Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: qeMG5sDLuNIFmhpHZ7QYVo7ShCqSipIIm7hA0scgWEU=
Subject key identifier: B1:F9:6E:76:A6:32:F3:EB:08:AF:18:5E:9D:AE:5F:3A:28:0A:BA:4C
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 019DA29C86C43D0D58155E1B5463E5DB24E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 18C5
Signing time: Sat 18 Apr 2026 22:01:00 +0000
Manifest this update: Sat 18 Apr 2026 22:01:00 +0000
Manifest next update: Sun 19 Apr 2026 22:01:00 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: P8yKEUw/YlAEI+4O35GL88mDze/vPPcKHV5Yp0bfd5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:86:c4:3d:0d:58:15:5e:1b:54:63:e5:db:24:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Apr 18 22:01:00 2026 GMT
Not After : Apr 19 22:01:00 2026 GMT
Subject: CN=b1f96e76a632f3eb08af185e9dae5f3a280aba4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:56:ea:d0:9c:c9:d1:ca:96:f0:97:07:c6:
fe:17:db:90:64:7a:f4:8b:d5:85:3a:7d:1a:a4:74:
84:3e:db:3c:d0:f1:2c:0b:fa:d6:20:12:9c:28:c9:
71:8f:8e:b5:98:b1:81:ea:12:fb:65:71:e9:e3:2a:
e2:ea:e2:7d:ea:73:20:89:57:3b:4f:06:66:26:b9:
1c:55:69:aa:c9:90:a0:2e:a6:9e:12:a0:66:90:3a:
c9:30:00:75:5e:a2:cc:8f:12:c6:1d:93:29:e9:99:
e2:f3:34:7c:4c:de:be:41:6e:ec:9a:9c:60:52:de:
cd:33:6d:1d:4a:42:7b:79:40:bd:6c:bd:7a:ad:f0:
48:2a:fd:bd:96:15:1b:a0:ed:b9:3a:75:54:bb:78:
27:6d:2d:50:51:38:e2:48:67:c3:3c:a6:e0:0a:51:
4e:ea:7e:05:66:54:9c:b6:8a:01:cb:20:41:ed:a0:
b2:55:aa:2e:4f:6e:9e:01:43:f2:a4:06:1d:b0:99:
34:f6:4e:d4:86:fd:e4:37:39:1b:3b:64:b7:b7:13:
ba:f0:f7:68:bc:23:7c:b2:ad:c8:41:5b:3b:a7:52:
2a:bc:6c:5d:3e:9f:6d:9c:56:09:9d:45:ef:0a:32:
92:22:42:05:f2:7d:17:97:2e:b0:f4:14:bb:4d:3e:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F9:6E:76:A6:32:F3:EB:08:AF:18:5E:9D:AE:5F:3A:28:0A:BA:4C
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:3c:47:14:04:6a:d6:4f:95:12:d3:82:27:b3:d7:eb:22:b4:
b9:13:5a:a6:ef:d6:af:90:c6:14:53:40:d4:16:b7:a9:9d:f1:
f4:e8:40:dc:19:d9:ef:18:05:87:0d:1c:ab:f3:15:0b:f8:c3:
0b:ce:ff:c7:0b:e5:eb:a6:57:67:89:95:c8:a6:81:08:b4:1a:
db:f4:81:9e:47:8c:72:67:3a:3d:72:b0:bb:fa:fa:25:87:69:
fe:1e:ee:81:1f:46:86:d3:c0:7d:e9:f3:09:e9:4b:87:84:0d:
bf:4c:77:77:7f:a1:e6:6c:72:21:6c:e3:28:f0:f0:88:26:3c:
2e:2b:d6:6e:1c:1f:95:e7:4b:eb:76:6c:bf:85:26:f1:73:79:
d2:bd:c1:a2:cc:a9:38:51:99:64:f4:ce:7d:1e:0e:54:49:97:
ed:13:69:ef:0e:7d:40:f6:7b:32:e5:93:b0:56:3e:e8:98:88:
0c:f4:0f:e0:6a:40:cc:74:82:21:04:0f:fe:df:98:e4:51:4e:
5a:c7:48:95:65:92:99:a1:d6:b7:ce:ed:df:20:72:a5:3b:6d:
03:95:95:60:6e:90:6d:5d:0d:92:70:f0:76:e8:84:c3:bd:73:
0d:b9:3a:8d:62:60:dd:a3:48:44:be:83:a6:25:17:c6:d5:fa:
5f:4c:e8:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inIbEPQ1YFV4bVGPl2yTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzhkNmYyZTFjMWJlZGZlN2JiOGNmNzlkYjI4YzhlZjNm
Yjc3NmYwHhcNMjYwNDE4MjIwMTAwWhcNMjYwNDE5MjIwMTAwWjAzMTEwLwYDVQQD
EyhiMWY5NmU3NmE2MzJmM2ViMDhhZjE4NWU5ZGFlNWYzYTI4MGFiYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfVW6tCcydHKlvCXB8b+F9uQZHr0
i9WFOn0apHSEPts80PEsC/rWIBKcKMlxj461mLGB6hL7ZXHp4yri6uJ96nMgiVc7
TwZmJrkcVWmqyZCgLqaeEqBmkDrJMAB1XqLMjxLGHZMp6Zni8zR8TN6+QW7smpxg
Ut7NM20dSkJ7eUC9bL16rfBIKv29lhUboO25OnVUu3gnbS1QUTjiSGfDPKbgClFO
6n4FZlSctooByyBB7aCyVaouT26eAUPypAYdsJk09k7Uhv3kNzkbO2S3txO68Pdo
vCN8sq3IQVs7p1IqvGxdPp9tnFYJnUXvCjKSIkIF8n0Xly6w9BS7TT7JIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH5bnamMvPrCK8YXp2uXzooCrpMMB8GA1UdIwQY
MBaAFELI1vLhwb7f57uM952yjI7z+3dvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgt
MGZkYjdiY2RmZmQ2LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgtMGZkYjdiY2RmZmQ2
LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1TxHFARq
1k+VEtOCJ7PX6yK0uRNapu/Wr5DGFFNA1Ba3qZ3x9OhA3BnZ7xgFhw0cq/MVC/jD
C87/xwvl66ZXZ4mVyKaBCLQa2/SBnkeMcmc6PXKwu/r6JYdp/h7ugR9GhtPAfenz
CelLh4QNv0x3d3+h5mxyIWzjKPDwiCY8LivWbhwfledL63Zsv4Um8XN50r3Bosyp
OFGZZPTOfR4OVEmX7RNp7w59QPZ7MuWTsFY+6JiIDPQP4GpAzHSCIQQP/t+Y5FFO
WsdIlWWSmaHWt87t3yBypTttA5WVYG6QbV0NknDwduiEw71zDbk6jWJg3aNIRL6D
piUXxtX6X0zo5w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:28 2026 by rpki-client