Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: Wo6Gt13y2e6BHiOIwqa4yx8VT4sWNxAQvnHkFg7M5xw=
Subject key identifier: 3F:2B:2D:71:F4:48:00:90:D2:E5:8B:7B:B7:49:44:C3:DB:AA:1D:57
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 019DA4F95A9046B9681139EF9F46460D74EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 13E3
Signing time: Sun 19 Apr 2026 09:01:38 +0000
Manifest this update: Sun 19 Apr 2026 09:01:38 +0000
Manifest next update: Mon 20 Apr 2026 09:01:38 +0000
Files and hashes: 1: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: 8chqgxPGzdYHjprspc6YxQBWqVBDA7wASKVPAd1OfIc=)
2: VcfqWg7FbQqb-Uja1uMxHMYRwIk.roa (hash: Lj+UoxvlbBzpt+4S58JMbON1coh0nlAf0RSoB4fN3M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:5a:90:46:b9:68:11:39:ef:9f:46:46:0d:74:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Apr 19 09:01:38 2026 GMT
Not After : Apr 20 09:01:38 2026 GMT
Subject: CN=3f2b2d71f4480090d2e58b7bb74944c3dbaa1d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:01:57:36:bc:a8:3d:5c:f3:3a:6d:d8:2b:ce:
27:e6:db:1e:f2:f3:b6:19:0a:43:b4:33:84:ab:77:
0a:72:c1:5d:3f:f5:c7:c3:06:e6:ff:32:85:d2:db:
de:c8:89:98:3c:02:21:68:a1:46:9e:43:2f:3d:fd:
b2:02:09:63:e3:ef:97:b5:81:1b:c3:c2:1a:33:3e:
a4:41:40:e7:18:75:c0:55:a9:8b:ff:8b:a8:71:a3:
f7:15:df:c5:71:26:fd:82:fe:41:5c:45:4d:31:66:
10:54:79:a6:98:1b:5b:8e:d9:0c:b4:01:51:5b:0f:
19:e6:4b:f5:5c:5d:90:16:8e:c1:27:e7:b9:f8:2c:
f6:d5:60:03:0c:ce:9e:c7:98:d8:49:e9:bd:3d:b8:
97:ce:e5:b9:68:7f:fb:b1:8b:a8:56:b1:73:36:50:
56:e7:52:26:96:8f:38:3a:15:42:02:15:f8:63:c8:
57:b6:44:cf:98:0c:df:e7:68:e6:fb:31:ca:4a:39:
29:6c:b5:d5:54:d7:e2:8e:26:f3:fa:f2:43:57:6c:
18:47:83:bd:15:05:28:75:21:dd:b0:4e:96:65:bd:
42:c7:78:b3:bf:c8:14:46:8c:dd:59:f6:b3:8c:22:
55:5a:8d:7b:6c:ec:f5:8c:78:bb:5e:23:a7:25:92:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:2D:71:F4:48:00:90:D2:E5:8B:7B:B7:49:44:C3:DB:AA:1D:57
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:43:09:74:6c:21:76:34:3e:e5:27:7b:c3:f5:67:ba:5f:47:
e4:9f:c8:d0:fc:92:56:f5:3d:0b:26:54:03:db:f8:db:46:fc:
ee:e1:94:ed:0c:35:fb:3a:43:ad:61:18:c9:31:c2:1b:31:be:
49:05:00:19:2c:a0:fb:d9:dd:cc:97:c6:fa:94:d7:d2:6a:1b:
69:31:7d:40:22:a9:8a:b6:9e:29:2c:a7:e0:33:eb:97:84:c6:
77:c0:c0:b4:7c:6c:1f:03:af:26:e9:02:22:9f:00:11:18:aa:
f0:9b:53:0d:20:10:46:83:53:ab:15:7d:bb:75:e9:fd:cb:ba:
c4:2e:ba:80:22:7f:4b:13:24:1f:f7:2a:db:c6:b7:e8:e4:b3:
12:b9:be:78:61:3c:1d:72:26:11:ae:af:a2:be:19:9b:b2:94:
da:68:ce:9c:de:ea:0d:b3:8e:27:7a:38:2c:99:a7:3d:65:a7:
28:dc:3d:7e:bb:f0:50:c7:43:f5:99:ad:00:e2:31:3c:8b:b5:
87:12:32:09:80:01:f4:d1:ec:a8:c2:a7:09:31:9e:ee:cb:27:
ac:81:a1:98:30:75:d3:1f:01:1f:82:e8:5c:ad:3d:e3:48:24:
44:8d:d6:af:75:c9:fd:57:9d:40:2e:e5:c4:73:cd:34:63:38:
51:04:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:48 2026 by rpki-client