Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: mwvt5xVO+cMRO1/9gLHJyTH2SmEG6Hiu9619VYieSds=
Subject key identifier: 3D:7B:E5:00:70:02:EF:16:F8:74:25:A1:68:69:94:1B:85:B7:6B:6D
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 019D9D75AF13D019599356AD66CAAD85B96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 22:00:28 +0000
Manifest this update: Fri 17 Apr 2026 22:00:28 +0000
Manifest next update: Sat 18 Apr 2026 22:00:28 +0000
Files and hashes: 1: 89B9QRpsAYslipobPKLMe4rYzLU.roa (hash: sMU4kNtcmn2Zuj4Vpvbkloa2tK9j6EDzNo9Vzz7bFFo=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: 061rIZFJCLDlr4VYS6xjAJX1cCmtxjXAJntm130uJd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:af:13:d0:19:59:93:56:ad:66:ca:ad:85:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Apr 17 22:00:28 2026 GMT
Not After : Apr 18 22:00:28 2026 GMT
Subject: CN=3d7be5007002ef16f87425a16869941b85b76b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:6d:22:4a:f8:03:92:dd:f3:0b:2d:4b:88:
05:73:8c:a1:c0:1e:8d:89:02:10:67:c7:57:ed:e8:
90:14:74:4f:a1:14:a3:bc:b5:b3:a5:78:6a:ec:75:
ac:10:23:6a:eb:9c:7d:16:fb:50:71:c4:cd:b2:63:
50:d5:34:dd:9a:68:6f:ba:cd:4c:57:f7:3b:82:56:
64:68:fa:6c:46:58:0e:86:7e:41:81:50:07:2a:d4:
87:f7:d2:22:62:1f:42:41:53:c2:19:9b:fa:f6:c4:
f5:bc:a6:ba:ec:df:fd:f6:00:b3:6e:a9:d8:3d:f1:
89:d2:00:60:a1:75:5d:b8:b3:9a:53:b3:8e:5c:8a:
16:b3:63:08:36:8b:86:93:83:e8:c8:6c:a2:0b:dc:
10:c9:a4:ec:6b:31:b8:8e:f6:30:dd:5b:a3:30:de:
a9:a5:62:11:10:f2:4f:c4:c1:ec:33:37:9f:b5:51:
98:67:9e:13:07:5c:03:3c:ba:39:af:b3:7b:78:c4:
da:3b:c3:3c:5c:af:83:cb:a6:e3:cc:e3:85:2a:c3:
3b:ac:a6:2e:fb:37:d4:1b:d9:e3:81:75:68:5b:7a:
60:7b:31:2e:cd:c3:9f:d1:94:03:b5:f8:73:4d:36:
83:e4:a8:5b:a9:14:7d:83:0d:50:85:7b:fc:ec:7f:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:E5:00:70:02:EF:16:F8:74:25:A1:68:69:94:1B:85:B7:6B:6D
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9c:54:c1:8c:a9:04:5a:ee:4b:48:2a:37:fd:13:30:e2:83:
d1:2b:c6:b3:b1:cf:a4:4a:1c:39:87:6c:65:f8:7f:70:28:e3:
f9:0c:72:e5:d3:7e:7d:cf:51:48:a5:de:6c:13:5d:ad:e1:ff:
78:92:03:5d:35:e2:c5:0c:a8:80:dc:1f:b1:9d:ad:12:30:52:
ca:de:ff:9b:47:a5:fc:8e:96:44:af:8b:53:75:a1:cb:bc:9e:
58:ef:59:9e:f3:48:95:15:45:8a:28:bb:b9:5b:12:c3:c1:43:
bd:33:77:75:fa:10:c5:bd:d2:c0:25:ea:04:26:d7:99:bb:23:
2b:47:d5:b2:3d:04:15:d0:ed:c1:aa:ba:90:3f:f2:df:be:90:
c4:b7:77:3c:7f:59:d0:9d:3e:16:8f:bf:fd:da:15:17:f1:7e:
80:75:f2:ea:87:54:b1:69:df:6f:1e:d1:ce:a1:36:bd:a6:9c:
77:fe:2a:a2:67:09:40:92:61:48:45:a0:2b:51:e9:ae:ea:09:
d9:ec:44:88:92:e5:37:18:ea:05:2c:18:14:b6:7e:0c:6d:b0:
c4:f3:01:58:41:df:2e:c2:0a:c5:3f:3b:b6:20:cf:1a:e1:9c:
16:33:dd:56:57:74:d6:61:d9:03:a6:e7:c8:9d:a2:cd:07:62:
ec:2f:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:32:43 2026 by rpki-client