Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: H9pCa7FcC/ttKw//4EN3ohoPsO7TtfWMMqBAaRQWKEQ=
Subject key identifier: 4D:D4:AC:5B:FA:F0:75:E5:1E:58:96:B9:CA:A4:54:AD:87:4E:B9:38
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 019D9A74D934C9490491E3F48E8DB0073F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 148B
Signing time: Fri 17 Apr 2026 08:00:41 +0000
Manifest this update: Fri 17 Apr 2026 08:00:41 +0000
Manifest next update: Sat 18 Apr 2026 08:00:41 +0000
Files and hashes: 1: 73UCxpDNZULQFzYAsKDQ1A7nLKI.roa (hash: Puc2EYq06Fc5Snei+nqiCectlFMfZtUPb3hps442dL8=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: pBp7XmKKwAJ/Ohzg2aNO5B00m0uKRwM9rVV8R55BDPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d9:34:c9:49:04:91:e3:f4:8e:8d:b0:07:3f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Apr 17 08:00:41 2026 GMT
Not After : Apr 18 08:00:41 2026 GMT
Subject: CN=4dd4ac5bfaf075e51e5896b9caa454ad874eb938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:39:d3:4a:1a:16:9b:35:2b:dc:ae:38:a8:17:
03:8b:c4:85:12:10:90:9c:6a:f2:c1:11:e9:c5:a0:
01:28:b7:73:07:dc:19:15:ba:57:22:82:0e:1f:15:
9f:05:2d:85:a7:0c:67:ae:c4:a7:a6:48:d0:2d:cd:
b0:f1:f5:f8:1e:bf:f6:b6:75:21:d8:a9:8e:04:00:
54:ad:21:58:2c:80:2e:48:90:fe:bf:0a:74:97:26:
25:e7:d4:f5:36:51:ab:30:f1:76:a4:96:83:30:3e:
a3:a8:ea:64:73:bf:7b:c1:83:10:d7:1a:fe:82:73:
d5:ce:0a:3e:5f:46:91:a3:79:b7:ba:2b:86:94:dc:
a9:b6:d7:3a:30:f3:4c:6a:b6:1c:25:fc:a6:e7:65:
2f:f8:0b:34:06:89:b2:48:a2:9c:2d:60:25:68:cc:
6f:88:86:e2:98:15:2a:93:f5:9a:34:e8:28:d6:93:
d2:cd:6b:8c:19:ea:b9:9d:44:60:97:ac:f9:14:cd:
21:b5:f5:d0:11:28:dd:8d:d5:ce:39:3e:d4:32:53:
77:45:60:c0:3b:d0:07:7e:52:de:44:22:2d:ad:47:
4a:c9:5a:4d:a6:56:c4:a5:1f:8e:c9:78:01:28:10:
15:12:6f:ea:e2:be:f3:01:6b:59:90:b0:ff:01:94:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D4:AC:5B:FA:F0:75:E5:1E:58:96:B9:CA:A4:54:AD:87:4E:B9:38
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:56:fc:fc:b4:9a:37:58:5b:03:95:45:de:40:f4:4d:a9:15:
9f:6a:ad:b9:16:e1:3a:97:48:d3:71:92:6d:ca:83:65:38:35:
10:f7:a2:f1:e5:5d:ec:3b:d1:4a:f5:5e:70:20:23:42:98:b8:
27:1b:87:fe:3b:15:53:a2:27:4b:91:96:8d:3c:9c:cf:91:7c:
68:8e:d2:b1:f0:71:94:92:e6:f1:3f:4f:0f:b9:ca:5d:54:65:
24:6b:a1:d6:8c:23:0a:6a:5c:95:3a:0d:a0:f7:ef:c4:2e:16:
79:eb:e1:54:85:bb:68:82:9e:0b:15:48:1c:dc:e1:65:2d:f8:
4b:93:ed:70:41:69:02:a7:0a:67:83:84:45:8d:d8:ff:46:97:
48:a3:bc:25:dd:91:01:5e:33:cd:29:87:6b:74:2f:71:88:77:
be:e8:9d:b7:41:96:f1:20:81:29:49:8b:25:f1:8a:0a:94:dd:
ae:a9:39:0f:35:c0:48:d8:ac:8a:0d:73:17:43:f6:19:16:38:
49:5d:3c:0f:ef:95:30:a1:09:c2:7a:28:96:53:5e:71:cc:d7:
bf:df:a8:1e:b4:ab:64:45:84:db:af:cb:a4:5f:da:37:54:cb:
5d:4f:e1:e6:b9:37:1d:74:51:a6:56:92:f7:89:bd:44:14:8a:
bf:03:1e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:28 2026 by rpki-client