Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: Gz8683RBN7i4pE+K6cTyDBmVyYFNyFpaCOaVvNuGMOk=
Subject key identifier: E5:E0:F6:3E:18:0B:08:AF:AA:E0:39:38:CB:89:AD:CB:77:34:67:BC
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 019D9B50550DBDE89C5840929D9492AE5EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0F59
Signing time: Fri 17 Apr 2026 12:00:26 +0000
Manifest this update: Fri 17 Apr 2026 12:00:26 +0000
Manifest next update: Sat 18 Apr 2026 12:00:26 +0000
Files and hashes: 1: BO14bA7PeRb0D7KQP3CWollCutc.roa (hash: KWBfGK/f5gpdRKkzCSVIg8eJkkTlP4Rw/G54X2xmAk8=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: 4ha6nFjA8wqGdaN+9N3EqtdX1Z3LnDyvSbdho6lNCf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:55:0d:bd:e8:9c:58:40:92:9d:94:92:ae:5e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Apr 17 12:00:26 2026 GMT
Not After : Apr 18 12:00:26 2026 GMT
Subject: CN=e5e0f63e180b08afaae03938cb89adcb773467bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:5c:88:58:13:fa:43:7c:c3:ed:36:30:20:
9e:5d:b5:6b:09:59:30:1b:b9:22:fc:7a:ac:9d:c9:
bd:1d:64:c7:54:0f:73:e5:d5:e8:61:cc:06:d1:43:
ea:99:28:56:a6:9d:e7:c2:63:c8:5d:73:0b:32:12:
15:f5:8b:66:51:9f:12:8c:60:66:35:62:bb:02:0f:
41:23:2a:30:da:28:ec:c3:65:ea:6a:0f:f7:b5:8b:
cb:af:28:7e:10:be:00:ab:1a:4c:54:b6:9f:cc:f4:
53:f0:a1:d0:56:dc:01:36:d3:ff:a4:bc:90:7d:77:
3c:98:ea:c1:46:19:65:64:ae:c8:e3:9a:ee:15:3f:
c6:51:da:79:3e:a3:66:fd:bd:db:f1:58:d1:51:c7:
c6:6b:bb:b5:ae:dd:5e:d9:e2:12:60:16:0b:7a:04:
22:7b:0f:80:91:8d:d7:94:91:ee:07:37:eb:01:f5:
dc:8b:9c:fd:96:58:b7:08:38:e9:11:0c:f9:c6:9d:
fd:2f:d3:c4:fd:ac:fe:97:82:85:1a:1c:12:99:99:
8b:55:e6:d4:c7:81:9a:a4:1e:a9:94:e9:b8:5f:20:
46:25:97:f8:5b:e4:b5:98:35:0b:ef:3a:5c:25:57:
0b:a7:90:9e:a3:9d:43:d1:c2:05:4e:c7:0c:c5:2b:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:F6:3E:18:0B:08:AF:AA:E0:39:38:CB:89:AD:CB:77:34:67:BC
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d9:f6:05:39:20:6e:31:71:74:0e:d7:96:12:6c:c5:cd:e8:
af:d7:5d:06:89:1a:3a:7a:6a:d2:3d:f0:5e:52:12:26:ea:ca:
83:18:27:e1:f0:18:04:53:e5:f2:80:46:a4:40:51:00:57:8a:
41:70:c3:94:ab:c5:8a:61:0d:1d:d0:a0:19:1f:88:6a:c4:40:
01:96:c8:ad:9d:b6:7a:d1:32:9e:1b:67:1d:1e:f4:80:fa:54:
54:bf:22:81:8f:5c:73:f5:fe:4e:65:6f:29:e8:d2:81:46:e4:
5f:5c:79:a7:ef:fb:ab:41:39:df:06:a8:46:c8:e6:cb:1f:18:
0b:3f:06:cd:d2:26:37:8b:8c:0e:0d:65:ea:f5:9e:9a:64:4c:
59:3c:19:6f:17:70:97:16:11:31:b9:60:7f:22:f3:6e:94:b3:
f4:42:36:02:09:3a:16:44:03:63:51:ed:45:c8:98:0f:01:27:
74:ce:56:c2:05:fc:b2:ff:20:36:3f:b7:b7:21:ef:c9:5d:39:
8a:14:4a:ea:30:47:1c:36:ad:6c:32:95:a6:e3:aa:aa:86:a9:
41:4f:3b:af:26:09:8c:74:a3:b4:37:c8:0a:e7:ba:e4:10:0a:
d3:b3:0b:39:24:a2:b5:0a:22:1c:c4:2a:3f:e5:e2:fd:ae:75:
9f:5d:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:52 2026 by rpki-client