Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: JyGg10kgD7NC/oDhVPuPIVUmlJNqWNe06LciOeIsbYs=
Subject key identifier: C2:ED:05:04:18:59:F6:C6:9B:23:D6:47:1C:C7:28:6F:77:1D:7C:D9
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019D9AABE500382661786EED7BEAE44D98F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 189B
Signing time: Fri 17 Apr 2026 09:00:49 +0000
Manifest this update: Fri 17 Apr 2026 09:00:49 +0000
Manifest next update: Sat 18 Apr 2026 09:00:49 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: K3e3sbU4r+4uhGWasQjjhDD5x7aUWw2PApJ6EHCvg4Q=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e5:00:38:26:61:78:6e:ed:7b:ea:e4:4d:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Apr 17 09:00:49 2026 GMT
Not After : Apr 18 09:00:49 2026 GMT
Subject: CN=c2ed05041859f6c69b23d6471cc7286f771d7cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:3b:34:64:85:c1:fb:43:cd:5d:54:db:a5:
a0:20:49:35:c9:cc:38:72:72:ea:49:2d:56:20:a8:
e5:b9:ef:ed:b2:b2:6e:fe:1f:f2:7b:80:31:2c:ba:
1e:0c:a9:62:78:19:de:e1:1e:6a:9d:1f:9f:b0:97:
a4:70:d1:73:f5:75:f3:8a:7b:24:1a:00:bf:fe:d9:
71:6d:70:c7:04:14:16:80:5f:b8:8e:75:a6:2e:d2:
78:55:0b:0b:b4:d9:7e:43:a0:ce:9b:72:0d:8d:d2:
2e:5e:13:a4:f6:41:ce:4b:a2:21:40:e4:ba:2c:f0:
4c:85:37:97:dd:cd:9d:b2:59:44:4e:6f:3d:b7:fa:
68:e1:f0:24:7e:00:12:28:c5:36:1d:bb:6e:16:cd:
e7:94:1c:63:0c:5f:c4:16:e7:74:5b:ba:b8:c4:43:
30:75:c1:32:bb:87:9c:cc:7f:ad:41:85:7c:21:10:
f0:4f:3e:5a:cf:9f:f6:a7:80:85:1b:35:bc:76:fb:
99:2d:f1:c2:63:cf:86:cb:51:cd:09:24:a8:80:75:
c1:a5:03:2e:59:14:8b:af:7f:3e:3f:f7:3d:09:bb:
96:21:a3:0c:c0:53:5b:22:5b:82:8e:07:b9:ac:e7:
18:f8:07:7f:b8:4d:bd:d7:fc:ec:bc:e9:ce:e2:bc:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:ED:05:04:18:59:F6:C6:9B:23:D6:47:1C:C7:28:6F:77:1D:7C:D9
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8a:f9:c7:01:93:38:81:5c:b3:23:dd:20:50:ad:d0:41:bf:
68:66:c7:59:10:a6:21:1e:a6:12:75:e5:0d:c3:a9:d3:ee:1e:
92:e5:e7:8a:7e:aa:ad:3f:c6:37:92:e2:2c:db:0a:29:7c:ea:
cc:af:08:67:89:db:dc:f8:af:82:31:fb:7b:1a:6a:9d:60:8e:
62:78:4b:ac:ac:ed:68:76:8c:38:60:f0:be:66:3c:c1:86:c0:
cf:fb:e9:26:78:d4:2a:0f:a8:a4:9f:46:7c:45:61:4b:6d:40:
e2:55:0c:46:38:87:ef:38:49:f3:8c:7d:5b:24:af:21:b3:26:
77:e3:aa:a2:67:6c:cf:d3:47:97:86:4e:f1:ba:f7:29:ab:a6:
15:7f:08:26:9f:e5:6a:5f:6e:42:e6:6e:16:0b:26:58:c6:a8:
f2:1f:45:16:4f:17:fe:63:bc:9d:48:f8:b9:78:12:90:69:48:
36:7e:b3:85:82:2e:fa:1a:c0:06:43:ec:6e:b1:85:fc:09:d3:
0c:b8:19:b0:45:83:ca:c7:5b:2b:35:5e:ac:12:a6:dc:bc:eb:
25:05:6c:71:d8:f0:3c:f5:90:1b:14:bc:6c:47:55:4a:cd:ae:
11:47:07:a1:f8:7c:38:8e:bb:fe:0e:75:e2:97:98:4c:7a:20:
ff:28:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:16 2026 by rpki-client