Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
File: QfIoYMpivSg4-DKPF4OdHoYI0m0.mft (raw, json)
Hash identifier: hxwoEbQDSAnmW71YaTI67KdcnfQsoVbzjVTOP4o78t4=
Subject key identifier: 5A:F2:BE:31:24:BA:44:8A:C3:D6:4D:3E:A7:0F:37:52:6E:30:FD:92
Authority key identifier: 41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
Certificate issuer: /CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Certificate serial: 019DA41D24B6D95D492BBDC5574C27434270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
Manifest number: 04A0
Signing time: Sun 19 Apr 2026 05:01:06 +0000
Manifest this update: Sun 19 Apr 2026 05:01:06 +0000
Manifest next update: Mon 20 Apr 2026 05:01:06 +0000
Files and hashes: 1: QfIoYMpivSg4-DKPF4OdHoYI0m0.crl (hash: qPVtRwJWiztJx0Z7CLgE9d5zN30nzEKus1YuzTjZif4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:24:b6:d9:5d:49:2b:bd:c5:57:4c:27:43:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Validity
Not Before: Apr 19 05:01:06 2026 GMT
Not After : Apr 20 05:01:06 2026 GMT
Subject: CN=5af2be3124ba448ac3d64d3ea70f37526e30fd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:3c:da:02:23:24:06:6b:5c:0c:16:a6:99:
b7:ff:0a:7d:a2:a3:47:b6:53:fe:51:d0:fe:1c:a5:
53:4f:f5:57:fc:e0:52:71:52:63:70:1b:fb:1a:ae:
42:be:0e:74:98:a1:36:cf:50:b5:f0:b4:3a:92:26:
70:1b:0a:6c:7b:8b:32:e6:5b:86:3d:a7:35:3f:8e:
ee:61:49:8f:ac:7d:a5:e7:b1:4d:68:de:25:a3:74:
27:f8:2e:f5:08:4c:2c:2c:1c:d3:bb:62:8a:09:5f:
c9:fe:74:4b:88:b3:cb:72:6c:47:9b:cb:85:dd:c2:
7c:41:ab:a3:38:5a:ac:d5:be:29:09:0e:7a:0d:66:
81:6c:5e:1e:71:32:fa:29:8e:d4:11:28:ba:66:e9:
fe:cd:d3:a0:a0:1b:92:62:eb:25:67:91:f7:df:38:
be:c3:52:50:78:46:79:27:81:ed:9e:b1:76:f0:79:
bd:3a:f8:80:07:12:b7:61:97:60:69:35:62:60:e1:
54:23:d5:fe:ee:aa:4d:e8:59:cc:b3:cb:d8:13:2e:
90:10:19:4f:07:ee:46:86:59:71:ce:85:35:83:34:
6e:8c:44:79:ee:6b:a1:5c:d3:a0:9d:ef:13:44:61:
60:ec:ed:e5:b8:6f:60:50:9c:b8:e8:1d:df:00:32:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:BE:31:24:BA:44:8A:C3:D6:4D:3E:A7:0F:37:52:6E:30:FD:92
X509v3 Authority Key Identifier:
keyid:41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ba:55:9b:8f:4e:d9:d5:60:76:c3:ee:2c:57:27:4c:c7:8b:
bf:1e:a8:9a:16:f6:76:40:36:06:79:75:09:b1:7c:8a:f5:66:
52:e8:9d:a2:df:3e:bb:bd:3b:7f:d8:dc:8f:75:4d:57:9b:78:
93:7c:58:d1:57:25:06:59:a7:9e:bc:92:da:1a:07:a1:38:96:
42:2e:67:08:19:e7:02:16:58:8c:c4:b1:d4:b3:8a:d6:89:83:
80:be:30:25:5a:07:c4:d9:44:03:33:bd:2c:49:e6:67:dd:5f:
7a:31:af:be:a3:32:7a:52:fc:46:f0:d4:09:74:e0:b9:9a:f9:
4c:6b:d1:6a:55:c4:8a:53:5f:4c:99:57:1f:cc:17:6d:27:82:
16:c8:5b:51:0d:f6:87:e6:9f:90:d3:b4:4c:15:2e:6a:f9:85:
8d:46:a9:dc:9a:07:a4:9b:1a:1b:9d:ce:f7:02:28:00:bf:04:
14:35:3c:3d:9a:86:a5:da:55:89:c4:ca:37:dc:21:d8:de:9b:
f3:0f:ab:2d:5d:c0:56:11:09:ef:ba:85:7d:31:a3:a5:b7:ff:
e1:1a:d8:01:32:cd:e4:4a:3e:e8:12:bb:aa:39:4d:67:16:4b:
15:9f:37:1b:74:da:e7:1a:9b:78:9d:72:61:42:d8:97:13:f2:
b2:b6:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:27 2026 by rpki-client