Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier: wZqE8hCMlTI84YFNgL4kMhLWuEIaswJBjZiWDSrZ25s=
Subject key identifier: 46:66:ED:CC:3A:04:5A:E0:37:AD:47:47:58:00:50:96:6D:94:6D:15
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 019DA41D0E68A3A10D504168D428D6E350D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number: 18CE
Signing time: Sun 19 Apr 2026 05:01:00 +0000
Manifest this update: Sun 19 Apr 2026 05:01:00 +0000
Manifest next update: Mon 20 Apr 2026 05:01:00 +0000
Files and hashes: 1: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: cXyiw3f00XMaX9EIj49jBLCwW0n/gKKe9VCBN4qmTLI=)
2: vRnuRcOcTR4IlPBpAANvMD2tP4Q.roa (hash: NFKmQ01DaLYF5z1+sTJFGIZl8qsux87G1ZSp/QZjt6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:0e:68:a3:a1:0d:50:41:68:d4:28:d6:e3:50:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Apr 19 05:01:00 2026 GMT
Not After : Apr 20 05:01:00 2026 GMT
Subject: CN=4666edcc3a045ae037ad4747580050966d946d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:a9:90:f1:f7:2e:23:01:f2:ff:c8:a1:90:
cd:4c:f3:66:28:0f:19:a5:a0:79:ef:98:dc:69:a5:
c8:45:17:72:45:25:38:06:c7:db:dc:7e:7b:01:73:
3e:11:b7:fb:db:09:45:2f:1d:22:2c:98:a4:79:7f:
bb:53:71:6b:11:06:59:b2:9e:c6:6e:b2:ae:cb:fc:
41:e4:6f:5f:44:82:31:2f:5b:25:d0:59:25:5b:8d:
fe:d3:68:1d:c4:ac:3a:68:ec:2e:89:01:e6:d0:6b:
a1:c6:a4:9f:00:8f:42:a0:d7:d1:d1:1a:4f:07:c9:
74:51:83:32:0a:eb:32:98:e7:6c:3b:86:5f:3e:42:
68:83:74:96:42:24:ff:24:11:20:88:0a:34:a3:5f:
ca:24:5c:ea:57:78:64:55:a4:b1:70:b8:dc:79:41:
f2:04:6b:ab:7c:76:6e:0a:ff:92:fd:68:d8:2e:34:
a1:bd:13:bc:0e:5a:6f:e5:14:93:4b:0b:bf:08:71:
a4:3e:9b:8b:cf:a1:36:02:70:79:a0:4b:8c:56:9a:
ba:63:b7:c6:8b:a8:1f:84:3c:a6:a0:e4:0f:cc:b0:
08:01:14:c7:52:9d:a8:6f:ec:7f:a1:78:f5:8b:0b:
cb:32:ca:89:7f:35:38:5d:89:f4:56:ba:61:b7:cd:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:66:ED:CC:3A:04:5A:E0:37:AD:47:47:58:00:50:96:6D:94:6D:15
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:36:47:93:6a:e2:77:d4:76:57:d1:77:5c:1c:ed:e0:c0:64:
dd:da:82:4d:bc:74:d7:76:b1:9b:a4:87:be:af:97:58:9e:57:
dd:6d:a9:b6:05:ae:5f:47:5b:f9:ce:fc:fc:5a:9f:21:8a:8f:
22:05:52:f7:05:a8:8f:6a:19:bd:a9:95:8f:28:a1:98:f0:e4:
d0:72:22:50:1d:33:b4:ad:90:a2:ca:4e:59:7d:dd:cf:8e:87:
13:ba:d4:f1:56:d1:c4:64:cf:94:8e:54:c0:96:fc:c5:89:1b:
bc:ff:b3:03:42:d6:d0:4f:5c:89:b2:eb:46:c7:68:9f:0a:d2:
04:77:2b:3c:da:8e:6a:5f:a7:dd:20:6b:9a:f4:ca:7a:bf:10:
7a:e8:d4:ec:9f:84:54:86:d9:6d:46:e1:2d:13:0c:77:6e:a9:
78:93:4e:5a:55:ad:bb:4a:9a:bb:61:9a:79:c2:60:7b:86:e9:
65:97:9a:6d:38:ae:e0:37:28:fe:93:a2:e1:16:69:40:d5:0a:
30:f0:1a:e4:ad:4d:29:bb:80:f7:04:9c:d3:35:7e:b8:0b:d5:
12:a6:7b:cb:53:e8:43:c0:ae:01:aa:c5:ee:92:9e:8d:01:3e:
e3:f3:3c:c9:bf:b9:16:a3:ba:f9:08:9c:4a:2f:9f:b0:cd:e3:
d2:f3:88:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:35 2026 by rpki-client