Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft (raw, json)
Hash identifier: UjoVAm3bLzqFPnclKLtTqmHS7dQS/Jrkibug3K7firc=
Subject key identifier: 96:C0:E0:A3:B4:D1:28:43:32:F2:38:FA:F5:9A:60:B6:62:2E:29:94
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 019DA48B425AF7CE55BA4DA48F46D4A0ED0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
Manifest number: 7D
Signing time: Sun 19 Apr 2026 07:01:23 +0000
Manifest this update: Sun 19 Apr 2026 07:01:23 +0000
Manifest next update: Mon 20 Apr 2026 07:01:23 +0000
Files and hashes: 1: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl (hash: j7b/FHWmb4dnpcgO5P2Qc04ZudrNKWHP3WjxYtGns3k=)
2: UznnCCmWb2U_DwOypllLo7Xxwe8.asa (hash: bm5GW+O8Moz8CwmexqQ5gD2dh8tQCMzUBqUj6Yad+rU=)
3: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (hash: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:42:5a:f7:ce:55:ba:4d:a4:8f:46:d4:a0:ed:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Apr 19 07:01:23 2026 GMT
Not After : Apr 20 07:01:23 2026 GMT
Subject: CN=96c0e0a3b4d1284332f238faf59a60b6622e2994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:96:22:d7:5a:ad:9b:e3:97:59:53:ab:e2:
0c:5b:2e:90:b0:43:10:77:f1:b8:61:bf:24:4c:01:
be:f3:04:bc:98:e2:02:16:09:47:f7:3a:8a:63:f5:
e9:2d:f8:c4:f8:06:dd:94:a1:42:fe:53:80:4a:5e:
a9:87:2e:d5:82:9b:c7:a9:31:26:06:7e:32:fc:a9:
b1:83:0f:b5:9e:f9:a4:33:04:ee:a2:3e:79:c3:eb:
02:41:cd:71:e9:73:37:71:c6:9c:0f:1a:31:21:20:
14:fe:6f:20:53:f7:70:a2:07:da:d4:38:dd:fa:93:
c8:37:fa:07:2e:73:b9:70:bf:68:76:e4:f9:e6:f4:
76:ca:e8:0a:c8:61:0e:71:e1:23:f1:5e:bf:87:4a:
5a:e3:29:25:9d:68:58:fe:3f:07:eb:a6:7a:ff:d4:
55:41:4d:b6:00:b9:e4:96:a0:e2:e7:dd:36:e5:59:
d8:54:0b:96:9e:4f:b4:06:34:12:dc:c9:cd:84:71:
f0:9d:76:0b:d7:dd:30:d1:38:96:01:b5:72:3a:a6:
e7:a6:03:8b:9f:de:21:4d:e6:66:88:e1:16:af:ab:
93:26:3b:d1:fc:45:05:2b:33:07:1d:48:26:31:4c:
3c:29:b6:38:df:b2:9f:0c:24:b3:ea:34:89:70:30:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C0:E0:A3:B4:D1:28:43:32:F2:38:FA:F5:9A:60:B6:62:2E:29:94
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:14:df:58:44:a3:89:ef:0c:dc:90:01:c9:0a:bb:8d:a5:9c:
fa:b7:0c:24:a3:65:df:88:64:53:b6:9a:ae:d4:ba:f6:f7:a4:
4d:ef:20:38:60:62:2e:b8:f2:f1:5f:b3:b4:80:15:97:6d:8f:
c4:73:76:c1:1f:39:6c:33:7f:b3:d2:5f:62:b0:dc:52:4b:99:
91:16:6b:db:e2:b0:c7:2d:b2:55:14:06:0c:a7:4a:f0:e7:a8:
e2:ed:b5:85:ab:b6:bf:af:10:f6:44:68:6c:dd:5b:28:ee:16:
d3:b1:84:a4:62:be:59:a2:40:5c:3f:27:37:54:b5:58:a5:ad:
f8:e8:e7:83:c4:ce:1e:11:66:24:2b:50:86:8d:6d:74:17:b1:
54:46:95:06:82:87:9e:e9:1f:4c:06:ea:eb:d7:87:a9:ed:45:
81:ce:49:b5:1c:7e:05:a7:98:44:50:3b:d2:0a:10:52:f7:d8:
81:73:65:c2:d8:8e:ee:fd:af:6b:44:57:a6:e2:d4:69:c8:96:
59:e6:9b:75:17:fd:82:58:79:27:67:db:ae:90:0f:4e:5f:dd:
08:65:f3:17:d3:32:70:4e:63:aa:76:a2:00:3f:ce:82:0f:fb:
d5:66:4a:6f:09:9e:f6:81:7a:a5:ea:33:9b:03:55:b4:bb:72:
fb:a6:68:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:28:30 2026 by rpki-client