Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File: qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier: /rokN7Tv1XDoviYk1Ir7m7k1apkxscY44KJE7Q67GfM=
Subject key identifier: 0C:D2:28:8B:D2:86:8E:BE:7C:15:87:D3:95:4C:D3:6E:4E:4C:04:99
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 019D9A3F1C48239B482E64BBB5D29D72B650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 07:02:00 +0000
Manifest this update: Fri 17 Apr 2026 07:02:00 +0000
Manifest next update: Sat 18 Apr 2026 07:02:00 +0000
Files and hashes: 1: IDJxz5Lf-bhA1wZBvX00WPWc418.roa (hash: jtojvMTm31S/WThDl0+VIPwens+k95gEp5w6ddEUhik=)
2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: 3LE+3N4iEOBYLHkWZChknsdDwk11nSfgbd3/Q69c7wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:1c:48:23:9b:48:2e:64:bb:b5:d2:9d:72:b6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Apr 17 07:02:00 2026 GMT
Not After : Apr 18 07:02:00 2026 GMT
Subject: CN=0cd2288bd2868ebe7c1587d3954cd36e4e4c0499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f1:d6:7c:ac:03:20:9e:ba:49:62:f4:f2:56:
a8:02:10:21:91:be:9b:10:b0:d0:c7:27:3a:60:3c:
9f:c2:aa:5c:94:81:0d:53:88:73:ce:a4:22:cb:d5:
d8:d9:aa:08:84:c2:58:68:34:0e:9c:c5:52:d4:78:
49:8f:87:0b:50:8f:ad:29:fa:71:66:52:a0:22:d9:
00:71:12:cd:69:f0:30:11:d3:b0:f0:9f:c8:0c:bc:
c5:da:24:89:5f:e0:25:6b:b8:71:26:53:54:41:a2:
41:ff:21:e9:ba:c7:1d:0e:fa:f3:f6:6b:e8:6b:0f:
4e:65:75:84:8b:20:b8:a8:c3:e5:b1:19:06:db:d4:
92:b9:a1:2d:de:11:9b:a9:98:2f:5a:58:23:5f:47:
ff:ec:7a:03:3f:fd:f1:e5:84:ec:da:49:c7:8b:47:
e7:6a:e5:a3:8c:da:1c:fd:be:67:32:08:16:44:0c:
d1:1c:a4:76:1e:76:9b:92:60:9e:0c:cf:ae:8d:c7:
69:78:e5:7f:04:6e:94:ea:f7:63:7e:82:fb:cd:61:
b7:ad:79:91:3a:c2:d5:28:4d:76:72:33:28:1d:36:
27:18:3c:7d:dc:87:94:bb:2f:5c:85:a6:07:6d:f0:
2e:28:44:68:f6:46:24:66:2c:2c:22:35:7d:de:c2:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:28:8B:D2:86:8E:BE:7C:15:87:D3:95:4C:D3:6E:4E:4C:04:99
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fc:38:df:cd:11:07:19:a1:da:1f:c4:90:50:3f:0d:b3:56:
2f:2d:f8:c5:36:f2:22:dd:f0:0f:a2:44:f5:f2:c4:64:3b:f0:
59:43:d3:74:cf:c0:a5:cc:09:38:7c:2c:cf:74:a3:65:2e:00:
49:df:dc:cd:d5:02:f9:cc:99:be:36:7a:84:27:7e:ed:75:24:
9f:d1:e7:ce:dc:ca:c5:4a:61:46:9c:58:69:01:de:21:ec:df:
4f:03:eb:3a:ca:36:7d:dc:30:13:7d:50:32:f0:c4:1e:c9:2f:
fe:00:e2:89:50:d9:bf:b4:ed:33:1d:fa:b0:7a:2e:37:1d:d4:
ec:fb:55:ac:db:c6:29:d5:f3:0a:40:a2:16:c4:32:ec:d8:fb:
e9:7d:96:9f:72:60:2c:40:74:82:77:d3:23:7a:23:90:cb:2d:
5f:00:9c:99:74:fc:c0:4b:2d:62:c4:2d:26:9a:df:e9:8f:e4:
61:6e:e7:f4:82:34:f1:8d:bb:4f:b0:2a:c3:3a:37:be:59:84:
38:48:75:12:c8:b6:7b:6b:f0:16:03:bd:37:20:60:a1:be:56:
c1:7f:cf:ca:ac:9d:22:45:cc:68:80:37:5d:c4:41:89:d2:f2:
d7:77:95:13:ae:68:4f:5d:86:da:5c:24:94:a8:9b:30:27:de:
48:49:ba:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPxxII5tILmS7tdKdcrZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjcyOTY0MmQyZTM1MzdkOWFiN2M0NWM1MWZlMjZkZWE0
NjhiODIwHhcNMjYwNDE3MDcwMjAwWhcNMjYwNDE4MDcwMjAwWjAzMTEwLwYDVQQD
EygwY2QyMjg4YmQyODY4ZWJlN2MxNTg3ZDM5NTRjZDM2ZTRlNGMwNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/HWfKwDIJ66SWL08laoAhAhkb6b
ELDQxyc6YDyfwqpclIENU4hzzqQiy9XY2aoIhMJYaDQOnMVS1HhJj4cLUI+tKfpx
ZlKgItkAcRLNafAwEdOw8J/IDLzF2iSJX+Ala7hxJlNUQaJB/yHpuscdDvrz9mvo
aw9OZXWEiyC4qMPlsRkG29SSuaEt3hGbqZgvWlgjX0f/7HoDP/3x5YTs2knHi0fn
auWjjNoc/b5nMggWRAzRHKR2HnabkmCeDM+ujcdpeOV/BG6U6vdjfoL7zWG3rXmR
OsLVKE12cjMoHTYnGDx93IeUuy9chaYHbfAuKERo9kYkZiwsIjV93sI7NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzSKIvSho6+fBWH05VM025OTASZMB8GA1UdIwQY
MBaAFKsnKWQtLjU32at8RcUf4m3qRouCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZDgwZGUtMTM2MS00MjNmLTkxYWYt
NWQwZTYyMGY1MjVkLzEvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lZDgwZGUtMTM2MS00MjNmLTkxYWYtNWQwZTYyMGY1MjVk
LzEvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/w4380R
Bxmh2h/EkFA/DbNWLy34xTbyIt3wD6JE9fLEZDvwWUPTdM/ApcwJOHwsz3SjZS4A
Sd/czdUC+cyZvjZ6hCd+7XUkn9HnztzKxUphRpxYaQHeIezfTwPrOso2fdwwE31Q
MvDEHskv/gDiiVDZv7TtMx36sHouNx3U7PtVrNvGKdXzCkCiFsQy7Nj76X2Wn3Jg
LEB0gnfTI3ojkMstXwCcmXT8wEstYsQtJprf6Y/kYW7n9II08Y27T7Aqwzo3vlmE
OEh1Esi2e2vwFgO9NyBgob5WwX/PyqydIkXMaIA3XcRBidLy13eVE65oT12G2lwk
lKibMCfeSEm6UA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:18 2026 by rpki-client