Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
File: QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft (raw, json)
Hash identifier: o9gPBZWpAfdvpFHvEA4Ud5a2/HIisd76fd6vZGy6fZ8=
Subject key identifier: 4A:EF:8E:41:9E:B3:13:C9:9C:D8:F5:66:A3:E4:1F:22:E3:8D:AE:72
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial: 019D9AAC0A3367E69389A9D69E532A4C4890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
Manifest number: 12F0
Signing time: Fri 17 Apr 2026 09:00:59 +0000
Manifest this update: Fri 17 Apr 2026 09:00:59 +0000
Manifest next update: Sat 18 Apr 2026 09:00:59 +0000
Files and hashes: 1: 2SKAnmNppGmTIZV2xgVXbNnLQZE.roa (hash: 0TEDM1XRgsWS8H5Ci7uA1v4v4wOO9F775kBBURCrd3c=)
2: QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl (hash: 84+ePHwfweYAPzqplvPq/jLCe2Qo+juU0YLvHKQfqvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:0a:33:67:e6:93:89:a9:d6:9e:53:2a:4c:48:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Validity
Not Before: Apr 17 09:00:59 2026 GMT
Not After : Apr 18 09:00:59 2026 GMT
Subject: CN=4aef8e419eb313c99cd8f566a3e41f22e38dae72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:0c:17:00:f2:e4:04:bb:ef:48:4f:46:2b:
69:c1:be:6d:e3:1f:c7:a5:a4:45:9e:63:7a:ed:da:
ce:d7:ad:f6:6d:a7:7f:dc:f0:16:63:a0:09:44:9c:
ea:44:a8:f5:2d:e9:b2:8a:ac:e0:65:e1:ca:77:2f:
ea:60:db:ad:7b:12:0a:b8:8c:c0:da:bb:2e:9a:26:
bb:e4:97:c5:44:6d:f9:e6:5b:5b:f8:ab:e1:cc:46:
66:02:11:f9:b8:ff:72:e5:c2:d8:9d:3c:7b:e7:1a:
fd:4c:d5:7e:9e:27:99:8e:ce:fc:07:bb:21:e1:db:
85:fe:18:6f:05:e7:e2:28:7e:29:fc:c2:b0:6b:19:
0d:a5:bf:e5:b4:91:c3:14:ba:21:b3:94:e1:2d:c7:
a1:c2:c6:1e:e6:68:8b:55:e4:d6:0f:79:42:c8:f2:
2c:a6:a4:4c:a9:09:15:e6:c8:8b:3f:62:1a:07:fe:
a5:6b:35:03:8c:34:0b:15:7a:fc:49:cf:89:47:4c:
6f:0d:4d:bf:fc:d8:e9:47:8f:e7:88:69:a6:17:48:
42:e2:89:4e:98:71:cc:68:a7:1e:8e:94:8a:fd:db:
84:b9:55:35:c5:6d:46:0a:d9:39:87:d6:65:a4:2b:
67:2a:59:2d:b7:b2:f3:5e:f0:1e:9c:f7:a0:61:5f:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EF:8E:41:9E:B3:13:C9:9C:D8:F5:66:A3:E4:1F:22:E3:8D:AE:72
X509v3 Authority Key Identifier:
keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c0:6a:70:98:aa:52:02:02:d6:65:3f:6e:1d:25:10:ef:46:
57:f9:ee:0c:8f:0d:fc:dd:9c:ad:a8:7a:31:7c:cd:e3:bd:e6:
34:38:b2:d1:79:bd:ef:6b:f6:dd:4a:79:54:1e:43:14:44:ee:
80:3a:e5:e6:01:35:8c:64:f6:4e:d1:d2:69:a5:7f:64:cf:29:
6b:e7:8d:ae:6f:ea:40:d6:ed:b4:4c:97:10:82:fb:e4:08:f8:
63:5b:84:9f:a0:00:05:e2:be:62:0f:45:d2:f8:e0:da:00:2f:
1c:78:6c:f3:71:77:7e:3d:fc:d6:30:02:29:44:c7:88:7a:3c:
a5:6f:9a:34:89:c1:73:24:23:ff:87:63:40:9d:29:ce:8e:2e:
9b:6b:b0:e4:04:d8:b9:cf:14:6a:cc:6d:29:9f:0f:9a:0a:83:
61:2b:ca:5d:5d:2c:7b:cb:bb:bb:8b:62:ec:a4:12:9e:3e:b8:
09:44:53:82:fe:b7:16:3a:94:d0:19:4c:bb:41:8b:e7:52:93:
a4:3a:c6:db:5f:06:57:3c:04:69:7a:f9:f2:6c:61:22:f3:64:
61:09:60:07:d7:66:87:70:d0:d1:36:8b:1d:b4:84:25:81:7e:
96:7e:ee:cd:15:06:5f:69:49:6a:fd:40:9d:15:f5:b8:18:c0:
5c:be:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:17 2026 by rpki-client