Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: MIzY5QRYupa3B4eokaEAcX/X/gAZSJbQbMAAe+EDQEs=
Subject key identifier: 82:01:F7:B5:5C:A8:38:BF:C4:C8:98:B6:F5:F4:55:3C:D3:D8:D1:D5
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 019D9818DA10A4273D436C85641A815508C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 21:00:58 +0000
Manifest this update: Thu 16 Apr 2026 21:00:58 +0000
Manifest next update: Fri 17 Apr 2026 21:00:58 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: jSxRb5MVf+5IEYaD+dMx75pWrRma4yI6uZCbYK4pW2k=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:da:10:a4:27:3d:43:6c:85:64:1a:81:55:08:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Apr 16 21:00:58 2026 GMT
Not After : Apr 17 21:00:58 2026 GMT
Subject: CN=8201f7b55ca838bfc4c898b6f5f4553cd3d8d1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:e4:ed:0d:c6:71:1e:a3:62:21:5f:01:90:
0a:aa:a9:21:7b:4a:9d:ce:e8:d4:83:52:41:6b:5e:
13:0d:03:3d:af:41:96:cb:d8:da:d8:4d:c2:e3:37:
c6:ae:5d:86:c8:00:8a:42:81:04:53:35:1a:0f:61:
63:0f:5f:3c:3f:ad:11:cf:8d:84:9d:42:d8:9c:9d:
49:26:f2:8b:ac:8b:74:77:f0:b1:e5:f4:29:4e:dc:
13:10:9c:0a:9e:9f:0b:2b:75:15:72:b2:24:8e:f0:
7c:df:77:33:78:d7:88:15:45:76:5c:f2:35:e8:75:
b9:33:8c:71:da:ed:4c:e0:69:3c:33:a9:f0:3f:95:
f6:e2:4f:d3:6e:c0:7e:a8:fd:23:73:e4:f0:4e:6c:
5c:9b:4f:2e:c7:90:b9:4e:ac:3b:2b:90:03:56:a9:
6b:82:62:25:d3:cb:7f:e5:63:b9:6b:32:62:e1:08:
7e:65:b1:7a:d1:dd:de:a3:5f:c1:88:4a:f6:8a:14:
4d:94:02:f2:17:af:83:94:4c:ab:8d:c0:70:8a:9d:
5d:0b:2a:db:6f:38:82:35:a3:47:89:0e:90:04:f1:
8b:7d:67:3c:b5:3a:1b:e3:a5:4f:3c:6a:85:bb:30:
24:ad:80:1d:aa:60:2a:d4:6b:1c:40:39:f7:cd:db:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:01:F7:B5:5C:A8:38:BF:C4:C8:98:B6:F5:F4:55:3C:D3:D8:D1:D5
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1d:34:49:1f:37:d0:4b:b5:e5:d5:73:b3:47:72:b4:44:7a:
e1:e1:ea:5f:47:e7:db:5a:72:f1:65:1e:2d:39:38:35:0e:3d:
d7:bc:72:f9:af:f3:a7:38:7e:01:ba:d1:01:4f:ae:6d:27:11:
5d:25:76:4b:0a:43:9f:84:a4:3f:2e:0e:9b:6d:9e:c5:52:5d:
80:69:e3:66:41:6e:5c:ea:8f:f0:2e:da:9a:4d:fd:a6:ff:d3:
0d:7c:a5:38:2b:60:a4:76:c5:53:78:d0:ac:72:60:f5:59:9b:
2b:bb:b4:f0:21:29:d4:dc:45:6c:cf:4f:d1:6e:31:a5:6c:6f:
28:7b:e3:27:61:68:b4:a2:c0:2a:14:e4:c3:90:bd:52:d1:76:
31:f0:f9:1f:1e:c5:58:86:2f:cf:63:0f:a2:b8:9a:f9:f8:e2:
93:db:e2:c1:c8:08:ab:9f:14:7e:2f:21:3c:45:2d:37:ac:5b:
3e:04:fe:8a:2c:57:8a:ad:b4:b3:cb:18:3e:30:d8:cd:e8:0e:
32:72:ab:25:12:21:75:8e:75:95:40:2c:5e:4e:a5:fe:74:43:
62:93:ee:01:88:91:7c:53:be:31:f9:1f:0b:a7:f8:d5:ac:b2:
2e:03:ed:03:63:79:8e:67:8f:5a:10:c6:33:ea:1d:0c:f5:38:
3a:98:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:57 2026 by rpki-client