Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: yCHdDAzPIRtoS2S8eBaUP3jpwR/yLeFoLAt/i8m0004=
Subject key identifier: 9B:C4:90:BE:0B:89:C3:7E:C4:BF:82:5C:E8:B2:EE:99:8F:5D:1D:D9
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019D9998DC7012074F340AFA2DC895421C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0A58
Signing time: Fri 17 Apr 2026 04:00:24 +0000
Manifest this update: Fri 17 Apr 2026 04:00:24 +0000
Manifest next update: Sat 18 Apr 2026 04:00:24 +0000
Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: UffGTm1QfQz18/BjbspqWyZ53Fjer7mtwJHg628il+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:dc:70:12:07:4f:34:0a:fa:2d:c8:95:42:1c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Apr 17 04:00:24 2026 GMT
Not After : Apr 18 04:00:24 2026 GMT
Subject: CN=9bc490be0b89c37ec4bf825ce8b2ee998f5d1dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:50:9d:ce:e7:57:e0:b2:fd:f0:1d:9c:91:
72:9d:35:1b:8a:b5:7f:52:84:44:23:da:d8:c5:72:
20:5b:e4:1d:52:82:e7:1f:56:46:13:48:20:d3:ea:
2b:3b:28:66:97:08:03:89:8f:cc:39:9e:08:cf:f8:
b4:73:ef:dd:fd:33:12:52:e3:d5:91:07:04:50:b2:
cd:f5:b3:be:87:0c:5a:58:8a:09:8e:5b:b2:8d:fc:
f7:2f:92:dd:55:93:8a:da:46:65:dc:13:e7:00:bd:
9a:d7:58:d2:12:fc:b7:ec:4d:44:db:b9:f5:7d:97:
25:f5:0e:c2:52:81:8e:87:0d:b4:71:67:02:88:08:
a5:b1:80:95:83:a6:f1:62:0f:e6:65:6f:5b:ac:69:
a9:53:63:9a:50:e6:82:8a:80:57:7b:53:31:86:c3:
04:56:da:51:21:18:ca:37:ad:80:e5:28:35:a5:c3:
1b:8c:42:c9:6d:51:cd:87:85:55:0e:b0:25:02:25:
83:7d:a2:b5:ec:cb:08:2f:87:e5:8a:37:07:06:74:
78:9f:a2:70:19:2e:37:95:64:34:d2:03:db:72:24:
c6:c3:f7:51:30:64:a2:a8:0e:08:d1:52:32:22:b4:
8b:d0:fc:40:d2:93:d4:a6:55:47:b3:c4:bb:fc:77:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C4:90:BE:0B:89:C3:7E:C4:BF:82:5C:E8:B2:EE:99:8F:5D:1D:D9
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:70:19:c5:2e:44:13:b1:cb:44:ec:4c:1d:22:29:29:41:12:
e7:d8:97:1d:a2:6d:b0:6c:8f:21:88:d1:1c:4e:c1:9c:e4:2a:
e7:59:91:e7:02:b6:5e:f4:6e:dd:e2:cc:33:8f:b9:f7:b8:4a:
e7:78:da:04:c2:d6:03:bf:2b:a3:99:93:3f:4f:25:45:e8:df:
6a:1e:c3:23:ae:33:84:eb:93:db:e7:ee:e3:d8:2b:38:e2:ca:
33:47:57:9b:5e:7a:b9:27:f9:44:47:ec:15:34:d5:e1:60:05:
12:c0:81:7f:fa:95:a7:36:5e:71:b6:25:8e:5f:7d:bc:ff:65:
44:72:91:e4:ad:7d:7c:2a:5b:d9:e5:e9:90:e7:05:61:2e:29:
d8:0c:79:26:89:fc:a0:74:65:c2:74:e9:4b:05:e0:d0:ec:26:
8c:b4:c3:29:8e:5c:75:5e:60:11:84:9c:3e:ae:ed:f5:ee:91:
78:ab:12:8d:48:07:ce:47:6c:91:8f:fc:8a:a1:e5:d4:bd:31:
5b:9a:cd:15:b5:d3:23:94:ac:af:7e:ed:75:cf:02:e4:bb:99:
37:ee:66:3e:e5:5d:f5:34:6c:27:9e:5e:0d:dc:37:2a:ca:91:
39:c2:06:22:9f:19:4d:96:66:90:42:ff:08:88:68:73:b5:a1:
90:31:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:22 2026 by rpki-client