Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: VRyaf8HNjkpQGrFRKFr0OcV79wBlsvqqwjNo7xt19ZA=
Subject key identifier: 5A:F6:5E:E7:EF:39:9F:FD:32:EC:79:65:7C:38:8B:BC:78:0D:82:E5
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 019D99D0EABFD953A363C9F6B44DFEF973D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0CCF
Signing time: Fri 17 Apr 2026 05:01:38 +0000
Manifest this update: Fri 17 Apr 2026 05:01:38 +0000
Manifest next update: Sat 18 Apr 2026 05:01:38 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: ViIaZRKBpBZ+I0ruoT6RBHLiqrfIyAuQgekazPd7Ez8=)
2: y8jTWT9EJ8pkTtgwIGRTqM5h54U.roa (hash: K3I6cMPL0u+o1+6/3zyPMYD1BTrTNGIZvyZgHqN7zYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ea:bf:d9:53:a3:63:c9:f6:b4:4d:fe:f9:73:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Apr 17 05:01:38 2026 GMT
Not After : Apr 18 05:01:38 2026 GMT
Subject: CN=5af65ee7ef399ffd32ec79657c388bbc780d82e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:26:be:0b:56:70:93:ec:29:f9:87:32:4d:
e5:21:6b:cf:93:bf:cf:d1:40:43:7e:fa:84:bc:8d:
c3:21:b3:20:b1:4a:c2:05:44:7b:9b:73:8d:1d:5f:
a5:be:d7:ba:31:6c:6c:ec:9d:d7:eb:72:d3:5d:e4:
ef:d7:bf:15:43:2e:2b:e9:1a:eb:3c:e3:0b:ce:65:
b9:e7:f3:66:31:f8:d7:24:e6:e8:bd:4c:9f:12:67:
e9:0a:57:ba:05:12:f7:ed:03:f1:9f:03:5f:f3:ed:
35:2d:9d:15:bf:91:dd:fb:b6:04:53:f7:b4:0e:a9:
63:a8:1f:2a:3f:c8:98:ad:ba:c7:74:16:d8:46:54:
68:8e:5d:3e:e8:85:0f:11:38:f9:38:ca:38:31:83:
88:b0:a4:2b:a3:58:84:bb:cc:47:25:75:88:d4:8a:
40:f1:1d:91:b3:c6:5a:c5:23:6a:e0:44:ed:45:b6:
f0:8f:ce:b0:1f:0d:f5:a7:d1:55:68:e5:c9:5c:79:
b2:fa:5e:a1:b2:43:b5:d7:87:eb:ea:cb:6b:0f:f2:
4a:85:0b:62:d1:49:b8:ea:5e:2a:1b:1f:26:4e:6a:
21:11:85:e0:b5:14:1f:98:ce:54:3a:b0:97:4c:84:
d3:ce:8c:7e:8d:bd:a3:57:9d:66:5b:5b:8d:6f:bd:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:5E:E7:EF:39:9F:FD:32:EC:79:65:7C:38:8B:BC:78:0D:82:E5
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:66:00:40:ed:34:6f:8a:14:9a:13:21:8a:b5:8d:aa:5d:8d:
cd:be:7e:c8:66:a6:ed:8b:ce:79:a3:a8:a0:49:bf:1f:9f:8d:
37:bd:0a:fa:88:c5:aa:3d:7a:d0:e4:6f:83:dc:f9:93:ef:d3:
af:90:d2:97:9c:08:14:c2:2b:6f:45:aa:e7:d7:6b:68:7b:3f:
9d:9f:f7:ca:bf:83:ea:a5:59:c4:1e:a0:fe:63:1e:58:a3:99:
90:5c:a8:1d:7f:06:a1:16:82:97:d8:a9:53:3f:ae:4e:e2:9d:
a6:b3:5d:16:7f:26:e6:43:b5:ab:dd:74:0b:d7:40:84:6e:8c:
10:33:66:86:41:bd:ed:e8:ec:f0:de:61:e3:cd:8d:ce:6b:7d:
e0:98:bb:47:f9:7a:3e:4a:e3:3e:55:9e:fa:9c:a9:d3:e8:d0:
50:28:80:85:08:e3:78:e6:52:72:9c:de:31:11:41:84:96:cf:
bc:29:b3:2a:aa:82:7a:36:a4:05:b0:97:61:76:fe:fb:a1:ac:
27:96:a3:4d:9d:6a:60:dc:e7:e6:9a:6b:6c:0f:5c:f6:00:c7:
27:f2:10:f6:64:89:d4:4f:6f:26:50:fb:07:7d:f0:7b:08:e0:
07:7a:a0:83:09:da:48:e5:7b:ca:88:90:37:3e:e4:df:9b:67:
e8:c5:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:47 2026 by rpki-client