Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: SsQtN8s3TRWG6COwyzUzD/0AGQVX0Z1okl6Jvjqzicg=
Subject key identifier: 9C:2E:E3:E8:36:AD:F7:CF:CE:22:CE:AC:E5:82:65:47:F4:B7:20:B6
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 019D99D0A44303100A870CDB59050C3061DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: La2WPm3LYF79MEJ5dmUf5iwdqMk.roa (hash: RkxUiCmpQV7nr6FWYwJ2GApRVYq0umpCRpKV/azNpzM=)
2: acmzZO4WdYbcbfIVT_LX9qTPV78.roa (hash: pEP2EoeuhTQlSixvaPnjA7Q75y0GUPve3N+3u4ET3rs=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: b1LKZlGO8nSF4a/+58TEuHHcNL+Xe0NmYUMWGkI9698=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a4:43:03:10:0a:87:0c:db:59:05:0c:30:61:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=9c2ee3e836adf7cfce22ceace5826547f4b720b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:40:e0:42:8f:ba:7f:2d:c5:f3:14:e7:2c:
1f:37:9b:a5:03:b7:7c:bc:7b:5c:a3:62:e4:da:02:
17:57:09:eb:a2:f7:4e:0f:be:dc:11:08:54:24:6e:
12:ed:ac:52:42:05:4c:1e:ac:fa:2a:dd:86:36:2f:
3f:c5:c3:62:27:92:d8:a6:e8:58:11:4f:05:57:a6:
f4:a3:29:97:0d:85:5e:22:91:0e:d3:67:4f:e6:8f:
09:8a:9c:9f:78:ee:55:3e:41:69:eb:a6:a1:c9:b6:
16:61:4f:46:39:e5:0d:12:77:bb:63:bd:c0:c7:37:
b7:ba:2d:fc:2a:b6:e8:ba:06:32:95:8d:4b:b8:8d:
30:9d:7e:97:b6:8d:74:4c:a4:f8:83:84:df:cd:f9:
8b:2d:99:96:aa:02:59:2e:cd:c5:ba:7b:f7:f0:64:
e3:23:26:a9:d9:a0:5f:02:70:5d:a5:2e:e6:42:ba:
b0:f3:55:ba:2e:cd:96:bc:15:62:0e:75:0d:e9:21:
3a:10:f0:5d:3e:74:72:53:9c:d1:6e:a4:21:19:b4:
1b:08:17:36:07:89:ac:4e:ad:f3:72:b7:53:53:f8:
9d:59:d0:47:47:9a:2c:11:dc:86:e5:e4:24:a5:79:
31:c6:f8:36:b6:ed:c6:7d:08:d3:3a:39:84:66:98:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2E:E3:E8:36:AD:F7:CF:CE:22:CE:AC:E5:82:65:47:F4:B7:20:B6
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d2:8b:0a:30:d1:c7:f7:ca:72:45:3d:18:c5:07:0d:fb:1f:
c8:9a:fd:d6:09:c2:5c:67:71:84:78:ab:97:fd:38:3d:04:ee:
f7:80:7f:da:e8:e5:25:ef:b7:ef:c6:e8:5f:37:64:66:68:49:
25:b4:82:91:fc:7d:b6:ac:54:c5:81:f1:d5:9c:f8:92:18:e3:
e4:36:7e:5a:2c:91:6b:f9:71:64:47:50:72:8f:3c:0b:4b:cc:
86:2c:df:1c:c1:7c:f8:60:9c:b8:87:f1:fa:37:f0:d9:0b:89:
2b:17:7f:52:6f:5c:b4:99:82:e5:dd:6c:b6:88:9d:73:45:09:
d8:8b:28:0d:cb:d7:6f:69:f0:fb:40:4d:6b:f7:64:cf:93:75:
31:05:87:b6:33:d8:85:0e:80:70:1c:8d:fd:25:6b:56:ed:9b:
a8:18:e0:5e:34:3d:f9:cd:48:a0:21:3f:d4:11:c9:88:89:58:
56:b4:48:26:40:87:ad:16:cf:4d:a7:89:22:ce:18:f4:25:69:
13:c0:26:eb:cd:90:e6:d6:c0:bb:fb:3c:23:9c:90:4f:40:5f:
22:fb:ec:6a:b2:15:7a:5f:01:76:25:60:7a:a8:e3:aa:16:e0:
22:fa:b6:ed:f8:91:8d:b9:07:a3:62:09:a1:42:2d:e3:75:4b:
0b:f4:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:47 2026 by rpki-client