Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: HeM6aF1TmSKetvlO89hiUiQRfhvXiyrrWF6nx2zSxfg=
Subject key identifier: 1B:80:10:2B:24:79:63:45:1B:09:64:2D:94:32:2A:2B:70:A8:31:05
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019D98BDAF80CF4539529737AFCE22853B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 159C
Signing time: Fri 17 Apr 2026 00:01:01 +0000
Manifest this update: Fri 17 Apr 2026 00:01:01 +0000
Manifest next update: Sat 18 Apr 2026 00:01:01 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: 1n8xDcHLGQ50bLrAxl37dIhFXqG+vij7kqpKBzd1sFg=)
2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:af:80:cf:45:39:52:97:37:af:ce:22:85:3b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Apr 17 00:01:01 2026 GMT
Not After : Apr 18 00:01:01 2026 GMT
Subject: CN=1b80102b247963451b09642d94322a2b70a83105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:ca:32:91:bd:0f:29:64:af:3e:59:be:2b:
81:e4:05:98:72:23:8b:2b:55:e7:e9:5c:9e:c3:b5:
99:70:02:9f:81:81:bf:62:94:75:b5:1f:ec:75:c2:
6e:a2:40:08:0d:26:39:c9:34:3e:36:1c:a3:ce:20:
24:63:49:b7:c4:2c:9a:dc:70:d0:b2:cd:14:64:5f:
b7:6e:3d:c8:6d:d4:9e:b5:6c:0d:b5:d3:2f:a6:62:
9f:e4:c3:c5:77:a0:3f:fa:3e:fa:98:ef:2e:67:b8:
e1:4e:7d:e5:45:9f:ef:26:4f:a7:ef:54:79:3c:95:
77:c1:29:06:35:15:e3:be:c9:3b:33:2b:25:0e:c7:
93:83:cb:a5:cf:e4:84:fe:43:66:74:5d:cd:73:6f:
b9:38:03:12:9b:99:80:3a:04:ee:1d:76:18:d0:d0:
27:23:46:0f:c8:c8:72:25:d1:13:9c:88:1c:a9:08:
f7:1e:83:80:34:d0:1c:4e:3b:3c:af:07:46:b6:91:
26:a2:4c:39:59:40:8a:40:66:24:ab:78:06:9a:05:
b7:de:b4:cd:00:09:59:ac:f0:4f:87:fc:15:2e:b6:
85:02:58:a8:55:34:b2:f8:5a:8f:30:65:db:21:f5:
10:20:79:e0:1d:6c:bf:52:c2:e8:bf:3d:24:ba:21:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:80:10:2B:24:79:63:45:1B:09:64:2D:94:32:2A:2B:70:A8:31:05
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b0:4f:ce:48:e4:bb:49:6f:6d:86:89:8d:88:6a:46:5d:d1:
f0:4b:b2:a9:cc:df:ac:f0:72:29:4f:09:85:7d:49:a7:79:1b:
86:07:80:ac:55:0b:b3:12:c5:2d:c3:04:31:ca:45:9d:38:8d:
7f:ee:ac:d0:66:ee:50:a8:c7:16:46:07:17:f6:db:85:0e:70:
95:da:ab:87:af:cd:c9:1b:ba:5c:f0:5a:00:70:53:e9:64:e4:
fd:ab:c1:65:d5:88:ea:29:98:ba:b6:0e:02:66:95:f7:60:2c:
7a:61:ca:1a:1d:ab:92:a8:ab:7b:1d:55:43:3a:ee:a0:64:10:
ae:b2:3a:c8:79:66:dd:7f:91:f5:7f:dd:99:07:cb:2b:ce:dd:
47:88:4c:77:09:4a:9e:c7:f0:63:08:2c:c8:23:10:bf:3a:ab:
b5:13:87:cd:56:1d:aa:89:cb:a3:04:8d:6e:81:8c:c0:31:1b:
27:f7:4a:ae:16:e0:18:6e:6a:e3:9a:b3:ed:38:fc:86:ee:3c:
d4:f0:09:a5:86:18:a6:72:4a:21:66:ba:ce:40:46:09:23:ea:
85:0e:47:fe:98:c3:0d:72:41:9d:11:85:aa:f2:70:f0:fb:4a:
f3:b6:09:01:a9:b9:6d:61:4c:c7:3e:ec:68:9b:65:da:36:b5:
50:81:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:36 2026 by rpki-client