Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: IRysydv7NvBDe4yheHlntnbxEhsU3hwpWBWQ++Kp+cM=
Subject key identifier: 7C:3B:FB:7C:22:E4:F7:9D:E4:6D:11:03:4E:A9:50:ED:41:B1:24:8E
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 019D9B195062ADF63349B5DB377F2FABC4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 10C8
Signing time: Fri 17 Apr 2026 11:00:20 +0000
Manifest this update: Fri 17 Apr 2026 11:00:20 +0000
Manifest next update: Sat 18 Apr 2026 11:00:20 +0000
Files and hashes: 1: 41UHcYawFZ6dwCf_FfKVxB6pAyA.roa (hash: mxz0vZfXkFbrjS45D2R+Mi2lF9MSSxAbkahXO8KfBYc=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: KRi+oK8yhYIjV6OQqJnJhgOKd5eI+sR/TFUFAWK0ODU=)
3: gDO3yGlii3vGStP0g8IXSinnODc.asa (hash: 4GKXfRU/6q53CGfLh+IE//Y0yEXtQGF8Ot458LYjOwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:50:62:ad:f6:33:49:b5:db:37:7f:2f:ab:c4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Apr 17 11:00:20 2026 GMT
Not After : Apr 18 11:00:20 2026 GMT
Subject: CN=7c3bfb7c22e4f79de46d11034ea950ed41b1248e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:f8:71:b5:16:af:55:97:62:ff:49:1a:3e:
f2:76:16:0f:44:7a:0e:17:db:af:c7:f9:f2:ce:89:
ae:5d:a7:b6:b3:f1:76:b9:86:93:60:a5:10:29:86:
0a:09:22:cc:72:85:62:28:b6:65:f6:c9:e5:75:79:
b7:c4:07:71:53:25:7b:1b:ac:11:88:36:93:3a:2e:
3d:23:be:44:41:a5:04:89:0d:5e:0d:fd:37:5e:76:
f2:7d:f3:b8:6e:71:90:bd:93:6f:d8:a1:ef:82:43:
39:e3:ce:6b:c2:5e:d3:65:43:3b:7a:2f:46:99:48:
6b:e4:b6:a7:98:26:48:92:8b:57:fe:e6:7e:56:c7:
27:5c:9f:00:72:ab:58:b9:86:ab:33:bf:f3:39:8e:
96:7a:a6:b2:98:36:49:63:fe:cf:1b:e2:1f:9f:f8:
e3:2a:d8:37:3b:b7:44:9c:72:ee:9a:4c:3d:6b:19:
b9:d1:6e:27:ca:96:51:4f:cd:97:f9:e1:0d:6a:61:
84:9e:fe:f3:60:f1:36:ef:cb:86:2d:70:c3:cd:e8:
25:0e:d8:40:f4:ba:90:23:4f:83:d0:9e:88:71:67:
4c:78:ac:ac:45:a9:a3:41:6e:a2:c9:33:ce:5a:c3:
3f:fe:23:85:91:31:ae:4c:0b:ef:e4:d2:e5:f0:70:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:FB:7C:22:E4:F7:9D:E4:6D:11:03:4E:A9:50:ED:41:B1:24:8E
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:68:f4:ac:bb:74:55:09:15:ef:04:47:45:01:8f:06:d1:84:
67:86:ca:f0:67:5b:32:af:e1:fb:2b:eb:68:47:e3:ca:b6:ab:
0f:94:13:95:aa:39:76:39:90:62:2c:5d:83:79:67:77:30:49:
a0:99:3e:ee:be:04:b1:5b:c1:0d:0b:d0:b9:36:78:14:33:41:
1b:4e:2f:89:ba:be:e7:3c:d4:a8:f7:1e:cf:f6:3c:f4:af:05:
fc:d6:43:55:5c:5b:d4:6b:b7:e8:23:d4:2c:9e:e2:a2:7a:e5:
c8:f5:1f:cf:1f:d6:a4:9b:ea:78:17:de:ef:b6:1e:05:f5:41:
00:18:55:29:bc:fb:80:d9:6e:c2:75:c3:63:74:d7:6e:34:bd:
90:a0:57:04:06:c3:34:df:78:7a:58:58:2d:9f:bd:20:20:e9:
23:8c:fa:28:13:2a:8a:d3:3e:46:93:e5:d9:00:76:41:2e:d5:
04:e8:fa:3e:f9:b1:3c:bb:e9:fd:9f:84:ec:40:f8:cd:f6:24:
c7:9e:03:0b:4c:62:8f:b2:f4:b9:8f:86:2f:d4:19:b4:1f:ac:
41:3f:81:e9:b5:2b:62:bc:15:9b:69:50:f3:3e:02:8e:71:ef:
27:3d:ed:0d:73:2f:8d:58:15:11:70:b6:aa:f3:27:ff:46:39:
64:52:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:22 2026 by rpki-client