Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
File: QVHWtEHT9XdiwDL4-tIXYIoi96E.mft (raw, json)
Hash identifier: od3I9Cl9m7WUMeuhzRD7cswadFuIFv92KBZ0YyMrfA0=
Subject key identifier: 77:70:20:66:BE:2E:25:D4:E5:0C:AE:A5:F1:F3:5F:52:44:F3:93:B1
Authority key identifier: 41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
Certificate issuer: /CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Certificate serial: 019D99D057AAAB597B0177FA3E3F300C286B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:01:01 +0000
Manifest this update: Fri 17 Apr 2026 05:01:01 +0000
Manifest next update: Sat 18 Apr 2026 05:01:01 +0000
Files and hashes: 1: 5ryFhi9ZcM4ZXUi-AstHZtjweAE.roa (hash: 2qM0IhOL1SBTen6Ye0bZXnOAWOFNUbuFBAheUHcm2J0=)
2: QVHWtEHT9XdiwDL4-tIXYIoi96E.crl (hash: aIgReGpH8/GGlV1nFcIjfpJC0a1+Wcqf8fkD78QV9Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:57:aa:ab:59:7b:01:77:fa:3e:3f:30:0c:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Validity
Not Before: Apr 17 05:01:01 2026 GMT
Not After : Apr 18 05:01:01 2026 GMT
Subject: CN=77702066be2e25d4e50caea5f1f35f5244f393b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:79:23:41:d4:75:3b:45:c0:12:02:b6:55:
24:7f:b8:39:4c:27:71:15:cd:92:06:6f:6e:09:3e:
a7:b0:5a:72:46:df:31:f8:05:cc:8c:fa:5f:4d:f9:
ee:e7:77:4f:91:e8:7b:f6:95:34:1f:8f:85:e8:b9:
18:92:3b:9d:79:38:08:58:a5:b2:4f:66:d2:04:bd:
66:bd:16:bb:dd:b7:e6:f9:fd:37:13:e2:d9:0d:e3:
3b:86:68:35:81:5d:e4:c7:8d:44:44:42:73:08:dc:
fd:32:a7:62:3d:ad:63:bc:9a:f7:26:92:52:4c:28:
99:b4:f4:30:79:7a:80:9a:89:f4:f7:3a:8b:48:78:
b4:a7:1b:3c:27:43:bc:4c:a7:a8:68:65:de:38:ea:
f2:52:9c:8d:4b:46:70:a5:d9:56:57:74:43:01:9b:
ab:6d:6f:63:bd:25:ac:a2:f5:b4:9c:5c:ab:41:31:
a1:a2:35:92:b3:50:b0:80:7b:09:1e:68:61:39:a6:
e0:0e:9a:3c:6f:51:eb:f5:d4:13:f6:1b:64:19:63:
b4:be:4b:f1:9b:b2:27:9e:67:28:e5:a0:e4:a9:b9:
07:5b:6c:12:96:0a:3c:80:2e:7d:24:da:25:02:d0:
c5:eb:d7:28:cd:11:5c:1f:f8:32:05:75:35:db:e5:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:20:66:BE:2E:25:D4:E5:0C:AE:A5:F1:F3:5F:52:44:F3:93:B1
X509v3 Authority Key Identifier:
keyid:41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:81:ee:0d:c2:a0:b1:ed:5f:24:8a:5d:8b:4d:56:20:63:89:
02:11:3f:61:f5:21:23:4a:a1:ca:e8:e0:d4:da:8d:0a:04:2f:
8d:b3:e4:61:26:f6:1e:91:06:60:d1:88:93:fa:fd:f4:d8:18:
f2:27:47:b0:19:6e:cc:37:eb:d1:7c:7a:65:69:8a:37:ed:ef:
96:24:ca:23:da:f4:09:63:20:a3:63:4c:87:7f:0f:60:04:32:
19:3a:85:ad:a4:93:56:ef:d7:1e:65:f1:6d:0a:f8:e2:77:63:
c9:9c:33:e6:08:49:f7:37:fb:3a:7f:ad:18:c7:bd:c3:c9:d5:
b0:bb:a8:af:bb:93:dd:98:ce:df:cf:82:58:3f:fa:56:82:02:
7d:4f:17:67:5a:9d:7a:aa:d8:02:58:0e:77:ee:7f:70:5b:4e:
54:2b:15:b1:f8:c4:43:03:00:d1:c2:76:df:bf:83:be:b5:5d:
80:31:a9:29:92:34:90:d9:a9:85:40:3b:cf:18:e9:fd:43:ce:
9d:43:bd:97:05:1d:20:99:c5:b3:1e:72:8e:5d:6f:a4:47:74:
17:c5:17:dc:b3:d0:17:e6:b1:64:b3:85:00:ba:9e:a0:f9:02:
ed:36:71:17:fc:fd:56:76:c8:76:a2:ec:27:fa:3d:3c:89:f3:
1a:c1:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:09 2026 by rpki-client