Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: SRLKvG+Jxw+9hhTm8+cKMwToNVH4fAkz0zgqsOOa0aw=
Subject key identifier: 59:D1:F9:F5:2C:A7:DD:8D:BF:18:4C:F6:DF:22:E0:8D:79:0F:07:01
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019D9A0778FB765F180D5001FE8A5576D336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 17F3
Signing time: Fri 17 Apr 2026 06:01:14 +0000
Manifest this update: Fri 17 Apr 2026 06:01:14 +0000
Manifest next update: Sat 18 Apr 2026 06:01:14 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: 8dvWQJG10smP0P38v2h6TC1X5FqHmQimkZqvKswnHpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:78:fb:76:5f:18:0d:50:01:fe:8a:55:76:d3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Apr 17 06:01:14 2026 GMT
Not After : Apr 18 06:01:14 2026 GMT
Subject: CN=59d1f9f52ca7dd8dbf184cf6df22e08d790f0701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:bb:63:93:08:39:d7:f4:2e:59:e8:43:86:
57:41:2c:43:f9:0a:95:5f:70:78:c1:de:c2:df:5c:
90:b4:e2:94:75:f5:58:49:92:6d:62:c1:ad:bb:98:
8c:b4:93:9f:22:de:71:6b:ea:08:6f:00:38:40:55:
33:34:9b:66:ce:3c:cd:65:a1:49:ff:88:d9:e2:a8:
38:cc:b9:06:fa:72:38:e4:50:bd:fa:cc:e8:8d:2a:
cd:db:53:d4:93:b2:32:f0:64:35:cd:67:50:be:e6:
76:09:57:d0:8c:3a:d3:dc:c4:3b:54:76:8c:8b:c5:
95:94:ff:7d:3c:4e:ab:c3:3e:89:c6:47:37:e7:70:
a6:a8:27:94:05:f4:36:1f:0f:cc:42:cb:23:9d:cc:
fc:fb:70:76:07:4f:a6:79:d0:8f:e7:8c:83:74:ad:
f7:ed:20:51:29:61:12:4e:73:a9:c8:ac:90:96:14:
27:64:6e:35:ad:c9:6d:07:46:ab:de:df:ba:48:18:
05:2d:ba:af:3a:f1:a7:e1:4a:28:b0:4e:c6:df:6b:
e1:a8:43:d9:f1:69:d5:33:e2:de:d3:0e:2c:60:00:
cc:ee:e1:c3:c9:00:6f:7f:52:f3:1a:3c:26:be:b4:
6c:f2:64:04:13:ac:eb:3d:49:ec:11:7d:ab:e3:df:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D1:F9:F5:2C:A7:DD:8D:BF:18:4C:F6:DF:22:E0:8D:79:0F:07:01
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:77:a0:d3:a3:48:cd:d8:da:b6:b8:21:63:a8:e7:d6:e0:df:
83:0e:92:13:49:85:f0:7e:75:a4:a4:27:ef:bd:16:de:be:4d:
af:98:ef:2b:7a:c3:a8:8f:f5:61:90:e4:5b:71:e4:be:42:fb:
37:a8:b6:8c:f0:e7:13:76:32:b6:73:02:67:1a:01:9e:9c:2f:
52:b0:8f:57:3e:4f:8a:ba:65:36:6f:a7:ee:c0:79:e7:53:0c:
13:15:b4:28:27:93:1c:59:5a:91:12:f3:bd:0e:c9:ae:ef:ac:
b4:00:51:00:64:5a:e4:61:8b:fe:50:ca:a1:d3:f8:0c:7f:53:
80:ef:a6:3b:97:09:ee:d0:5e:f0:7f:26:de:fc:26:94:eb:9c:
cf:99:10:af:ad:78:39:de:d3:ce:d3:c3:c8:2d:ba:2b:bf:5f:
45:43:f6:25:a5:9c:9c:29:42:77:09:41:20:f5:69:2c:56:ce:
b0:d8:25:46:fd:9b:d9:db:20:79:a4:7c:d9:88:eb:0f:9a:25:
34:33:b2:73:dc:ec:79:29:98:81:a6:4d:54:1a:91:bc:b0:e9:
8f:c8:3a:d6:0d:25:22:17:61:0f:ca:2b:e7:d8:24:b5:ed:75:
f2:8e:67:69:93:3e:98:f7:21:c6:b5:0c:1b:2c:2b:55:17:ce:
d6:de:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:06 2026 by rpki-client