Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
File: QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json)
Hash identifier: P/5jO0dMPbj3t1/v07KaNglBfV33GW/DhEfslzWUuZc=
Subject key identifier: 6B:A9:62:31:13:41:9B:49:99:AA:6A:69:EB:81:BE:6D:57:A7:56:73
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial: 019DA340CA1D3C0530A74056117576768220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
Manifest number: 1893
Signing time: Sun 19 Apr 2026 01:00:25 +0000
Manifest this update: Sun 19 Apr 2026 01:00:25 +0000
Manifest next update: Mon 20 Apr 2026 01:00:25 +0000
Files and hashes: 1: Pz1ijF7NvXZpwroWfDzmV2z1wts.roa (hash: 2MVgLGXOwFf2G7MSkrktFH0ASrpgVLNSAdBfzn0r5Z8=)
2: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: LlAHvJQi3TuCbW/+JWcDxgeb1TB5h6l0b3FZZt9dfFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:ca:1d:3c:05:30:a7:40:56:11:75:76:76:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Validity
Not Before: Apr 19 01:00:25 2026 GMT
Not After : Apr 20 01:00:25 2026 GMT
Subject: CN=6ba9623113419b4999aa6a69eb81be6d57a75673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:2a:2c:ef:5b:eb:c2:f6:63:59:dc:ee:22:
d4:ee:37:c6:b1:54:60:35:1b:74:73:5a:18:66:73:
b0:11:ba:3d:9c:b3:03:e8:5a:08:cc:ec:61:db:64:
8a:ea:3b:26:7f:29:17:29:54:8f:96:0a:0d:b0:1f:
cc:75:af:bf:c5:ff:fc:64:37:3a:9f:f8:93:e8:5c:
06:b0:e1:17:9b:86:22:f2:1b:c1:c4:87:59:68:63:
d7:ed:fc:18:ad:86:8a:41:c3:b8:61:05:07:d0:01:
9f:0a:47:fa:7a:7f:30:43:8d:ce:8d:d9:98:17:3a:
8e:fa:a2:fb:b5:dc:56:58:5a:34:b7:b1:36:8e:65:
44:53:13:d4:66:b2:87:a8:ea:43:c3:37:1e:79:bc:
83:60:86:93:64:a2:07:b7:c0:43:0f:d2:59:83:65:
08:da:17:7f:f9:4e:52:95:4b:41:82:83:9b:f4:04:
ef:c6:a2:4a:6c:97:dd:ba:88:48:38:04:b8:68:81:
52:1d:f6:24:87:4d:7d:ab:44:3a:19:30:82:ba:11:
f4:0e:77:78:54:72:c5:75:09:4d:e6:42:7a:91:3d:
fc:cc:b4:6b:1f:c9:78:fc:c0:44:e6:fe:5f:74:fe:
e7:a0:8a:8d:af:3c:97:c6:63:ce:39:33:d2:82:ba:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A9:62:31:13:41:9B:49:99:AA:6A:69:EB:81:BE:6D:57:A7:56:73
X509v3 Authority Key Identifier:
keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1f:c6:c9:e4:fd:e9:fe:75:7a:74:37:f5:19:25:ab:a6:cb:
bc:54:e6:80:24:62:46:e3:9e:e6:f8:b6:b2:2a:bb:18:47:be:
b9:7a:1f:88:fa:a6:8b:66:cf:c3:0d:f3:21:1b:a6:ec:df:05:
02:2b:7e:e3:89:71:13:b1:ad:38:14:d0:01:a5:73:8e:5f:36:
3d:0e:98:8e:e8:7c:9a:d9:dc:26:86:7e:1c:c1:46:e0:17:99:
1b:9f:08:33:d1:de:0c:aa:8c:7b:df:61:2b:40:25:8f:89:84:
6a:4f:75:14:4a:91:14:b7:d3:99:19:50:4b:68:ec:8a:0b:f5:
0e:df:65:b3:59:c1:ce:2b:0f:66:73:ee:05:67:e5:d6:9e:66:
29:1d:9b:5d:c1:4b:3d:41:7c:fe:9f:4b:94:26:67:e0:9e:e6:
aa:06:18:88:d6:4c:a8:a7:9a:30:2a:3f:80:4b:47:ed:40:ea:
c8:b4:2d:59:fd:01:a1:90:4e:37:d3:c5:77:dd:62:cc:0d:0b:
a5:10:51:65:f1:63:f2:ee:5b:b8:83:80:f2:2e:88:0b:28:0f:
16:41:de:65:b3:e4:36:b0:26:91:44:d7:60:50:99:37:bf:64:
8c:0a:4d:34:14:b0:b2:36:f6:b3:15:c0:c2:9f:65:cd:52:06:
e9:6d:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:41 2026 by rpki-client