Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier: LfBH+p2JNrg2+ZAk3nZx4HbsqT8Lp5jrLZSs9HSUjqI=
Subject key identifier: CB:8A:F8:58:27:A9:C8:76:BA:78:CF:B9:70:49:F4:40:1D:59:CC:E0
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 019D992B7AF0FA12D1E0FAC9B450CB4F16F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number: 0F6B
Signing time: Fri 17 Apr 2026 02:00:56 +0000
Manifest this update: Fri 17 Apr 2026 02:00:56 +0000
Manifest next update: Sat 18 Apr 2026 02:00:56 +0000
Files and hashes: 1: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: NPpyzkgjI8dtfmFJGwTBmjZD9xF/hIyHjVaSQUS/BmU=)
2: cXrbKTXhSK7ki4TmnfmJOJqU_kQ.roa (hash: wGt3eC7XgUqAIQ3KH0Xjs1sf60C7d5hlU+BmNSn3D5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7a:f0:fa:12:d1:e0:fa:c9:b4:50:cb:4f:16:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: Apr 17 02:00:56 2026 GMT
Not After : Apr 18 02:00:56 2026 GMT
Subject: CN=cb8af85827a9c876ba78cfb97049f4401d59cce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:5b:4b:61:1c:6b:a0:f9:c7:40:47:3d:bc:
23:62:9f:16:81:3c:dc:c1:16:08:e8:de:89:b2:40:
7d:24:b2:53:8b:4c:7b:20:d4:23:14:57:0a:83:59:
de:bb:01:fe:56:ee:1f:7f:40:d7:bc:54:d3:ec:82:
8f:aa:cc:3a:7b:09:fd:39:9a:ea:d2:3d:3b:fc:87:
ce:19:53:45:86:11:bf:81:c3:3f:5d:1f:f5:ab:91:
55:08:50:6c:fc:00:86:5a:45:51:41:bb:fe:86:f5:
87:95:76:0f:05:78:68:7c:f4:5c:2e:bf:3d:b6:ad:
81:0a:27:a0:0f:c8:d8:c9:b7:53:1c:9e:16:8c:a6:
4c:7c:24:15:25:eb:6e:bb:c4:99:ac:08:a9:93:21:
1c:65:99:ec:07:10:65:18:2d:f0:04:ec:4f:e4:8a:
6e:5b:88:6a:c1:d2:7b:49:2e:14:d2:9e:a3:74:6a:
a5:ce:41:51:ab:2b:9c:1d:37:1e:20:e1:e2:b9:78:
af:6b:39:cc:47:26:d9:de:df:a3:db:0b:3c:e7:14:
12:a3:b1:9f:eb:d5:f8:ca:15:a3:a8:15:84:06:88:
09:6f:66:20:10:a4:0a:79:a4:ae:d8:52:49:31:d0:
2b:cf:a9:d2:12:23:5f:44:9a:37:8c:c0:3b:bc:a5:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8A:F8:58:27:A9:C8:76:BA:78:CF:B9:70:49:F4:40:1D:59:CC:E0
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:08:74:76:2a:5a:43:25:1d:37:1a:99:7f:b6:24:ff:a9:6a:
09:4d:ab:a1:95:e2:55:08:63:f1:57:b3:c1:61:1b:83:67:ed:
cc:ff:a9:92:a1:32:c5:ab:f4:45:dd:52:82:3c:52:0a:16:88:
17:00:01:89:9f:ac:af:63:0e:6b:46:21:61:44:06:6c:69:e4:
45:bb:60:37:d4:3c:3b:91:c9:46:68:68:86:f5:fe:a2:d4:59:
34:61:00:b8:cd:96:1c:f5:61:68:69:12:c0:e3:42:ce:f7:7f:
8c:19:e6:fd:bc:b4:34:9e:40:4e:3f:21:91:ed:e7:4d:1c:ab:
b1:b6:b2:a7:9f:7c:7f:2d:bb:e3:ba:3b:83:7b:b7:73:4f:28:
ac:ff:02:b5:22:9a:17:2f:1f:83:8f:f0:7a:42:e4:93:b7:cf:
03:53:47:94:67:6f:ed:ed:2d:d9:db:0b:53:e6:4a:f6:b2:33:
e1:61:9c:46:9c:35:30:58:dc:1b:2c:50:0d:db:27:0c:7e:0e:
b5:7f:b9:91:0f:c5:21:2a:91:e2:5d:3e:2a:90:5f:41:d1:62:
16:b5:3e:ee:00:1f:36:c2:75:08:5b:76:2e:92:7b:20:98:fd:
62:13:91:5a:c9:52:ee:eb:f5:f9:4b:61:81:a9:b8:4b:a4:d3:
55:66:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:49 2026 by rpki-client