Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier: SIRmcQ8YlZ802senHdY9/W+amiOxHJUSDdLRytzcias=
Subject key identifier: 9F:53:76:0B:65:1A:E3:2A:DD:AD:69:5A:F3:1B:85:EB:A4:46:62:3B
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 019D98F4AAF13BF4775393B6AAE054748781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:01:04 +0000
Manifest this update: Fri 17 Apr 2026 01:01:04 +0000
Manifest next update: Sat 18 Apr 2026 01:01:04 +0000
Files and hashes: 1: 9_KMCCpdv__dNX3XCcGQGoY_t7E.roa (hash: 4J310WOIoaFhdk7Rws5ylL5JHddp0w2bpHJlXbfEDWM=)
2: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: W+svAxA0NtCAOs9Hsu0LJE5zB+nfCzQBdBdnq3RUdws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:aa:f1:3b:f4:77:53:93:b6:aa:e0:54:74:87:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: Apr 17 01:01:04 2026 GMT
Not After : Apr 18 01:01:04 2026 GMT
Subject: CN=9f53760b651ae32addad695af31b85eba446623b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:65:b9:31:4b:b5:55:70:c1:1e:f2:ff:ed:
e5:2c:0c:47:7d:52:9a:20:5b:9c:5a:29:40:91:ee:
94:b0:1f:6d:5f:f8:eb:e8:35:62:f7:eb:56:d5:92:
cf:3c:77:58:1c:c1:f3:2e:6e:db:4e:9a:05:0a:0f:
00:a6:1f:8d:3c:98:38:7a:85:ff:e2:8a:43:d3:90:
fd:3f:c4:7e:4f:2a:1f:8b:53:53:ca:89:7e:6f:2f:
70:07:8c:95:58:ba:ce:db:fa:9a:e0:c8:b0:42:6b:
47:2c:45:18:6a:ca:f3:8a:73:52:e2:fb:f3:5c:75:
20:52:89:f3:33:e4:fd:5e:2e:ce:3e:44:4e:72:a6:
a6:49:db:06:3e:41:af:4c:51:35:51:37:52:81:ab:
37:72:bc:07:60:90:85:a8:4a:5c:b3:4a:f0:b3:70:
a4:50:79:86:61:a2:8b:47:90:79:76:79:42:ce:81:
69:cd:02:40:b6:3e:3e:05:f2:a9:d1:f1:50:db:0f:
5e:ca:d8:5a:73:c5:85:57:be:f8:c6:59:4b:73:4e:
54:85:43:33:74:c7:54:05:0b:57:bb:7a:00:90:d0:
0d:22:4b:54:4d:94:38:8c:d4:0c:2b:c5:1e:dc:c0:
5d:ac:25:19:ae:6f:af:8f:be:bb:fe:21:f7:a0:15:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:53:76:0B:65:1A:E3:2A:DD:AD:69:5A:F3:1B:85:EB:A4:46:62:3B
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ab:41:3c:a0:e4:9c:26:9e:67:e3:72:67:41:0b:0b:74:bc:
ad:eb:72:73:34:e0:ed:7f:8a:fd:92:fb:ab:b4:ac:3d:64:75:
d5:23:31:10:c5:d5:a4:4e:ac:ff:69:45:c2:5c:90:a6:65:58:
53:d5:35:7d:c8:b5:36:65:24:45:2b:bd:b2:5a:90:ba:ae:40:
01:91:34:0e:d9:86:bc:89:46:dd:02:77:89:7e:c9:45:3f:ee:
51:38:e3:6c:58:d5:f7:ca:fe:31:38:c0:d1:55:a3:58:bf:6d:
31:64:2e:62:4b:12:1e:b0:68:0d:a3:ca:1c:ec:5c:4e:ff:6c:
36:88:3d:26:10:66:f0:e5:9e:bf:5a:8a:fe:be:36:48:cc:38:
5b:43:41:fe:98:3a:c6:9b:6c:75:94:55:b4:dc:01:53:45:48:
c5:c3:8d:4e:27:8e:9e:6a:32:c3:9d:45:09:d5:09:ac:da:ed:
ab:15:7b:fa:bd:66:6e:5d:31:19:3c:75:b1:f3:c8:a8:2e:0b:
6e:63:28:80:6d:e6:95:27:09:40:0a:77:65:30:a2:e6:7f:09:
64:cf:e5:cf:31:2a:29:7e:08:b3:8f:fa:71:d4:71:1e:0c:61:
0b:98:b3:af:ee:7c:8c:e6:cb:79:d3:7f:6a:74:c1:d6:58:8a:
0e:d5:9c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9KrxO/R3U5O2quBUdIeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMGVmNDM1OGFkYjA0MGYzMzNkOTM2MWE0MjYxZWEwZTUw
ZDM4YWIwHhcNMjYwNDE3MDEwMTA0WhcNMjYwNDE4MDEwMTA0WjAzMTEwLwYDVQQD
Eyg5ZjUzNzYwYjY1MWFlMzJhZGRhZDY5NWFmMzFiODVlYmE0NDY2MjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb1luTFLtVVwwR7y/+3lLAxHfVKa
IFucWilAke6UsB9tX/jr6DVi9+tW1ZLPPHdYHMHzLm7bTpoFCg8Aph+NPJg4eoX/
4opD05D9P8R+Tyofi1NTyol+by9wB4yVWLrO2/qa4MiwQmtHLEUYasrzinNS4vvz
XHUgUonzM+T9Xi7OPkROcqamSdsGPkGvTFE1UTdSgas3crwHYJCFqEpcs0rws3Ck
UHmGYaKLR5B5dnlCzoFpzQJAtj4+BfKp0fFQ2w9eythac8WFV774xllLc05UhUMz
dMdUBQtXu3oAkNANIktUTZQ4jNQMK8Ue3MBdrCUZrm+vj767/iH3oBU0eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9TdgtlGuMq3a1pWvMbheukRmI7MB8GA1UdIwQY
MBaAFD0O9DWK2wQPMz2TYaQmHqDlDTirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFE3ME5ZcmJCQTh6UFpOaHBDWWVvT1VOT0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mOTQ2ZWYtOTYxOS00YmRkLTlmNDct
ZDJiYzk2YTk4YTE4LzEvUFE3ME5ZcmJCQTh6UFpOaHBDWWVvT1VOT0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mOTQ2ZWYtOTYxOS00YmRkLTlmNDctZDJiYzk2YTk4YTE4
LzEvUFE3ME5ZcmJCQTh6UFpOaHBDWWVvT1VOT0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqtBPKDk
nCaeZ+NyZ0ELC3S8retyczTg7X+K/ZL7q7SsPWR11SMxEMXVpE6s/2lFwlyQpmVY
U9U1fci1NmUkRSu9slqQuq5AAZE0DtmGvIlG3QJ3iX7JRT/uUTjjbFjV98r+MTjA
0VWjWL9tMWQuYksSHrBoDaPKHOxcTv9sNog9JhBm8OWev1qK/r42SMw4W0NB/pg6
xptsdZRVtNwBU0VIxcONTieOnmoyw51FCdUJrNrtqxV7+r1mbl0xGTx1sfPIqC4L
bmMogG3mlScJQAp3ZTCi5n8JZM/lzzEqKX4Is4/6cdRxHgxhC5izr+58jObLedN/
anTB1liKDtWcVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:41 2026 by rpki-client