Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier: Flw9Py277G9GzWEElYdx4blEQpzHEI7gADwpmkVjLRY=
Subject key identifier: DD:37:41:0B:63:ED:38:4A:9C:E3:EC:6A:F3:62:50:5D:4D:F5:0F:4B
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 019D98502E71214600A6DB00716692687A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number: 1037
Signing time: Thu 16 Apr 2026 22:01:24 +0000
Manifest this update: Thu 16 Apr 2026 22:01:24 +0000
Manifest next update: Fri 17 Apr 2026 22:01:24 +0000
Files and hashes: 1: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: 683XUGXXJwet1PmIVIZ7BEpYiuPuBhtYG9/UsNugaEI=)
2: xbvEJZeUt0xfTCQkzUMYNid2WuU.roa (hash: N+c9uTWESBLyJAw1GRbCX5BbluIVDmwBAavnIr/6+Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:2e:71:21:46:00:a6:db:00:71:66:92:68:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Apr 16 22:01:24 2026 GMT
Not After : Apr 17 22:01:24 2026 GMT
Subject: CN=dd37410b63ed384a9ce3ec6af362505d4df50f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:ea:98:df:88:f3:5c:62:d7:4d:13:55:57:
72:93:f3:e1:d6:fb:ca:04:70:ac:ab:19:fd:7c:e9:
be:62:e1:76:a8:20:98:e8:77:67:c2:e1:6a:58:29:
01:8e:f4:e0:04:44:f1:d6:f7:fc:28:10:81:37:1d:
0b:f7:ff:ef:4b:e2:c4:6a:dc:bf:a3:c8:62:31:10:
b5:b5:c2:82:b5:62:77:6b:80:2b:65:ae:e0:32:9a:
30:52:eb:82:10:7d:bd:db:30:7e:71:5e:57:a2:a5:
76:36:4f:f3:46:bc:c5:41:ba:ab:7b:83:fe:bf:50:
af:bc:36:e0:35:e5:ff:a5:aa:80:ce:81:a7:21:8c:
dd:0e:2d:08:4b:9b:da:5b:e9:e9:2d:f9:a0:f4:64:
3c:91:1c:ad:1b:f9:30:8e:07:ef:50:2a:db:5c:42:
43:35:55:dd:1b:3c:fe:83:ea:00:2b:cc:ea:f0:0b:
eb:a1:9e:52:32:66:ce:4a:14:ad:e8:b7:25:9c:ed:
4c:79:2c:75:df:92:2e:72:b2:ba:2d:f9:69:7a:39:
44:3f:e6:d9:5c:5d:a7:5d:f0:f2:08:e5:8f:4c:a1:
a2:9c:6a:dc:c3:f3:be:69:13:46:76:db:4b:f8:31:
5f:3a:cc:3a:7f:f2:0b:b5:6e:91:30:c0:34:be:4b:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:41:0B:63:ED:38:4A:9C:E3:EC:6A:F3:62:50:5D:4D:F5:0F:4B
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2b:0e:e6:c0:ce:0a:f4:b2:f0:4f:df:1b:f3:e4:b9:d4:24:
c4:c0:1c:0f:d4:47:16:0c:0b:bb:3e:e9:ef:a0:70:21:25:fe:
14:fd:38:0c:de:7b:c7:f2:6e:57:76:48:ee:05:ad:60:24:43:
f4:58:78:f0:6f:13:da:9d:4e:6d:29:81:8c:34:26:41:7b:22:
26:7a:9e:2a:4e:2c:bf:5e:ff:c2:05:e8:2e:1c:cd:90:f1:1f:
3d:96:27:be:fd:30:cd:0c:02:a2:5c:b9:cd:ac:8b:ec:bf:10:
3c:cd:5c:57:4d:7e:34:e2:66:5f:b9:fc:8c:cf:c2:06:7d:30:
df:f7:80:f5:ca:95:80:e7:a7:0c:d8:7b:63:ff:40:d9:1e:a3:
54:e9:1a:6a:f5:93:67:d1:2a:1f:74:59:8b:f0:ef:5d:07:40:
aa:be:80:c0:c5:ae:28:6a:58:fc:db:ef:69:b8:aa:a5:22:d2:
9a:3f:eb:28:e1:89:9d:18:97:d1:e0:c6:d3:6a:b8:05:2f:0b:
0e:3d:0a:bf:df:f2:d1:4e:81:7e:f5:ed:56:9b:bb:af:97:8c:
a4:ea:88:f7:d6:91:45:30:28:5b:df:e0:e1:e5:aa:e7:bd:ee:
44:1e:6b:c0:f4:b5:47:78:4f:9e:1b:22:0d:ec:91:29:30:ae:
10:8d:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:28 2026 by rpki-client