Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: 3nUDbq4TMJV/WXXHTPriX2M8OaVQhOWD97e4Mfg3LqE=
Subject key identifier: 01:9B:4D:11:43:67:42:F0:70:E7:AD:D2:E0:A4:56:02:0C:91:41:2B
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 019D9D083F15FF12058705259B8C9EA5131D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 1856
Signing time: Fri 17 Apr 2026 20:00:56 +0000
Manifest this update: Fri 17 Apr 2026 20:00:56 +0000
Manifest next update: Sat 18 Apr 2026 20:00:56 +0000
Files and hashes: 1: VyKqzxZ8-5ygWJNcg4AE05d6_mE.roa (hash: eTq1Nu+al+6xzFG/LttgMYk2x81Ow2Yalg2eI2MZJbI=)
2: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: RLSbdFx01WqQZY5CEiu5mfpIrwtzZJcNycUHMYgKnGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:3f:15:ff:12:05:87:05:25:9b:8c:9e:a5:13:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Apr 17 20:00:56 2026 GMT
Not After : Apr 18 20:00:56 2026 GMT
Subject: CN=019b4d11436742f070e7add2e0a456020c91412b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:8e:0a:99:57:a7:e2:13:c4:7e:e2:09:49:
eb:b2:48:b1:c4:78:88:ad:e5:47:7e:04:f8:63:df:
4c:cd:09:91:13:ed:97:a9:11:ab:21:60:d5:14:d6:
2e:0e:bb:80:a8:5c:5c:9d:a0:62:24:1a:3e:7c:07:
ad:86:c4:36:fc:9f:aa:28:14:e0:80:cd:38:54:f7:
45:60:57:eb:7f:f6:9c:19:f3:75:4b:1a:87:aa:58:
af:c0:25:c4:39:d9:ea:c7:70:6d:5f:47:59:e9:03:
67:ce:87:ea:47:46:f8:98:13:3c:0d:b6:76:d7:2b:
30:79:7c:14:68:23:43:61:dd:6e:df:29:b1:3d:1e:
07:01:03:79:70:ec:b5:d0:86:2c:95:ee:7b:78:5e:
0b:9b:54:66:93:14:1a:92:11:1b:0d:ab:29:dc:84:
ab:88:06:83:f1:38:5f:aa:f5:e5:64:00:7e:39:4b:
c0:44:e6:53:dc:2d:cc:41:d3:d7:22:e7:9c:d8:25:
ad:76:3c:c8:ca:60:e5:bb:1f:ed:29:3b:0d:04:37:
c1:2b:79:f2:2e:7f:72:de:ff:62:cb:fd:87:b7:32:
d7:42:01:66:1d:70:ff:e4:13:38:c6:41:d8:fd:b2:
24:8a:0c:04:18:ee:f7:0f:f9:67:dc:71:88:66:8c:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9B:4D:11:43:67:42:F0:70:E7:AD:D2:E0:A4:56:02:0C:91:41:2B
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2e:55:29:63:ed:76:de:5f:4e:17:11:e7:d9:ee:fd:a2:84:
9f:40:5e:f4:9d:d3:61:e8:a4:0f:ff:93:2a:29:6c:82:74:bc:
d9:1f:9c:a3:32:f6:10:d5:24:ea:d6:f0:61:9b:dd:9c:94:38:
75:12:b6:2c:1a:a2:9d:c7:07:56:57:21:d4:af:d7:1f:9b:51:
18:e8:b2:17:71:6d:14:63:a9:e4:73:60:a0:cc:a8:75:9b:5e:
6d:c2:f1:4e:4b:ff:50:95:c2:86:4a:cc:aa:6d:3c:b6:0f:0d:
3d:f5:48:85:f7:ce:be:42:20:37:0b:e2:85:da:ec:47:d1:62:
d2:7c:36:3d:43:ca:91:8b:20:33:fc:bb:4a:d4:fd:2c:c1:9c:
96:88:2c:5c:c2:67:af:d0:f0:65:3a:61:cf:7f:50:4c:d7:51:
b8:43:7f:b8:03:09:3b:40:5b:e2:e9:8d:6b:69:9c:64:f1:75:
4a:48:1d:47:3a:3f:1c:c5:48:79:3e:4f:4e:98:37:58:2b:99:
04:9c:55:84:71:eb:cc:44:ff:0c:02:e6:0c:16:70:60:75:c8:
8d:5a:d6:2a:ed:7b:ab:b7:e0:ec:6e:60:2a:4b:34:36:44:d8:
e3:26:b4:dd:92:a6:d3:b4:d1:e3:99:7a:19:00:84:03:5e:02:
db:21:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:08:01 2026 by rpki-client