Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: +zFW4DDkM946P4Elvxi/LH3HpQ050NZFFL+hGVG0TD0=
Subject key identifier: 23:17:E1:1D:02:13:9D:E2:ED:38:67:F4:C8:EF:67:C7:01:B9:D8:6C
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 019D9961FBC40C5AE8CA6548809A57CFD8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:28 +0000
Manifest this update: Fri 17 Apr 2026 03:00:28 +0000
Manifest next update: Sat 18 Apr 2026 03:00:28 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: 5W60TXSERzVK5DWznTY77d18PKWn3gXkCp1O7RhIyP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:fb:c4:0c:5a:e8:ca:65:48:80:9a:57:cf:d8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Apr 17 03:00:28 2026 GMT
Not After : Apr 18 03:00:28 2026 GMT
Subject: CN=2317e11d02139de2ed3867f4c8ef67c701b9d86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:b1:ce:6c:94:03:c4:0f:e8:a9:db:76:9b:
97:03:e6:d7:87:ba:84:52:94:6d:f5:e6:5c:96:2f:
1f:9a:60:bc:ae:39:71:62:fb:cc:bf:78:7f:6e:79:
41:8f:d8:70:bc:2e:b0:f2:0c:ca:2f:e2:c0:38:47:
fb:a1:b6:e1:49:1f:59:9b:a8:a0:39:d8:e5:51:dd:
35:e6:be:38:1d:89:8a:b5:f0:69:1e:03:aa:f6:4e:
75:a0:ae:76:d6:11:fd:35:d0:ca:88:81:6b:9c:75:
4f:a5:da:72:f4:c8:4f:96:fe:64:ad:e5:b3:4f:25:
f1:ed:49:0e:73:c2:9f:21:34:8c:25:5b:4c:9b:72:
b4:23:34:96:3f:8f:2d:4a:4d:8a:ba:d4:ce:5f:32:
d7:e9:e7:35:74:d3:98:2e:b3:f8:fa:da:33:29:fa:
65:ef:e9:ef:9e:c1:a3:0d:0d:f6:b6:5e:72:3d:18:
f4:52:92:a6:de:cf:8f:dd:96:74:79:b7:3d:1a:95:
c4:84:eb:ce:ec:d3:45:d8:99:1d:5d:3e:15:69:c8:
0b:2c:c1:d1:f7:ee:61:3b:c3:43:30:f2:04:5c:f9:
65:e2:16:da:6e:87:40:86:d1:b0:e5:d2:2c:5c:34:
61:e2:4d:c2:73:45:8d:d0:01:f1:7d:8d:bc:b7:ca:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:E1:1D:02:13:9D:E2:ED:38:67:F4:C8:EF:67:C7:01:B9:D8:6C
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cb:87:37:ad:a2:2f:f4:a1:61:a3:05:93:b9:b8:53:b4:c6:
d2:60:a1:3a:98:68:9f:59:71:6e:f8:45:31:b3:0f:b2:19:e1:
44:46:45:27:c2:a6:01:be:01:88:89:ce:03:5f:0e:3d:25:4f:
3d:12:8e:84:ff:8b:67:ed:d4:70:d0:b4:7b:13:66:df:29:cb:
1e:10:8b:6e:aa:f9:e0:69:a7:e3:29:ba:68:4c:66:72:46:0e:
a2:42:c1:1a:e3:2e:3d:22:a0:0f:a3:81:27:d7:33:ac:b9:1e:
da:95:ef:12:1d:4b:09:b6:de:19:4e:c4:77:29:d6:a1:02:87:
28:94:87:0a:cf:85:fd:0d:40:8d:6a:b1:1d:8f:b9:df:52:ef:
cf:cc:86:88:9d:ae:d6:13:ce:80:8d:cd:c8:28:7d:48:ff:75:
d9:79:fc:ce:92:c7:5f:c1:02:ce:ca:7b:ca:9f:ed:0b:01:ac:
c3:0a:43:a8:80:78:48:52:a6:90:44:c9:dd:d2:73:8f:39:a9:
0f:62:e7:bb:2e:c1:48:f1:e0:c4:1b:4b:d6:34:d9:c5:1d:ee:
15:b6:3c:75:16:bc:af:d4:9d:b6:aa:3a:47:f9:8a:57:99:d6:
77:14:75:c4:f1:28:75:03:4f:b3:a0:88:7b:40:48:9d:68:44:
93:44:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:27 2026 by rpki-client