Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: p8kGjjJlV2hGWHhclZziQVDPpH+YK6YOVw2UaKz+iTo=
Subject key identifier: 9E:A0:C7:D8:42:53:71:52:64:E0:6C:DE:63:87:DF:96:90:BE:C8:68
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 019D9BBECA04B0251602F77A0DBA08F9B4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 0217
Signing time: Fri 17 Apr 2026 14:01:05 +0000
Manifest this update: Fri 17 Apr 2026 14:01:05 +0000
Manifest next update: Sat 18 Apr 2026 14:01:05 +0000
Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: Dy4hCI3YLxPAgB+kfzhVAvw87jUtFcNcJ+KAQeEYxzs=)
3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ca:04:b0:25:16:02:f7:7a:0d:ba:08:f9:b4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Apr 17 14:01:05 2026 GMT
Not After : Apr 18 14:01:05 2026 GMT
Subject: CN=9ea0c7d84253715264e06cde6387df9690bec868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:fc:13:c9:88:01:36:fe:f5:05:4f:3e:04:
31:f6:b1:b0:a8:aa:e9:d7:02:b2:52:73:97:f1:94:
74:b2:74:08:35:2b:bc:f4:e0:54:e3:2c:3e:23:8a:
a4:d4:ec:e4:87:96:e9:16:15:8b:13:5c:c4:c1:f8:
7a:93:82:ff:70:1b:0f:8f:47:da:8f:15:a7:2b:c1:
14:af:cd:91:7f:b6:03:2a:d2:4d:bd:09:73:ed:4a:
1f:88:39:94:77:20:b3:3a:fe:2e:92:b4:a6:44:a7:
d0:bf:e7:ae:51:8e:f9:91:81:ce:6a:dd:c5:7a:9e:
84:52:78:7a:36:17:f2:a6:9f:aa:5a:32:fa:75:6d:
f8:e5:11:a8:3c:92:e9:04:18:1a:fd:cd:b1:c3:16:
7d:83:a0:10:ce:bb:ee:68:40:75:28:eb:6e:6d:2f:
7b:3b:1e:6a:ef:49:90:8c:57:af:9f:ce:1c:73:3e:
d8:6c:e5:f1:77:3e:36:18:71:5d:95:fb:3d:db:aa:
e4:32:39:01:7d:00:5c:1d:08:ee:34:c7:a7:fa:73:
15:3d:f7:0f:7a:a1:e7:71:44:12:0f:e1:3b:76:b9:
e7:d6:fd:48:68:7c:f7:1c:7d:97:51:ee:f7:8d:bd:
42:22:e9:15:12:5e:d9:29:a1:8d:bc:26:6d:5d:03:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:C7:D8:42:53:71:52:64:E0:6C:DE:63:87:DF:96:90:BE:C8:68
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:18:96:d4:53:e6:db:77:7c:fc:51:1b:6a:6d:e9:38:eb:11:
48:22:0a:45:7c:78:66:2c:e9:1f:a0:f2:45:57:5c:38:10:49:
4a:28:b3:ff:38:04:e8:21:12:ac:4d:ef:81:e2:83:cc:1d:00:
6c:ea:bf:0b:9f:f1:ff:0e:41:72:aa:59:5d:19:40:76:83:f1:
68:b2:17:35:11:d4:3d:45:3e:4e:dd:14:13:bb:2b:b5:1a:d5:
5d:ac:c3:e3:9b:32:9a:83:15:1e:0c:51:6f:02:50:80:ee:c8:
b9:bd:f9:ac:d8:53:94:9c:4c:2f:8a:80:2c:7a:fa:86:2d:23:
bc:44:b6:43:c7:78:0f:aa:a7:0d:e7:bc:36:c3:22:9f:6b:0f:
fc:91:77:2f:bb:de:bc:37:6e:e5:d8:87:23:77:87:d1:d4:a1:
35:35:94:c5:ba:c3:79:99:31:91:a4:75:ce:b9:87:76:2b:28:
c8:60:2e:8a:0d:b7:c1:4d:32:e4:3a:c7:f1:18:c4:65:7e:e2:
4f:10:de:fa:20:c8:43:d5:0d:8e:30:7c:d5:fb:cc:5d:73:e0:
2e:8e:fc:85:d5:cb:98:90:23:f8:26:1e:e2:34:80:07:cc:5b:
84:7b:4b:bc:cf:41:1b:44:48:b1:af:2d:db:21:94:1e:8c:b1:
91:19:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:50 2026 by rpki-client