Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
File: QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft (raw, json)
Hash identifier: xDVk61ZKdK0C1iQRxLiNN7Da7SL5wpfriKa0dFB+FDk=
Subject key identifier: 36:7A:CB:6F:78:1E:CE:98:34:65:75:0C:2F:C8:87:DF:0E:67:11:F7
Authority key identifier: 40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
Certificate issuer: /CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Certificate serial: 019DA3AE975EDADE26E287983EFC9CB723E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
Manifest number: 1C
Signing time: Sun 19 Apr 2026 03:00:21 +0000
Manifest this update: Sun 19 Apr 2026 03:00:21 +0000
Manifest next update: Mon 20 Apr 2026 03:00:21 +0000
Files and hashes: 1: QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl (hash: DwcQj26Oxtt0Y7YuvNORIt8bCzfLpZmx+rVV89p6vvU=)
2: bc_rDqdFLWG9EqOE3XpdCbzci7A.roa (hash: QX2e7Tpj37ujdBJf37YYj5ilDYHQsrFIORHYzhmx2Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:97:5e:da:de:26:e2:87:98:3e:fc:9c:b7:23:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Validity
Not Before: Apr 19 03:00:21 2026 GMT
Not After : Apr 20 03:00:21 2026 GMT
Subject: CN=367acb6f781ece983465750c2fc887df0e6711f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:86:08:aa:e3:8a:14:30:f0:50:06:05:1d:
de:1b:af:c4:1e:64:89:ed:8a:c2:57:1d:f5:b2:e3:
18:d3:4f:42:de:67:5f:a2:be:5a:92:88:ef:09:e7:
7a:7a:64:5d:e7:5e:cd:f6:fb:64:8d:45:06:41:80:
fe:53:ee:5c:ad:2a:ec:fc:79:66:b1:6f:01:a0:94:
58:0f:a0:60:fe:cb:66:69:d9:38:b5:db:7d:f2:94:
53:be:5e:e1:e5:3b:88:05:dc:26:08:e6:75:fc:76:
94:85:f9:52:92:a6:c5:c7:4a:12:ac:0d:0f:f2:aa:
3e:5d:8f:e7:eb:73:9e:15:22:56:df:82:ae:a6:c2:
8c:51:68:16:20:22:f4:94:3e:9f:23:93:f2:6f:67:
c1:31:c2:f8:6d:e0:8f:28:6c:98:a1:07:9c:77:98:
ae:2a:67:32:f4:ae:18:f8:e2:f3:95:68:ee:61:b9:
fc:82:d7:05:a2:d6:31:11:29:f4:2a:ae:84:97:57:
36:31:ab:e0:87:8f:f2:ac:6b:f3:6c:03:2a:ac:88:
3c:76:84:ff:d0:ff:de:e4:45:31:6b:dc:1b:71:c8:
96:a2:d1:c3:d8:49:b1:c5:c3:1f:c2:76:c4:3a:cf:
66:ec:a9:08:68:3b:fa:48:ff:3b:da:63:d0:e7:42:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7A:CB:6F:78:1E:CE:98:34:65:75:0C:2F:C8:87:DF:0E:67:11:F7
X509v3 Authority Key Identifier:
keyid:40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:88:7b:0d:32:bc:a1:7d:fb:45:df:ac:16:08:1c:34:8d:a9:
da:bc:f6:6f:b2:d9:0d:00:80:3e:e5:16:e3:48:7c:d2:39:13:
97:7b:5c:ee:46:fd:c2:20:a0:62:ac:ae:cf:18:2a:12:a2:91:
d3:1c:5d:76:48:05:0e:61:dc:f1:8d:76:ed:c3:ae:74:82:14:
04:a2:7f:0d:f0:48:2d:49:9a:ea:96:5c:b3:24:1f:90:95:32:
e6:a3:dd:d2:24:79:22:26:c5:75:56:79:ba:2f:1d:2b:df:82:
20:53:f1:f4:cc:70:80:78:48:a0:ca:2a:22:96:ed:f3:67:d1:
ee:de:82:c5:40:62:6f:63:f7:f2:f4:4c:39:25:3a:00:23:b3:
cd:4c:bf:a0:04:b6:ed:84:df:0a:ab:4b:9c:36:4e:95:81:cf:
fc:ea:19:cb:cc:56:97:13:5d:b5:8d:5a:2b:b1:65:2a:c4:6e:
35:3a:70:d8:38:1e:d5:18:4d:94:40:06:ac:92:07:05:02:c9:
95:f5:05:84:5e:1b:1c:68:52:01:d2:ef:05:25:e6:6b:f4:33:
17:b9:69:41:26:03:56:74:1b:13:c5:6d:50:df:93:76:69:d5:
23:6a:34:94:e0:eb:c3:17:5d:c4:e1:d8:24:17:6b:89:32:50:
8c:17:d0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:40 2026 by rpki-client