Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
File: QbA1V5NRFBbxRwW15pV14JEgMcE.mft (raw, json)
Hash identifier: /o6SF8kjX29TLqa5CIXIN4w1jgcBr2Y71af6PJdvK6k=
Subject key identifier: 57:A7:EA:55:E0:49:99:8A:D7:5A:DF:66:82:D1:B9:2A:58:CD:78:1E
Authority key identifier: 41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
Certificate issuer: /CN=41b0355793511416f14705b5e69575e0912031c1
Certificate serial: 019D9BBE222B0B437FC5F98E83B562629B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
Manifest number: 0157
Signing time: Fri 17 Apr 2026 14:00:22 +0000
Manifest this update: Fri 17 Apr 2026 14:00:22 +0000
Manifest next update: Sat 18 Apr 2026 14:00:22 +0000
Files and hashes: 1: QbA1V5NRFBbxRwW15pV14JEgMcE.crl (hash: y6uYQ0PeTTeMoxYUW4kbEZNG2JniED2TIpU1J4Dqwpw=)
2: jDh_e5jFCb4SZSQr89DNuyR1GmA.roa (hash: OOgQec1GLUpiwLdlG2tPvtCo/oWMRbASwbpSjxC/PqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:22:2b:0b:43:7f:c5:f9:8e:83:b5:62:62:9b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b0355793511416f14705b5e69575e0912031c1
Validity
Not Before: Apr 17 14:00:22 2026 GMT
Not After : Apr 18 14:00:22 2026 GMT
Subject: CN=57a7ea55e049998ad75adf6682d1b92a58cd781e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:20:6f:d1:f5:9a:bc:d9:55:52:4b:fc:f9:
2b:89:3f:02:fa:e5:62:ff:18:1e:fa:91:d9:73:12:
d0:ee:eb:2a:c5:73:36:1f:14:66:ef:31:21:40:95:
2e:07:08:b0:a2:b3:be:2b:9f:eb:a3:86:d5:ee:7b:
f9:8a:a4:f2:8f:02:73:6c:a1:f1:22:48:2c:75:ce:
b6:8a:9e:ea:3f:40:f6:5a:b5:4d:09:1a:33:73:31:
bf:93:a3:cf:6a:45:f9:0f:33:fc:a9:12:70:58:9a:
56:18:f2:bc:9a:cb:1d:8a:e9:47:bc:14:02:17:32:
2d:43:fd:3b:de:9f:c4:5c:e6:bb:80:6c:48:fb:26:
f2:f4:40:e0:1a:1a:bc:4c:3f:e8:11:fd:bc:01:f0:
6d:a2:88:15:f9:54:cf:75:f9:05:50:84:18:ca:fa:
8d:52:e5:0c:de:8e:43:ad:88:85:e1:7f:6d:62:45:
d1:cf:35:13:e8:e3:d8:28:23:4e:30:7e:6d:25:f6:
cb:19:ea:ef:99:b2:e8:3c:81:1a:ea:a4:bd:7a:96:
93:c1:4b:41:03:3f:5b:fe:6c:39:48:a5:45:57:93:
c4:52:bf:47:c1:22:56:a2:8d:cf:1b:e7:f6:b6:12:
9f:35:ef:f0:fa:48:5b:12:b0:67:e3:e4:85:49:b4:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A7:EA:55:E0:49:99:8A:D7:5A:DF:66:82:D1:B9:2A:58:CD:78:1E
X509v3 Authority Key Identifier:
keyid:41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0a:38:b0:cc:9a:bf:3f:15:79:7f:b7:19:f1:23:f0:26:80:
8f:60:12:06:ba:a7:06:53:28:dd:3c:3c:89:fa:35:1d:0c:27:
2a:d7:c0:04:46:0f:3c:c3:14:df:2d:69:57:47:23:e7:c5:bf:
1e:95:e1:eb:cd:c6:b0:e5:b6:1d:84:ef:35:ee:35:bd:e1:58:
f3:c8:4a:bc:4f:36:64:19:e3:4c:00:cb:b0:45:78:23:63:ad:
78:82:e4:9e:47:f1:a1:6b:a2:62:94:c6:e3:d9:f4:87:7f:98:
13:5d:32:f9:22:80:e8:21:08:b5:37:bd:cd:30:f8:60:f3:52:
8f:a6:1a:12:42:c8:50:15:e4:02:69:14:d9:39:de:9b:69:4c:
60:e0:96:42:82:0b:b6:cb:dc:5e:f1:fe:6e:31:0c:80:84:ae:
8b:f3:b9:d7:1d:24:4a:5f:62:d9:32:60:7f:cc:59:a0:ac:46:
24:b5:e4:be:50:3b:87:35:3a:87:47:83:bc:4f:9a:69:af:13:
cd:ce:92:f6:66:d3:6e:6e:7e:52:b7:dd:f6:ee:dc:d0:ed:ae:
83:3f:fa:e1:28:dc:7e:46:f8:a4:0b:c7:31:a4:f4:e9:b2:a9:
65:c8:86:3f:31:28:03:7c:67:7a:4d:82:7f:de:4f:5b:2a:5e:
e2:66:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:48 2026 by rpki-client