Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: WHWHku1G65VjoIqLSmc437dDasYr8GSWq3Or+zPIUKE=
Subject key identifier: FA:8C:6C:7A:24:3A:AE:EC:5F:3C:E0:6B:10:13:55:8B:BF:C5:3A:80
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019D9A07209203729364804942DB48E09E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 15A1
Signing time: Fri 17 Apr 2026 06:00:51 +0000
Manifest this update: Fri 17 Apr 2026 06:00:51 +0000
Manifest next update: Sat 18 Apr 2026 06:00:51 +0000
Files and hashes: 1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: /elU/31lCvwle7wXAJPUG1ptXh0eiCbHRhZohMWpAjk=)
3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:20:92:03:72:93:64:80:49:42:db:48:e0:9e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Apr 17 06:00:51 2026 GMT
Not After : Apr 18 06:00:51 2026 GMT
Subject: CN=fa8c6c7a243aaeec5f3ce06b1013558bbfc53a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:60:f6:5e:98:ef:2e:d8:4a:45:41:60:cc:
d1:14:11:28:ed:fc:1e:23:06:a3:5f:41:87:e8:a2:
a3:9d:1f:f4:bc:e5:45:51:09:47:c0:5c:e7:37:54:
c7:56:ed:06:82:31:10:6b:cf:85:a1:ef:0c:81:58:
59:b8:b9:37:49:f7:e7:8f:ad:c8:a5:14:8d:02:2d:
df:f1:f0:7c:78:d1:00:27:36:90:77:65:b0:6e:cc:
3f:ac:9f:7e:6c:30:00:c1:ba:a1:0e:ef:e3:24:19:
df:9d:f3:90:93:cc:a4:b7:e9:a8:e7:e3:c2:d4:b6:
f0:f7:cd:75:eb:10:e2:ae:8f:d8:59:b1:1a:53:cb:
be:41:6c:b5:5a:aa:bc:8c:b6:8b:f5:ea:eb:42:f0:
2a:0e:d5:2c:c7:81:45:04:5b:f5:d8:52:bf:23:f4:
c1:1f:5c:b2:c4:1a:0a:16:a5:26:15:cd:1b:c1:e3:
cf:eb:b0:0f:da:cf:99:98:ed:d4:d2:16:74:d0:96:
09:a9:80:4b:7a:be:93:79:35:23:3d:a8:da:66:21:
99:85:c0:d8:9a:c2:74:c0:0e:17:90:d8:2e:98:c9:
f9:4f:85:98:fb:08:84:69:85:cf:06:bd:44:58:e7:
ac:f6:3f:5b:f2:21:28:70:26:f3:30:01:ae:b6:1a:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:6C:7A:24:3A:AE:EC:5F:3C:E0:6B:10:13:55:8B:BF:C5:3A:80
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3e:24:cc:f8:7a:08:8c:31:1b:42:e8:b4:fd:63:1c:0a:17:
0e:f2:bf:c4:52:6d:17:69:1d:55:aa:4b:9c:6b:88:69:3d:79:
37:05:59:0d:f3:7a:ba:23:de:46:a1:e9:67:e4:69:c1:01:d9:
1e:5a:da:dc:bc:6f:78:a5:d8:60:04:e2:39:03:34:a4:6f:9e:
85:b5:81:e1:29:53:9d:f5:cf:61:26:4c:7b:6d:7e:5d:2f:2b:
24:3a:ff:ed:de:be:0d:57:48:8b:8f:eb:85:b7:32:17:8e:0e:
56:e6:7e:24:8c:de:af:d3:b6:d6:13:5c:39:9f:b0:de:7c:e9:
4c:21:c7:5c:31:df:b9:52:ce:be:a9:99:15:51:ba:57:bd:e3:
3e:af:26:5d:2e:b1:19:29:0f:7b:61:e2:ce:61:ca:dc:af:92:
c4:d0:0d:25:28:76:86:6a:21:14:f8:bd:1e:1c:de:2c:4b:bf:
69:bf:28:78:d1:85:ee:fe:0b:0d:a7:ec:93:10:e1:57:d2:17:
96:41:29:9a:20:5c:0e:22:f7:00:ee:b0:f2:b0:14:40:88:6f:
fb:a4:fa:87:c8:d7:d2:ea:35:f3:fd:e9:b0:a5:cd:b9:09:87:
fd:3e:10:a7:fb:fe:92:52:3b:c2:32:21:73:90:46:b2:be:22:
8e:93:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:59 2026 by rpki-client