Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: 2AgBMUqouPBpjtznZh2w1wuL4ZX499A/I3uOaEqHUh8=
Subject key identifier: 37:CB:2E:7D:F4:F2:AB:CE:5C:78:04:A9:36:DD:BB:0D:B5:8E:E4:ED
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 019D98F50AC5FC6C29D5056FFC3B12BBC802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 01:01:29 +0000
Manifest this update: Fri 17 Apr 2026 01:01:29 +0000
Manifest next update: Sat 18 Apr 2026 01:01:29 +0000
Files and hashes: 1: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: Rw5h/FL0pHxKBvWZXjfgiIJhavHOwy3Dzk3QRrwLZJc=)
2: TY-6wIosCGnW66OWe0_NroPMbeI.roa (hash: nXhbRc2aX8mNZLPnZ6EyWqXf/5jOIvwFHTTVaDOKJ7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:0a:c5:fc:6c:29:d5:05:6f:fc:3b:12:bb:c8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Apr 17 01:01:29 2026 GMT
Not After : Apr 18 01:01:29 2026 GMT
Subject: CN=37cb2e7df4f2abce5c7804a936ddbb0db58ee4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:48:62:69:af:6b:9b:1b:5f:7d:aa:54:02:
53:9d:17:37:7f:fd:a0:87:5e:d9:5a:1d:34:37:97:
66:58:77:40:54:8f:7f:49:df:db:a6:7e:58:d2:b6:
dd:d0:46:9e:b1:c0:ba:aa:43:31:9b:7f:d6:dc:6a:
ba:a2:04:ab:97:6a:15:16:b1:e7:eb:ab:ec:dd:07:
c8:88:66:89:80:85:8d:81:67:37:60:0e:fa:1b:fb:
ce:5f:86:49:71:54:42:d7:6c:cf:f2:d8:ef:1a:2e:
bb:a2:77:a9:02:86:fd:8a:92:2c:6a:59:31:c4:95:
de:1e:a5:05:60:01:f9:f2:0d:93:e7:b2:56:14:60:
75:62:bf:96:49:35:c4:87:b4:a5:9e:78:55:df:49:
eb:29:3f:7e:52:2a:38:7f:23:5a:5e:9c:40:ae:84:
f5:22:d2:a6:2e:dd:df:03:64:d9:24:86:66:66:8e:
df:90:55:a6:f9:23:39:6e:34:19:72:85:cf:7e:c5:
2e:c6:4c:32:da:20:b3:54:55:e6:78:10:7d:17:d1:
60:6f:d7:f2:0b:2d:7b:c3:69:28:79:72:8c:94:96:
9e:fb:bc:a5:ac:ab:1f:d2:42:61:5c:9e:ca:cc:0b:
16:e9:8a:fb:0f:99:2d:bf:93:b3:f7:29:a0:79:3b:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CB:2E:7D:F4:F2:AB:CE:5C:78:04:A9:36:DD:BB:0D:B5:8E:E4:ED
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1c:81:24:26:af:e3:31:47:5b:9a:e6:c3:0a:5c:6a:41:b6:
86:b2:f1:b0:c1:19:47:f5:f4:f8:23:2b:0e:e3:ad:32:0b:87:
df:d8:d0:4b:70:e5:7e:2e:85:54:18:18:7e:cf:61:09:3a:22:
22:f9:11:92:af:83:8b:2e:4b:09:bc:8c:85:8f:b4:f5:04:ef:
99:f6:0a:ff:5f:66:95:76:dc:69:cd:f0:3a:d7:74:e8:13:85:
6d:65:47:7f:5e:a2:c2:bb:26:8e:81:91:01:7a:50:46:03:29:
03:08:4b:43:c5:e1:87:7e:97:cb:cd:47:56:ee:0e:8d:73:7a:
46:3d:f3:86:97:2f:06:20:54:1c:5c:5c:91:1a:b6:42:67:0a:
90:d8:d8:24:ba:fb:8c:d5:18:ba:6a:54:15:18:09:b4:57:f3:
cf:8d:bb:73:56:3d:5c:cc:71:bc:d7:fb:bc:7f:9b:ee:c9:04:
59:60:ae:11:ec:43:6b:5a:bd:67:97:4f:e3:80:1f:66:1b:2d:
f7:4e:ad:69:6a:a8:20:31:bf:93:df:35:d5:b9:b2:72:43:6b:
2f:f8:97:ec:35:b0:aa:eb:1f:31:69:4d:4e:bf:57:fb:c6:ed:
22:b0:98:45:40:32:83:a9:d6:17:de:40:0e:cc:65:31:10:b7:
ff:60:54:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:18 2026 by rpki-client