Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier: rVlkcXRJXnjyrN+7snJjWe5NgCdo+3KdWmIbP4PRp2A=
Subject key identifier: 47:4B:E3:3F:F9:4C:CB:FB:21:34:E2:37:27:0A:21:E2:DC:5A:C3:B3
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial: 019D992B5BF6EC104CB9A6BC7FCBD4D1EC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:48 +0000
Manifest this update: Fri 17 Apr 2026 02:00:48 +0000
Manifest next update: Sat 18 Apr 2026 02:00:48 +0000
Files and hashes: 1: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: 4AtBqhg3adv1J/EBJ9YAto2fdgrkTrHgIR0EdH5IMKU=)
2: ypwxETyZdloPXHbGn8CEus0D4c4.roa (hash: 7QyOW+9NQ3XhqMdU+D9M2fSGw2Trjpkp8kr5Lbld/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:5b:f6:ec:10:4c:b9:a6:bc:7f:cb:d4:d1:ec:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
Validity
Not Before: Apr 17 02:00:48 2026 GMT
Not After : Apr 18 02:00:48 2026 GMT
Subject: CN=474be33ff94ccbfb2134e237270a21e2dc5ac3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:c3:00:b6:c5:59:6e:30:61:68:54:37:ac:
e0:f1:92:09:bd:18:6a:25:08:0b:05:66:b8:6d:2e:
10:db:c7:fb:12:3c:5c:d1:78:62:60:61:94:d8:20:
b8:d2:8b:ea:64:29:cc:01:0f:36:fc:00:2c:2a:ce:
82:f9:8b:c7:a1:2f:ad:ab:33:a6:55:fa:bb:59:ef:
95:97:d1:c5:c7:cf:fc:52:c7:99:6e:5b:b4:b7:80:
be:d6:8f:ad:c4:30:8e:0f:74:ba:c8:c6:aa:5b:f7:
20:67:46:5d:23:62:5a:b6:c2:cc:5e:11:e5:fc:10:
c5:3a:fe:32:86:28:14:6f:d9:6d:d4:a1:9c:8d:f3:
f4:99:95:97:2a:4b:42:7b:3c:aa:bf:e1:95:50:d4:
94:cc:26:5a:48:d1:53:e6:f8:82:83:c6:89:7c:17:
d3:13:c5:16:0c:f0:b5:d7:fe:a3:51:b9:33:28:8f:
1f:ab:34:53:5c:30:7a:b5:c1:e5:29:d5:0a:22:4a:
ef:f3:2d:1c:e0:26:bd:15:35:76:65:7f:6f:2a:6e:
4c:38:75:25:db:23:9f:a0:7b:4e:33:c5:14:f2:3a:
b0:b4:c0:08:28:c3:ef:ff:ef:09:9b:53:e7:ae:55:
1c:75:52:2c:05:ed:04:93:d7:15:42:b5:ac:00:ab:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4B:E3:3F:F9:4C:CB:FB:21:34:E2:37:27:0A:21:E2:DC:5A:C3:B3
X509v3 Authority Key Identifier:
keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bd:90:17:79:e0:d5:ae:38:62:38:0f:8b:92:a9:43:6b:7a:
66:8a:ba:46:03:55:43:5b:96:a2:49:26:83:e5:09:d9:5d:19:
df:d0:cd:83:47:3c:3b:0f:15:9f:f4:58:a7:c0:60:23:69:90:
ac:fc:99:5f:77:36:56:33:b6:0a:81:2e:d0:46:20:88:53:f8:
71:bf:38:75:b4:03:da:86:59:0b:8e:16:0c:fc:ce:34:62:e8:
7f:2f:b2:d1:55:6c:23:74:ae:95:37:fa:0e:03:e1:a8:08:47:
b6:ce:33:fb:76:a9:90:12:58:11:bb:4c:9b:c4:3e:8a:ae:a8:
ef:fb:b7:3a:0d:35:91:75:ff:b7:a5:ba:4e:3a:88:58:59:45:
e8:05:52:fb:bd:d5:c3:92:48:c9:9a:bb:2e:c5:9a:c7:6c:05:
a9:8f:53:14:12:6c:ec:f5:f9:ab:b4:c4:f4:1f:bf:fa:72:a2:
35:04:73:5e:90:e4:49:75:17:2b:7a:ca:73:a5:1f:20:3f:d9:
b7:37:5b:46:20:d9:91:51:b6:ca:2e:64:9d:2e:ab:f6:e9:20:
ec:b5:5e:30:54:d1:3b:23:24:15:4f:72:b5:09:ce:66:81:be:
af:bf:e9:70:69:5e:36:31:2a:30:9f:84:7c:01:9a:1c:61:c4:
d9:60:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:21 2026 by rpki-client