Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: rz8HBs1wtX5LkLynMfOGAYSBZCuGH3ksioYTbh+ok6k=
Subject key identifier: 87:9F:3E:39:A3:9F:E6:40:93:E9:89:57:00:3E:97:99:49:4B:95:0F
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 019D9B197471FE80942868360A3CCC8F3B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 11:00:29 +0000
Manifest this update: Fri 17 Apr 2026 11:00:29 +0000
Manifest next update: Sat 18 Apr 2026 11:00:29 +0000
Files and hashes: 1: VyKqzxZ8-5ygWJNcg4AE05d6_mE.roa (hash: eTq1Nu+al+6xzFG/LttgMYk2x81Ow2Yalg2eI2MZJbI=)
2: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: RIjXtb6BsVHnlyI7YP49Edkkzn1J2L4eoQ9PlfAF7uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:74:71:fe:80:94:28:68:36:0a:3c:cc:8f:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Apr 17 11:00:29 2026 GMT
Not After : Apr 18 11:00:29 2026 GMT
Subject: CN=879f3e39a39fe64093e98957003e9799494b950f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:7b:a0:10:cf:6d:e4:6a:54:7b:9d:14:b4:
ce:da:8b:db:95:54:89:8b:a5:45:31:3a:39:b4:d8:
8b:e8:6b:48:03:3a:d3:50:1b:f5:b0:7d:cd:fe:e3:
d1:b5:8e:87:14:4b:67:bc:de:25:21:30:8b:21:61:
ab:e0:f8:a5:01:65:4e:48:44:61:0d:10:00:a2:d0:
05:83:60:4b:70:71:0c:0c:86:17:bf:83:c0:4e:9f:
6c:2e:c6:0d:c1:ce:89:38:68:81:bd:e7:7f:29:92:
51:b9:1a:b9:1d:00:8e:a6:e8:c2:b6:81:75:00:0d:
5d:d7:ac:88:d0:ea:ba:af:dc:02:5f:6c:a3:4b:95:
fb:57:1a:e3:88:4e:eb:a7:eb:52:43:41:80:87:14:
7d:79:df:05:3e:e1:9b:05:84:c9:83:bd:d0:42:fd:
17:83:d7:e9:fd:2a:ce:4e:18:ad:e2:1c:ea:8a:ce:
94:43:e0:69:8b:d2:49:55:3c:f4:73:29:21:71:1d:
bf:7e:2a:53:d6:16:63:a4:e7:0a:cf:e3:3c:c2:29:
a8:5d:b1:7c:c9:0d:72:34:53:0c:63:33:a4:44:c1:
80:de:bf:c2:f5:1f:d0:16:d7:b9:03:f8:b3:89:7f:
84:63:10:22:b4:a1:01:01:56:1d:39:54:a8:b3:4a:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9F:3E:39:A3:9F:E6:40:93:E9:89:57:00:3E:97:99:49:4B:95:0F
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:66:a7:01:2d:0b:da:eb:44:11:34:64:2a:f0:14:59:27:
d0:0c:fc:16:c1:69:57:73:97:6b:6d:e9:1f:60:b5:35:5c:92:
eb:dd:4c:34:9c:3c:60:b6:1b:39:f2:12:f6:dd:15:a2:98:14:
a8:a5:5d:e6:c8:3b:26:39:93:fb:b9:da:06:56:3d:48:ee:6f:
7f:49:79:7e:1b:88:16:3d:8d:90:88:d4:4a:82:47:30:12:7e:
00:1c:06:05:35:41:b0:38:9e:c7:5a:bd:ae:ae:41:dc:68:8c:
8e:05:b1:83:3a:82:91:48:fa:84:a1:da:50:06:2c:97:9f:ec:
92:3d:e4:67:9d:47:c9:be:06:f8:fc:cb:c2:f1:96:bd:f6:a9:
1e:8e:b8:cf:d0:38:92:ce:d1:58:24:b6:0f:bf:4c:de:27:41:
16:4e:f6:7b:6f:a9:a6:33:01:61:2a:76:6c:61:25:d0:b2:68:
26:a3:dd:07:fb:11:9d:2f:b5:cf:6e:51:42:c8:68:1c:ab:b3:
88:79:df:56:c5:73:8f:8f:ae:34:b3:e8:5a:00:60:8d:9e:ec:
d8:ff:0c:23:bb:16:66:c4:ba:3b:f9:73:fb:90:a2:64:52:4f:
04:f4:e0:eb:99:68:35:b4:9a:51:cc:f2:bb:92:20:12:38:e0:
6a:85:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:28 2026 by rpki-client