:f1:67:38:5d:ff:37:74:b0:a2:76:41:e7:9e:a5:af:be:d1:
7d:54:0c:17:94:98:c1:92:cb:09:30:4e:24:d9:46:3b:cd:05:
52:b8:8b:91:59:c4:94:49:c6:1e:d7:f5:66:34:12:51:8e:dc:
b3:0d:90:7d:ac:e6:33:62:86:ad:95:6d:e5:c0:74:e9:40:45:
15:dc:67:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:11 2026 by rpki-client