Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
File: qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json)
Hash identifier: GvglcBpUOaRVKg2NgTw8KkTSCibGcB0cfjRKd/bqGwo=
Subject key identifier: 4D:2E:0C:69:EC:F3:5F:8A:E8:DE:78:C0:71:54:DE:6B:44:21:33:49
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial: 019D9AE2C2857D0892D379297DD93029253E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
Manifest number: 0FD4
Signing time: Fri 17 Apr 2026 10:00:45 +0000
Manifest this update: Fri 17 Apr 2026 10:00:45 +0000
Manifest next update: Sat 18 Apr 2026 10:00:45 +0000
Files and hashes: 1: G3s7fFZiJFqITolnCSvINrflYsk.roa (hash: jskO07AkOlpZvjtyrYTNt3+GnH5jKgWqutiH7gmA7J0=)
2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: kE9yXkY5U6EP5kshFSSmyEwJMgeGt2Ijn6RoUoNoSOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:c2:85:7d:08:92:d3:79:29:7d:d9:30:29:25:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
Validity
Not Before: Apr 17 10:00:45 2026 GMT
Not After : Apr 18 10:00:45 2026 GMT
Subject: CN=4d2e0c69ecf35f8ae8de78c07154de6b44213349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:aa:46:5b:d4:d6:2b:ed:78:05:8b:15:12:
13:78:77:29:d1:ba:46:f9:df:bc:4a:2f:06:eb:aa:
e1:7e:8e:56:78:2c:8e:f2:ae:d3:8f:2c:cc:6e:98:
f4:f0:1d:41:bc:bf:bb:6a:a1:32:1d:cd:f4:f9:2b:
b1:cb:76:28:f9:5b:05:a1:8e:ee:da:2d:d8:86:c0:
58:7f:c1:2e:a0:51:7c:20:38:76:5a:b5:a4:55:a6:
6c:3d:02:09:78:4d:69:3b:6d:78:b2:3b:b0:94:0b:
62:66:f5:14:20:60:53:d3:18:67:16:e6:45:fb:bc:
56:ef:13:f3:19:45:58:05:ff:2e:61:00:dd:22:60:
5d:ec:07:60:44:5f:c5:cf:3b:18:3b:4b:bd:88:25:
eb:99:29:08:25:63:b1:4c:6a:c8:3d:9d:16:72:85:
ad:86:d9:81:26:76:42:2f:1d:b6:f5:24:cd:fa:a8:
a7:b7:c0:7e:8c:32:57:06:8e:6c:5c:b3:80:39:95:
f3:91:b2:dc:88:be:55:cc:67:10:bc:03:48:d9:55:
20:76:4e:cd:39:f5:41:17:58:34:20:48:3a:8e:60:
80:15:1a:10:23:5a:95:26:49:e4:50:38:d4:c0:4a:
77:b1:91:29:b6:24:12:e9:bc:18:d1:25:cc:b5:b6:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:0C:69:EC:F3:5F:8A:E8:DE:78:C0:71:54:DE:6B:44:21:33:49
X509v3 Authority Key Identifier:
keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:c4:28:ee:64:38:27:52:c4:fd:25:3f:e6:d6:18:f9:df:ef:
96:74:d4:db:e5:6d:86:8c:11:d0:0c:84:62:c3:60:c5:15:bf:
8f:59:4f:1f:96:6a:11:cf:57:ec:21:a5:a9:29:2a:69:74:6d:
2d:c0:42:c5:4f:ab:d8:2b:3d:dd:04:99:17:fb:e1:6c:d0:1d:
a8:29:ac:fe:78:49:51:dd:a0:dd:a3:24:e5:b5:6a:f4:99:d2:
f2:5e:4a:df:c6:44:32:fe:03:55:57:a5:2c:08:c4:6b:9e:51:
3d:4d:df:02:df:5f:b4:2e:a0:1c:8c:86:5a:d1:27:4d:fe:98:
9e:6b:c1:aa:dc:1e:ab:b2:1c:a2:a7:2b:31:22:96:1d:4f:5d:
ba:f7:a9:b4:ed:a5:8a:a8:5c:f7:ca:88:94:3b:c6:32:f5:8c:
6c:b2:77:5e:ee:c7:65:db:fb:9c:56:bc:34:e8:b2:f9:bd:46:
ed:50:e9:47:8f:93:08:e3:0f:1c:10:03:5f:ca:a4:fc:44:1c:
50:2e:ae:0f:10:81:3b:e4:92:65:16:b0:99:73:25:98:76:c5:
c1:47:b8:13:74:66:fd:84:27:47:00:c9:c1:74:7f:3a:8a:3c:
1a:55:57:c6:a9:d2:12:2a:fc:2e:6d:bf:16:e8:06:c2:51:a5:
43:46:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:19 2026 by rpki-client