Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: rKjfUh+/aEhUYmLzzm8VL+4cpso4uvwvoMgeSmpEgbs=
Subject key identifier: 77:86:7C:07:FE:76:30:B2:73:19:12:6C:6B:C6:6D:55:AB:E3:0B:52
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019D9B50E3F5D4387C145F5F666AB4F902AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: mJwmi5kGEAk1hzpnWAoZZAqcgHzZTY47LryR3x0B70U=)
2: heO1dPv16lNqNoaUzHYmWrwdcrs.roa (hash: Pmdo0ju6M8iagRWSreMlT5nEuBLF3DYNOFUHFOJkLRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e3:f5:d4:38:7c:14:5f:5f:66:6a:b4:f9:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=77867c07fe7630b27319126c6bc66d55abe30b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:4f:74:e1:9f:ed:1f:7e:37:c4:60:4c:73:
c8:b3:cb:ae:a3:1d:d2:78:25:f5:31:ff:63:f7:8a:
8c:2a:bf:4f:97:7f:f7:1a:4e:25:8f:a0:3c:73:79:
c1:65:94:3d:b4:a6:51:ae:a8:6e:ac:38:aa:16:ca:
bf:d5:45:4b:e8:4a:3d:b8:7d:ac:ca:ff:54:28:74:
5c:43:08:36:3c:b0:2e:ba:df:fe:4c:7c:84:d5:cc:
00:11:fe:2c:4f:8b:62:e9:54:cf:c5:24:a4:0d:40:
c2:ea:82:52:0f:b5:c7:b5:ee:54:49:f6:f7:b5:ac:
c4:0e:4a:b0:4e:5d:30:4b:a4:c2:e7:b2:4a:ed:22:
6c:36:4f:b1:84:ec:0b:44:9a:6b:8c:ca:5b:32:f9:
25:f1:f7:49:cd:3b:9c:ca:dc:5e:71:82:f1:ab:09:
82:4e:47:48:f7:40:a8:f1:55:1e:43:cc:29:a4:e5:
49:b0:5d:f3:e5:eb:29:bd:87:d1:ef:30:03:f0:d3:
96:64:5a:83:be:d7:31:42:82:74:30:71:a9:a2:ed:
fa:a3:0e:a2:0e:b4:be:a5:6e:cd:c7:3c:9c:05:86:
78:80:f8:fc:d4:f4:32:66:a1:63:6d:c7:24:54:f6:
4c:7a:28:72:5a:03:dc:8c:9a:ed:fe:3f:d8:8d:52:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:7C:07:FE:76:30:B2:73:19:12:6C:6B:C6:6D:55:AB:E3:0B:52
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d2:bd:1e:d9:c0:7c:be:0a:df:57:5d:1a:df:16:fb:8a:6c:
b7:30:53:4e:e7:94:95:b2:0e:6f:11:a3:92:62:e3:ea:ce:e8:
d9:a4:37:22:a7:89:8b:51:79:0a:78:29:0e:5c:7c:e2:4d:51:
cd:95:4c:a2:fa:6f:85:c6:13:1f:42:5b:f8:4f:30:1b:5f:62:
7b:d8:13:63:f8:bf:60:95:e0:07:ea:88:d7:dc:7d:d6:72:b3:
64:d0:53:1e:6c:e5:62:95:42:9a:d5:7b:92:3f:66:18:03:71:
c6:9b:1d:27:61:99:b5:a1:52:51:c0:18:27:e5:6c:67:80:32:
37:31:92:36:2b:bc:7a:5d:97:d7:ee:a0:ea:c4:95:b9:8d:7e:
1f:19:bf:5c:43:37:58:ba:0c:99:fe:bf:14:78:de:52:68:6c:
a0:63:3f:09:c2:ff:9a:cc:a0:2f:47:5d:16:da:ac:5b:fe:82:
14:2f:fe:7e:9a:15:eb:90:1d:27:27:ab:1c:e5:b0:07:01:93:
79:d7:7a:14:fd:5f:7f:40:0f:06:77:50:d5:3b:fe:6b:a1:7f:
c1:0f:3d:13:d7:92:a2:e1:64:ba:f0:28:aa:96:d0:94:46:3d:
7d:53:80:ba:63:52:5e:56:d8:b7:51:8e:b8:85:8e:88:70:6f:
b0:c9:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:33 2026 by rpki-client