Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: FkLLMRV8n10YLONLzcH90bKVwyNZO0+/1Hwid/dPG9s=
Subject key identifier: 2A:C6:6F:55:B7:9F:68:41:D3:A5:BE:57:AE:52:97:1A:CE:4E:66:26
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 019D9BF55823800B30AAD438A146FA599028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 1605
Signing time: Fri 17 Apr 2026 15:00:40 +0000
Manifest this update: Fri 17 Apr 2026 15:00:40 +0000
Manifest next update: Sat 18 Apr 2026 15:00:40 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: E11+WQ3tHFSrWDNZpz0NzuA6aS2ZCl6rQ+rDe9c9thc=)
2: tI5Q_pHNppa9IygLbs0z0gxs4tQ.roa (hash: 42laiJa6YC1H/CwPJuianhlbqJN55nJRIX5XgJoyuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:58:23:80:0b:30:aa:d4:38:a1:46:fa:59:90:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Apr 17 15:00:40 2026 GMT
Not After : Apr 18 15:00:40 2026 GMT
Subject: CN=2ac66f55b79f6841d3a5be57ae52971ace4e6626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:39:a9:4e:04:1a:7f:d3:98:9a:1b:bb:3d:41:
af:b9:6a:3d:2d:17:ed:a4:7a:4b:7a:8b:3d:57:c3:
93:b5:43:e3:21:26:d4:30:fb:56:65:2d:ca:58:93:
e1:bf:bd:98:84:d3:82:a7:e0:55:93:e1:a0:a1:76:
64:3f:58:1b:17:e0:a5:72:c1:fc:59:c6:15:a3:ec:
f0:db:0d:fa:45:6b:fe:b1:3f:06:37:e3:b1:95:86:
35:a9:39:73:80:55:8e:13:95:77:b3:59:dd:7b:ef:
01:d8:38:2b:ae:0f:64:eb:62:7e:56:0c:e2:49:53:
e8:e8:8b:b4:e8:b2:c9:69:e9:72:79:3e:64:92:83:
4d:b7:07:ac:ff:d5:fe:0b:5c:2c:80:f7:f4:60:b5:
ce:4f:27:7f:fc:47:77:6a:80:8f:ce:dd:76:04:d6:
ad:38:64:7d:1b:c9:48:bf:87:78:b2:d0:f3:0b:fb:
10:af:f7:c4:a6:35:ed:39:75:13:0b:c7:4b:8f:4f:
c0:d8:4c:90:12:75:75:28:99:c5:27:c2:0e:6b:e9:
a4:74:cc:0a:5b:0c:03:c9:4f:7d:48:6e:91:17:30:
8a:a0:ce:54:78:b8:0c:4a:ed:de:50:2b:50:8e:6d:
87:c3:c6:f4:fc:68:73:50:43:b9:e0:d2:24:c2:b3:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C6:6F:55:B7:9F:68:41:D3:A5:BE:57:AE:52:97:1A:CE:4E:66:26
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d2:6f:0f:44:06:5d:37:4c:0a:fa:c7:d8:f2:fa:81:cc:b8:
f6:55:55:b2:ee:d8:8e:e6:a7:4e:d9:25:ed:e1:f9:31:07:9d:
9b:cb:fc:82:f9:49:8e:9a:34:39:04:46:d2:2e:e2:85:ff:dc:
0b:d5:63:41:40:e0:37:03:60:93:ea:dc:89:3c:74:4a:87:6d:
32:90:99:ba:22:12:77:3a:57:f6:32:43:d2:66:98:4d:b5:e3:
95:c5:0b:0d:58:4b:c2:92:f9:e2:31:89:6e:0e:56:86:e5:6c:
2e:42:73:c9:cf:8b:40:d1:a3:59:72:8e:61:f6:fa:80:f2:9e:
b5:77:04:07:c7:bb:a5:27:9a:38:8d:ff:f7:2d:6e:94:09:a7:
90:aa:5a:25:fa:20:40:03:36:2d:c9:04:be:f9:b7:d4:2d:5d:
21:64:0f:be:bb:aa:50:a2:7c:38:f7:71:bc:ed:84:09:4c:52:
48:7e:6f:ce:44:b7:3c:7e:d8:a7:bb:d2:5e:a1:95:4a:0d:79:
0c:c1:d7:ef:cb:9b:0f:76:2f:2b:76:8e:d4:8a:b2:b0:1f:b3:
4f:b7:62:0f:73:58:de:f6:ca:2b:e4:fe:22:88:6b:dd:d6:34:
6a:bb:2b:7f:84:a0:cc:56:af:99:ef:dc:31:88:61:84:ca:34:
1f:55:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:55 2026 by rpki-client