Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: D2FSEGNF4kZaicYNckaXGOK02ToUxectkrM21UPXtcY=
Subject key identifier: 96:A3:60:B5:33:AE:08:0A:BD:FF:D9:CB:AF:39:F2:46:74:CC:AB:9E
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 019DA3E6DBF5B3F7518EF4D88B239F7F6256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 04:01:48 +0000
Manifest this update: Sun 19 Apr 2026 04:01:48 +0000
Manifest next update: Mon 20 Apr 2026 04:01:48 +0000
Files and hashes: 1: HyQmJzqnKNsyI3fs8wsXXo5JYlA.roa (hash: K4YLNNf5d2hU3VOcsfWG70mXY/0b7/Wb9z62jzKngps=)
2: kJXa9fRydrgc3PEgKj6e_ZPgJOw.roa (hash: vXw4a1fcUv1ExZN3oTfaxQy9guZhkfoKZDMFzMPNNx0=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: 3MPcMq1yRFOyfSRtNzzLWmLZYL+BcCsUE0fJ664GbEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:db:f5:b3:f7:51:8e:f4:d8:8b:23:9f:7f:62:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Apr 19 04:01:48 2026 GMT
Not After : Apr 20 04:01:48 2026 GMT
Subject: CN=96a360b533ae080abdffd9cbaf39f24674ccab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:9c:66:20:f4:8b:70:e7:35:8f:5a:87:9d:
a1:1b:67:5a:9b:7d:78:d1:46:05:58:4a:c2:e5:f3:
b8:f6:f3:26:8a:1f:24:c6:da:c8:7e:d8:88:c7:17:
d4:68:a0:46:d1:0d:72:af:2a:10:63:cd:dc:d9:a3:
1a:c5:14:b4:f3:8c:10:41:8e:0a:7f:e7:6e:22:63:
06:ab:2b:cb:65:83:3c:f7:26:f6:8e:45:18:4c:c0:
44:a3:ea:50:3e:5b:e5:01:a4:50:f6:a2:30:e7:5d:
a1:bd:4d:f6:cf:6a:41:4a:8a:21:68:ec:7b:13:17:
e4:c9:9b:b1:b2:85:0e:1a:90:15:49:00:b7:8e:2a:
2e:96:b3:24:57:9f:6f:bd:22:2d:a2:4d:83:3f:fa:
10:53:86:03:56:de:61:6d:50:4f:43:65:49:56:c5:
75:7b:ee:91:4a:b1:ec:1b:be:3a:82:88:b0:f1:5c:
4e:cd:41:e7:9b:3e:5d:99:ee:d7:1d:40:e8:47:62:
aa:d1:3c:18:63:e7:85:a7:ee:2d:a0:6a:d9:17:75:
0f:da:4b:9b:2f:ea:35:37:64:b1:50:6a:cb:1d:b3:
fa:c9:1e:ab:a4:35:28:84:9b:2c:3c:88:91:03:36:
cc:2d:99:bd:59:90:d0:1a:2f:4b:da:51:09:ea:98:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:60:B5:33:AE:08:0A:BD:FF:D9:CB:AF:39:F2:46:74:CC:AB:9E
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:53:39:b3:d1:2e:77:b3:77:0c:c8:3d:a4:e7:1c:4b:23:78:
66:bb:bc:d8:3c:8c:35:70:d2:c3:5e:d0:3b:d4:b8:03:d9:70:
e4:5b:80:c1:1d:eb:ad:7e:63:7e:e6:d8:b6:0e:46:1a:df:37:
64:7e:af:ed:a1:0b:4a:59:6a:cb:44:57:2b:85:c4:30:03:df:
1e:7d:af:8d:28:f0:51:60:5e:01:68:d3:14:4b:70:b7:8c:5e:
e7:cd:3f:b6:3c:1a:a1:0a:be:9a:85:9a:48:99:cc:ff:08:58:
70:53:a6:4b:59:ec:2e:47:52:15:83:c4:20:cb:ad:23:97:56:
af:d6:92:88:95:0b:4d:1c:97:70:16:db:64:0e:97:61:c6:39:
75:54:21:99:1a:99:55:bd:1d:55:78:fc:ec:7f:39:16:f3:ed:
00:b2:0e:58:79:ec:b1:bf:00:e7:f0:d8:5d:ef:31:bd:19:58:
39:8a:77:99:e1:9d:c9:ec:cb:43:26:4f:be:01:8a:78:55:1c:
55:e8:67:b8:5d:5f:eb:f5:0c:d6:6d:e0:6b:7b:bc:e8:00:55:
7e:52:3e:6d:a8:f1:99:b9:66:d6:12:b6:aa:cc:12:23:05:90:
81:02:f1:44:b4:3f:f2:62:87:88:8d:90:a1:a3:16:81:d5:29:
34:6e:2a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:02:49 2026 by rpki-client