Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
File: QbA1V5NRFBbxRwW15pV14JEgMcE.mft (raw, json)
Hash identifier: vWO0t07S1jJbh3geF58dTPiI27JqoGZQZ3U0eTFkefU=
Subject key identifier: 53:E8:47:4D:9A:C0:55:1C:01:B8:EE:E4:51:41:0F:B1:15:FF:E9:EC
Authority key identifier: 41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
Certificate issuer: /CN=41b0355793511416f14705b5e69575e0912031c1
Certificate serial: 019D9DAC893268F73C779C1A954C43F6746E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
Manifest number: 0158
Signing time: Fri 17 Apr 2026 23:00:23 +0000
Manifest this update: Fri 17 Apr 2026 23:00:23 +0000
Manifest next update: Sat 18 Apr 2026 23:00:23 +0000
Files and hashes: 1: QbA1V5NRFBbxRwW15pV14JEgMcE.crl (hash: gf+CJ5EyTyd9kFT8hL1ftwCZJ2ZhHgvYyOyPwbG+JR0=)
2: jDh_e5jFCb4SZSQr89DNuyR1GmA.roa (hash: OOgQec1GLUpiwLdlG2tPvtCo/oWMRbASwbpSjxC/PqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:89:32:68:f7:3c:77:9c:1a:95:4c:43:f6:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b0355793511416f14705b5e69575e0912031c1
Validity
Not Before: Apr 17 23:00:23 2026 GMT
Not After : Apr 18 23:00:23 2026 GMT
Subject: CN=53e8474d9ac0551c01b8eee451410fb115ffe9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:53:69:e9:e2:b9:91:a4:ce:36:83:02:ff:
c7:a3:36:53:1d:38:a4:04:50:85:01:f8:15:51:e2:
55:d4:29:48:65:e8:ca:3a:fc:5c:9b:23:f0:dc:ee:
48:be:72:a9:07:23:aa:17:51:98:ba:0c:9f:cf:fa:
77:81:d4:27:bd:3a:e1:93:6c:67:03:d9:02:a0:c1:
c7:e7:21:81:70:34:48:96:3b:1b:47:47:48:41:9f:
8b:db:46:9a:4d:de:29:4c:ef:d6:0d:3c:34:d4:ae:
65:35:37:5b:16:f9:1d:4e:e1:61:32:2e:22:0c:99:
9d:82:c8:8c:79:5a:ff:91:68:bc:21:cc:39:96:1c:
2d:db:43:79:3b:f3:a1:1d:b8:d2:36:01:f0:9b:31:
8b:82:d5:8e:73:11:d1:21:64:12:4d:12:eb:40:bf:
d8:f9:43:88:af:e1:22:ae:ae:fb:7e:bf:02:81:c3:
a0:27:e9:bc:60:65:ea:3d:fe:2d:73:6c:7b:63:7c:
2a:da:82:7f:1d:79:3d:b7:f9:ff:40:b4:1b:68:0b:
eb:05:49:75:ab:bb:c0:bd:16:8a:6a:1c:68:d3:27:
ac:36:b8:05:2d:06:38:2c:12:da:df:59:ee:24:da:
2e:f6:0f:9e:95:ef:f4:9b:0f:49:74:7a:c7:d2:1c:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E8:47:4D:9A:C0:55:1C:01:B8:EE:E4:51:41:0F:B1:15:FF:E9:EC
X509v3 Authority Key Identifier:
keyid:41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:be:4c:b9:78:10:be:84:39:0a:29:39:ca:ff:6a:c2:69:74:
42:18:34:4d:73:24:ab:f2:ae:7b:0d:88:b7:1f:3b:1d:b0:2b:
a1:00:28:12:fe:dc:b3:09:f3:81:64:ef:72:77:a8:ef:69:ba:
72:bd:24:02:7d:56:ea:b3:e9:25:d5:42:9c:4d:05:5e:fb:d3:
2d:58:be:48:71:33:ac:6b:44:19:ae:27:94:e9:6f:cf:85:1a:
3c:b0:29:28:a9:a1:ab:d8:b6:b4:bd:4b:fb:c8:40:24:5a:f4:
95:72:40:3d:b3:bb:9a:08:8f:2c:e0:e4:2f:dd:5f:0e:98:18:
0e:d6:ca:4e:3a:03:4b:a6:87:d1:a2:66:e4:a8:36:f1:05:48:
d2:e0:0e:55:fb:f9:78:4e:9b:a8:4d:c8:8d:95:f7:58:1a:99:
ea:6c:f1:45:39:ea:c7:95:fb:a2:0b:0c:cf:d3:ee:7b:f8:52:
d3:cc:96:bc:ec:79:83:8b:55:66:64:57:cc:51:ef:cd:c5:83:
be:0d:80:0b:b0:71:86:1b:47:ca:90:c9:8c:15:3d:42:11:7c:
a3:5e:c8:09:08:94:1b:eb:28:39:ca:79:aa:74:a3:64:46:35:
1a:6e:5f:cd:4c:42:75:65:d1:99:32:5c:2a:ac:c5:fb:0a:54:
9d:b9:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:05 2026 by rpki-client