Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: a1I1bWEpYnlHK9Ju+2uqPrEL4RfHnxmL6pxgwutqiwE=
Subject key identifier: 3E:CF:BE:B4:2E:D9:BD:03:A1:BC:D2:F4:E0:08:C0:9B:EF:AA:8C:5C
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 019D992AEF43112807F0ABE29F6AEE6C5831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:20 +0000
Manifest this update: Fri 17 Apr 2026 02:00:20 +0000
Manifest next update: Sat 18 Apr 2026 02:00:20 +0000
Files and hashes: 1: eYVzKhVxRl0S4NV-8z3jnKXYp7g.roa (hash: FCmQv16BfxP+owog0Mj/PEYM7uRcKJlUX18aeU4hB40=)
2: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: w89sQGV23WuOhyYv/OooJS2yJ2y3KL+ydQ+A7D4c6Yo=)
3: xV6FBBeDoPLgKQuqzg8O7q-72L4.roa (hash: bdyv+UoIDEOcCmHbnZjDztZ9hQAFyZKMucdHwquQvzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:ef:43:11:28:07:f0:ab:e2:9f:6a:ee:6c:58:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Apr 17 02:00:20 2026 GMT
Not After : Apr 18 02:00:20 2026 GMT
Subject: CN=3ecfbeb42ed9bd03a1bcd2f4e008c09befaa8c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:b3:49:fb:83:df:10:79:f1:63:b1:a3:42:
f2:f1:c1:87:b3:9a:14:a7:25:89:bc:2b:50:16:30:
b7:6c:af:c4:e5:f2:e4:53:8b:a4:ab:ec:40:30:4f:
ce:45:30:80:95:a0:cc:48:07:6b:e6:34:5e:46:c2:
00:12:05:d4:55:ed:1f:29:63:b0:5e:fa:a4:f8:6c:
c9:f1:6b:73:a1:68:3e:77:d9:a0:3b:75:c6:aa:5a:
1b:99:12:41:dd:94:30:5b:fa:a1:5b:7b:1f:2f:04:
c8:cd:f9:c0:2c:27:8e:9a:14:3a:af:09:6f:85:a3:
c6:7b:b0:41:8e:ef:1f:6a:e7:75:fa:30:6d:89:6e:
d2:b6:9c:00:50:5c:76:f5:64:18:c5:54:8b:91:f9:
4d:38:a8:c3:c1:6b:58:8f:59:2f:ad:75:59:da:7e:
ae:cd:c0:54:49:38:fb:70:38:08:d1:a6:f9:77:9d:
e3:cc:f3:eb:37:09:22:01:f9:60:2f:ad:74:58:2f:
c9:2f:c4:b5:30:a5:dd:50:e2:53:5d:97:32:ba:7a:
ed:f6:f3:a3:b2:9f:b4:68:06:5f:2e:e8:27:1e:19:
a5:85:b8:04:41:5b:db:3e:69:69:70:1c:ac:99:07:
8b:ba:1b:16:f4:cb:b5:fc:9e:80:6b:0b:80:5f:92:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:BE:B4:2E:D9:BD:03:A1:BC:D2:F4:E0:08:C0:9B:EF:AA:8C:5C
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d5:70:0e:1f:dc:c7:c2:4d:20:d7:1f:a3:77:a9:7f:08:70:
65:76:18:34:2e:71:25:f5:e6:89:b1:23:4c:c0:17:38:f4:b8:
e2:fa:b9:02:34:32:e0:1a:38:7e:f6:cb:bd:6a:44:7b:ef:2c:
ca:07:be:ea:ae:09:e1:07:56:a2:7c:76:9f:ef:2f:ae:38:27:
5b:97:b7:30:1e:2b:5a:4b:36:df:4c:1c:02:a9:0b:d8:62:c4:
ab:67:39:e4:00:11:0d:43:32:87:68:e5:f7:41:7e:2c:06:3d:
26:54:a3:01:6d:28:e4:81:72:75:ef:f7:b2:e8:22:e7:ea:0c:
72:2f:07:25:a8:46:36:ab:7c:98:46:cc:68:64:62:f0:a1:d0:
04:5c:e9:d0:d4:c9:61:0b:e7:52:fa:8b:f4:62:c4:6f:a9:37:
e3:44:d6:b5:eb:4c:e4:3c:11:0c:e0:45:50:51:5a:68:64:f7:
8a:12:51:b2:ec:4b:8c:84:89:b9:b0:ad:3e:30:02:d4:c6:4c:
f4:bf:c5:fc:c3:b1:4b:38:84:ae:c2:61:45:2d:7c:79:a8:1a:
30:0d:a3:b7:6f:41:28:45:49:0c:bd:16:20:11:0a:50:2e:65:
73:fa:fa:23:3b:dd:65:bd:bd:63:22:5f:08:5d:e6:eb:69:3e:
be:db:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:22 2026 by rpki-client