Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json)
Hash identifier: Gvlj8Mr/p/NpWAw5amnNkOjCQgPpS0JjR7ILtrxmGN8=
Subject key identifier: 5F:0F:FB:D4:51:4E:72:49:91:E3:F8:FD:66:4F:54:96:0F:C0:86:E2
Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Certificate serial: 019DA3E6D0F9C1E2BC4953E909E2225C16D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
Manifest number: 01AE
Signing time: Sun 19 Apr 2026 04:01:46 +0000
Manifest this update: Sun 19 Apr 2026 04:01:46 +0000
Manifest next update: Mon 20 Apr 2026 04:01:46 +0000
Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: bfPBX6QKBOjAmodUbpvjcfa8LNYC6rUcKnwWapbLBrM=)
2: ym0w1cReqBylheC3xkqexBP3tgU.roa (hash: zFKUp71k5SpR7ghjnbVLoDMDBWhAa4PbF+krqnsksRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:d0:f9:c1:e2:bc:49:53:e9:09:e2:22:5c:16:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Validity
Not Before: Apr 19 04:01:46 2026 GMT
Not After : Apr 20 04:01:46 2026 GMT
Subject: CN=5f0ffbd4514e724991e3f8fd664f54960fc086e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:e8:fa:20:1c:0e:06:6c:a9:dd:0c:04:2a:
2b:7f:37:1f:c4:b2:c7:26:5d:1a:6e:c5:d5:54:68:
dc:0f:14:53:7f:56:7f:6b:19:25:3a:30:6e:5d:f6:
f0:9a:36:7e:ce:dd:65:c7:d0:98:e6:03:68:13:73:
f3:35:47:cb:05:46:d8:5a:da:72:af:6e:b8:27:09:
68:21:46:35:a8:8e:15:99:2d:12:2f:ff:64:07:c7:
c0:53:68:c1:e8:3d:a5:86:6e:c2:ef:93:08:da:b9:
1b:0e:33:48:3e:82:89:a6:40:c5:d2:ac:28:a1:2d:
98:08:59:f8:76:17:ca:74:8e:9c:62:72:bf:9c:36:
b1:cb:b2:26:27:ef:1f:cf:4a:de:83:dd:5a:bd:6a:
3d:85:fa:3b:c4:88:98:90:18:4a:e9:a5:cc:7b:87:
b0:f2:fa:62:c0:cd:8d:02:cb:4c:7b:db:33:ea:00:
11:17:14:43:00:b0:17:01:4d:82:cd:1f:5b:27:82:
2d:22:31:58:ed:bd:a3:db:73:b9:f2:b6:2e:7e:a3:
07:4b:46:c9:aa:3d:dd:9b:83:a8:c4:e6:ea:36:f6:
a0:7b:53:f0:ed:aa:42:dc:4b:20:80:aa:85:b5:e1:
83:ae:a1:e6:7a:61:3c:24:c0:59:cf:0d:ad:f4:25:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:FB:D4:51:4E:72:49:91:E3:F8:FD:66:4F:54:96:0F:C0:86:E2
X509v3 Authority Key Identifier:
keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:30:26:5a:50:29:3e:02:5c:d2:0b:df:e3:2c:e1:c8:91:4d:
77:35:37:0b:e0:9d:66:78:aa:32:b2:e9:1a:85:c2:a0:9a:3f:
88:4f:89:84:2a:16:40:a5:c3:c9:d6:07:67:bc:11:76:a0:9d:
e0:e8:9c:97:8e:99:98:3f:9e:55:4d:7f:ad:f7:20:3d:2e:3c:
d8:d3:66:c2:51:43:90:5c:db:7b:40:93:d2:ac:f4:23:35:94:
be:87:93:6f:df:ee:83:04:1d:5d:38:f7:60:d4:a3:14:dc:63:
d2:6c:a9:f1:0e:ff:3a:dd:3d:fc:27:08:5c:a3:d1:b8:6c:e3:
f3:1b:47:c2:87:0f:ac:46:6c:7e:83:1e:4d:bd:77:70:f5:92:
b6:a7:bb:89:4d:a6:0d:f7:b6:f8:fa:51:04:b5:ff:16:ea:0f:
3d:d8:2a:a9:b3:2f:f8:8c:58:d6:4b:8c:2d:70:10:93:35:d6:
3f:5a:79:34:4c:9d:73:93:46:6c:6d:d5:23:4c:7e:1c:c3:00:
57:c3:c5:c6:e7:61:07:d9:8b:40:a2:95:be:88:97:7c:ab:ad:
7f:f7:97:f7:8c:a9:b8:cc:82:2e:80:81:12:53:d5:03:b7:77:
ac:1d:bb:e8:6c:5c:69:c4:2e:59:45:cb:97:7e:13:12:8a:2b:
35:64:56:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:53:04 2026 by rpki-client