Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: xfuhiks9Z5FhofzsvZk+rmqNV2iyrYnkUMDvbPyCbRc=
Subject key identifier: DE:AC:1F:EA:7B:43:FB:59:70:12:17:EF:3B:78:28:FC:2E:B6:8A:B1
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019D99626BEEB3597195CCA43E47EC12C11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 03:00:57 +0000
Manifest this update: Fri 17 Apr 2026 03:00:57 +0000
Manifest next update: Sat 18 Apr 2026 03:00:57 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: oq6I0vbNmbkwmc8GJ+jfOt/zo0UNYHFcVUcVCkJqdLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:6b:ee:b3:59:71:95:cc:a4:3e:47:ec:12:c1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Apr 17 03:00:57 2026 GMT
Not After : Apr 18 03:00:57 2026 GMT
Subject: CN=deac1fea7b43fb59701217ef3b7828fc2eb68ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:46:8c:26:cb:e2:cb:91:db:b5:e5:9f:a2:
b8:27:56:ff:6e:a8:46:f8:f1:37:76:1b:7b:38:9b:
9b:81:68:35:7c:e1:b2:7e:a0:ed:f7:02:85:6f:ce:
15:b6:81:0d:c5:39:ed:39:db:80:66:53:e3:61:91:
12:84:b8:de:e6:54:84:d1:df:bf:35:c0:e9:c7:bf:
9a:c7:a3:3e:10:60:a0:04:cf:59:06:e7:9b:41:c1:
7a:02:a1:fa:03:3a:e0:c6:5a:d2:08:74:53:14:d4:
93:ae:97:ea:ad:71:d1:b3:3d:35:cc:a4:f3:4a:94:
60:70:c2:a9:aa:a8:df:24:e2:00:3c:4d:b5:fc:38:
85:4f:91:0e:1d:f7:33:e9:f1:11:26:ce:d8:46:3c:
20:15:52:3d:e2:41:53:0a:75:d6:67:d7:74:5f:15:
6b:54:af:75:23:29:1b:3b:5a:c7:0c:0a:ff:62:d7:
40:08:25:3a:7b:b1:68:99:bd:ff:de:2b:c2:19:1f:
70:27:12:8a:d5:04:6b:46:4c:6c:31:ce:c4:fe:61:
c3:a7:33:e5:a8:58:0d:d1:e6:39:98:22:5d:d2:00:
39:2d:41:4f:32:6d:3e:71:60:27:88:b0:02:f0:bf:
a1:22:fe:e5:3e:b8:75:df:84:ed:19:51:57:b4:e6:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:1F:EA:7B:43:FB:59:70:12:17:EF:3B:78:28:FC:2E:B6:8A:B1
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:04:3f:c2:49:8d:2c:f7:7c:4c:de:c0:4f:85:f4:2c:94:fd:
33:e8:30:3a:f9:a4:98:ba:a4:e6:e7:03:8e:d3:1b:9c:f7:da:
fd:62:04:f6:08:a4:e2:6f:3c:94:a7:50:c6:9f:d2:0d:37:a6:
0e:a8:bd:45:14:36:b8:2c:83:6e:c7:1d:5a:5d:8d:7e:1e:85:
1c:49:31:51:3f:e6:3d:42:13:cb:f6:86:59:92:7a:9c:e1:10:
6c:39:e4:9c:45:25:90:34:ea:68:04:f5:85:9e:45:de:86:e0:
0a:7e:56:b6:35:cf:0a:ec:91:57:7c:48:26:e9:63:32:8a:9f:
55:5e:81:e4:b6:30:54:79:13:5b:1e:9e:26:e7:29:e8:f2:e9:
62:48:f3:32:99:41:8c:cf:f4:43:04:32:38:90:f6:a3:0f:94:
4f:73:73:48:56:5d:f2:bb:00:3d:36:40:71:2c:41:c1:03:05:
6b:44:90:5f:68:34:47:87:52:ba:92:5b:93:f5:89:b9:41:29:
5a:72:5c:d9:82:72:38:a6:9d:0e:44:a2:ca:6d:48:a2:76:f2:
7d:cc:b9:9d:13:af:d1:4c:e1:84:b4:d1:22:fc:f2:ff:d0:a5:
9a:4a:9a:30:88:4e:69:40:0c:c5:8e:04:40:b6:2c:19:95:7f:
a8:e1:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:10 2026 by rpki-client