Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: wvoSgrRwrBXQeTddrN+4f074j8ZpXdKIv8VT3eiX2wQ=
Subject key identifier: CA:5F:0A:9B:79:B8:E5:E3:E3:C8:C7:03:84:5E:94:92:02:B1:5F:A1
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 019D9AE2B533B6AB01894BD815280E55C1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0FAB
Signing time: Fri 17 Apr 2026 10:00:41 +0000
Manifest this update: Fri 17 Apr 2026 10:00:41 +0000
Manifest next update: Sat 18 Apr 2026 10:00:41 +0000
Files and hashes: 1: Np_Aj_nRkhMZ7_NKJQ1GEacRUpA.roa (hash: ejeWv0bVkbD4tbjs10obMgkJkumcVMFWXk26yJzaKVM=)
2: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: jvsZM8QfQsnTV3xqqRgKoerrZdd9W/H+tTP80CXaHBE=)
3: rf6n8rR_IGjgaV0dY9RAe_eoXuQ.roa (hash: h34ncx2/ZVU6/2WFeoHZWwK1+eEDb80qBYHdb3kT8TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:b5:33:b6:ab:01:89:4b:d8:15:28:0e:55:c1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Apr 17 10:00:41 2026 GMT
Not After : Apr 18 10:00:41 2026 GMT
Subject: CN=ca5f0a9b79b8e5e3e3c8c703845e949202b15fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:21:77:a2:5e:fb:3f:72:cc:26:6c:b9:43:
23:94:3c:cf:07:ec:4e:da:3c:1f:bc:5e:d1:1d:b9:
9d:af:e1:14:af:7e:da:3b:31:87:5a:73:7a:03:36:
9f:0a:9d:4e:17:39:d5:80:98:07:95:53:a8:6c:62:
87:3c:ed:dc:87:39:57:cd:94:59:a0:ab:27:de:0f:
fb:4b:de:96:39:9d:e5:dd:f4:95:a0:60:79:af:7c:
d1:9a:6a:8d:e0:16:dd:9a:66:37:37:17:60:9f:9f:
87:ac:ad:52:ec:00:07:08:f0:2f:ca:a7:29:ae:41:
12:85:0f:b1:c9:b9:c4:dc:b9:ea:70:8b:3a:e8:b7:
34:8e:ae:ef:05:2a:11:1f:d0:01:5c:5d:35:07:22:
94:d8:1c:fb:1c:4b:6d:d5:10:d9:7c:26:47:af:f1:
9e:ca:82:b5:d9:39:73:23:5f:2b:d2:6e:1e:56:76:
5e:2f:ac:73:46:27:46:1b:6e:02:69:dc:db:53:16:
31:83:e5:25:39:15:45:f5:d8:5c:9e:ef:b3:b0:73:
2d:9b:cd:8d:97:21:7a:f2:00:eb:50:29:88:5d:91:
55:0f:20:f6:a5:da:63:cd:ce:03:c9:01:a3:6c:26:
23:39:86:05:d2:33:e1:b8:71:01:c5:fe:a1:3f:99:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:0A:9B:79:B8:E5:E3:E3:C8:C7:03:84:5E:94:92:02:B1:5F:A1
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bd:e2:12:88:54:1e:dc:c2:5b:c8:41:f2:b0:21:c3:c2:00:
98:f7:64:a1:0a:56:0e:06:7c:c0:4a:a6:10:32:6d:81:49:fc:
52:94:10:9b:c2:55:6d:49:4d:30:93:f0:75:28:e8:32:3d:a5:
63:2e:47:35:ee:34:f3:2b:b8:4c:bb:77:7c:c4:de:38:a8:ed:
06:f3:3f:1d:0b:64:f9:44:60:63:4d:af:49:c4:35:b7:a7:3a:
61:a4:5d:d6:d6:b1:c5:98:5a:a1:c3:66:72:ad:80:e6:58:48:
fa:38:e2:9e:04:a4:6c:30:00:06:dc:94:d3:4e:e1:54:f4:f5:
c6:b7:9c:cb:e1:83:df:b2:a7:4e:f7:b6:cb:16:59:78:75:31:
a6:5b:fe:2c:c8:90:1d:7f:71:d2:e6:3b:34:9e:78:34:2b:28:
d2:97:d6:dc:5c:9c:0f:be:00:a3:f9:fd:9a:57:84:1f:c8:97:
aa:56:5a:1b:cc:d4:6d:14:b5:9e:cf:b2:86:fe:06:37:6d:ba:
2e:f2:a6:ed:40:36:08:94:6c:a6:4c:0b:36:e3:db:ef:44:12:
5c:03:07:f7:76:18:db:3d:65:2e:be:73:44:43:03:75:23:b2:
37:60:bb:e7:80:57:2c:b2:5b:06:c2:7e:1f:9f:78:27:80:4b:
3e:f0:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:23 2026 by rpki-client