Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: MeAvi4bqrik9H5pg1cZdBVp4h314j8I6xWhlhVCPUl8=
Subject key identifier: 3C:7D:42:89:F4:4E:64:11:61:83:C4:9D:B7:AB:9D:57:FE:7C:D9:82
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 019D9B19C0D065FD8D16A1245D45B16B66E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0E33
Signing time: Fri 17 Apr 2026 11:00:49 +0000
Manifest this update: Fri 17 Apr 2026 11:00:49 +0000
Manifest next update: Sat 18 Apr 2026 11:00:49 +0000
Files and hashes: 1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: Ow3CYaeX2ugv0oLb6fIJsect52rNGBVyoJICdDTRPMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:c0:d0:65:fd:8d:16:a1:24:5d:45:b1:6b:66:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Apr 17 11:00:49 2026 GMT
Not After : Apr 18 11:00:49 2026 GMT
Subject: CN=3c7d4289f44e64116183c49db7ab9d57fe7cd982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:0d:62:af:ca:aa:89:bf:ff:2f:75:31:ef:
1c:75:9f:f1:12:49:e2:38:d0:77:a9:8b:de:7e:00:
ec:15:06:ea:7c:5c:ed:fd:88:20:37:13:5a:5b:72:
5f:b6:09:45:38:3a:d4:b0:0d:f9:79:26:05:ac:bc:
a6:7c:94:d2:17:c2:23:b5:33:42:18:d2:35:30:ac:
e8:41:3e:aa:c4:8d:a6:e7:6b:04:3b:93:21:7c:95:
f0:7d:51:4b:9e:68:31:42:f7:9f:10:ad:21:1b:28:
c1:c6:4b:1f:80:85:52:4a:fa:e1:81:7b:58:d8:3e:
75:ba:9c:64:31:58:0d:ab:fe:a6:30:73:e0:cd:a0:
2f:dc:24:27:20:f8:e9:96:62:1f:a4:c9:4c:f1:e8:
56:d5:90:9c:3e:64:ca:75:c8:01:7b:d5:96:1f:c7:
85:3c:c5:f6:a1:65:66:65:d4:23:27:e6:83:e1:be:
be:10:92:87:e4:fa:ab:99:10:30:b0:b7:43:7d:ba:
c2:01:1b:c3:8c:8a:33:5a:8f:1b:81:10:44:47:ff:
01:d8:72:09:be:c5:88:46:ef:69:70:20:16:a3:be:
f7:14:24:8f:76:51:10:1a:95:db:b3:26:f7:32:2d:
8e:c3:64:c6:ef:7e:3b:47:91:19:ff:10:e4:18:b2:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:42:89:F4:4E:64:11:61:83:C4:9D:B7:AB:9D:57:FE:7C:D9:82
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fb:4c:9e:ed:ae:5e:eb:54:6d:0f:83:f4:86:53:2d:17:9c:
c8:3b:74:40:48:cb:b1:2a:d6:d6:f6:2b:58:8e:24:ca:fd:58:
a2:bc:dc:dd:9e:15:e1:99:10:00:e7:db:ae:ab:5c:f1:40:8b:
9b:a5:65:8e:85:68:3d:f2:09:70:45:c9:9d:1d:c4:16:bf:ab:
73:a2:6f:7a:6b:65:38:7d:0e:ac:48:90:c5:38:d8:c3:8f:bc:
2a:ea:50:80:3d:a9:8e:28:74:7f:a1:b2:03:66:01:51:8e:4f:
58:c9:87:d5:aa:e9:a9:84:b0:5e:c3:ca:8a:6b:d6:90:6f:a2:
62:9a:12:66:b0:b1:52:98:be:78:19:90:18:23:df:00:57:a5:
ba:dd:3d:c8:f1:4f:94:fd:3c:e4:19:41:0a:d1:b6:e9:31:39:
16:50:97:f9:7e:6d:2e:84:57:da:58:42:f1:da:7e:47:d3:7c:
43:4a:f1:7e:38:30:99:d4:b3:07:af:57:f1:79:02:73:ae:39:
e9:ce:b1:5b:d6:89:8d:46:b8:78:a7:62:2d:d0:9a:f2:ad:7a:
07:90:fe:76:6b:91:ca:97:5d:58:62:7a:92:2f:59:7c:a2:72:
e3:e1:58:c8:86:0f:99:01:26:de:a6:16:15:f5:91:8d:79:d8:
32:26:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:12 2026 by rpki-client