Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier: dcSkxmiiu/+DmblFwybOn924wA9X2qsr+eItYaCzfrM=
Subject key identifier: A4:33:6F:8C:59:19:54:40:98:C7:F3:A8:27:D4:61:9E:F0:A8:B4:B1
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial: 019D98BD411FD20E93F95D5E5218416D9FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number: 06EF
Signing time: Fri 17 Apr 2026 00:00:32 +0000
Manifest this update: Fri 17 Apr 2026 00:00:32 +0000
Manifest next update: Sat 18 Apr 2026 00:00:32 +0000
Files and hashes: 1: bLk88x2HL-2GICyBNcP5Qc7qD64.roa (hash: 4cgQdkwpHUEmwJaaIvwsSgvpblfNuKKSJZKxTdOD8Wk=)
2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: +5u+RMyJBBfZHoTuMQ3QqJsQLzxkBsQzuiJ8uVFjFY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:41:1f:d2:0e:93:f9:5d:5e:52:18:41:6d:9f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
Validity
Not Before: Apr 17 00:00:32 2026 GMT
Not After : Apr 18 00:00:32 2026 GMT
Subject: CN=a4336f8c5919544098c7f3a827d4619ef0a8b4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:9f:51:e0:3e:35:a3:43:ff:71:18:a9:ba:
e3:b4:d8:8b:16:50:38:b4:36:bd:b6:86:7b:72:af:
d3:82:45:20:3c:86:d4:1f:b5:c6:a1:4b:ac:f9:92:
e5:2f:b1:9a:74:dc:62:e8:dd:58:35:b5:82:ef:e8:
55:04:99:21:99:9a:a0:21:6e:6d:a8:95:5d:9a:0a:
09:0c:ef:1a:4d:84:4c:08:e2:67:de:3a:a3:c2:bf:
31:a4:63:1e:12:f1:a9:35:82:52:7c:85:f5:34:4d:
6a:45:82:06:96:3c:1d:97:66:97:46:da:90:a1:fd:
f3:f4:34:97:f7:4b:d8:2c:01:39:0a:7c:bf:4a:78:
aa:79:b4:76:6b:61:45:96:0c:94:b1:4f:0b:95:11:
d1:25:32:c3:5c:a9:11:ef:d5:01:9b:d8:cb:7e:c8:
f7:5c:44:13:75:78:8b:ed:3b:41:00:1e:8c:5b:ea:
af:10:29:8f:20:63:64:d8:0c:59:12:3c:14:41:a1:
f6:71:1c:5a:21:71:a8:9c:11:f6:bd:de:c9:f1:b6:
46:b9:f9:13:11:29:3d:58:2e:02:7f:5a:11:0b:23:
fc:af:34:0c:34:e5:a1:90:5f:db:bb:90:e8:27:81:
1e:5d:f2:c7:cd:f4:33:0f:4b:98:22:00:d1:d3:d8:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:33:6F:8C:59:19:54:40:98:C7:F3:A8:27:D4:61:9E:F0:A8:B4:B1
X509v3 Authority Key Identifier:
keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6e:e9:60:61:73:dd:9d:02:b5:e0:48:37:9d:3d:08:d0:53:
0c:57:a4:23:82:21:01:e5:08:70:d2:7c:27:47:2a:e0:96:0b:
ea:d1:0c:e1:29:0e:58:07:26:75:fa:28:99:e3:b8:5a:43:c9:
69:1e:c3:a8:c4:ee:b7:77:9a:58:7b:c5:96:c1:b5:36:da:4a:
a3:bf:07:89:67:43:73:12:57:a5:3e:aa:61:d4:87:14:96:78:
d6:e8:18:f9:25:db:3b:e4:63:b0:53:77:95:e0:c3:f0:3b:36:
5e:07:b1:c8:50:10:ee:84:7e:b0:95:d2:d1:53:63:18:50:56:
62:52:81:69:3b:e8:44:54:6c:8b:ac:c6:89:3c:b8:ac:71:db:
ce:c2:0c:40:62:12:9d:14:eb:ae:93:d9:90:d8:30:62:d4:91:
ad:2f:51:75:5f:d2:29:12:1c:0f:33:58:d0:27:b1:2c:18:c9:
4c:10:90:96:0e:e5:ed:7f:e6:98:55:e2:09:ca:0e:e1:ea:e1:
35:4e:aa:ee:88:e8:d0:f2:ce:91:21:b4:40:1f:41:89:22:db:
33:73:48:bf:5b:09:8d:05:79:0d:30:03:0a:73:c7:e6:ff:b0:
9d:83:4a:96:79:59:02:64:cc:22:36:f9:0a:25:4a:cb:42:d1:
18:84:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:21 2026 by rpki-client