Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: tlzNPbh94UjtfyOw43KfFENE+J8xhe1QnF7ng4YUvmU=
Subject key identifier: 91:A4:02:EA:A5:F5:53:9E:93:27:4A:55:D5:8C:5B:85:A3:B6:71:FE
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019D9FD277446D0F30C9279BBEE49F1BDC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: B2
Signing time: Sat 18 Apr 2026 09:01:03 +0000
Manifest this update: Sat 18 Apr 2026 09:01:03 +0000
Manifest next update: Sun 19 Apr 2026 09:01:03 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: ypZpYXdO3YumQawGK1QwdG3iDd70dpGQOSjmYSK7taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:d2:77:44:6d:0f:30:c9:27:9b:be:e4:9f:1b:dc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Apr 18 09:01:03 2026 GMT
Not After : Apr 19 09:01:03 2026 GMT
Subject: CN=91a402eaa5f5539e93274a55d58c5b85a3b671fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:05:1b:e2:81:08:4c:6f:94:37:77:8c:4c:
55:87:3f:ee:04:0c:a0:50:9b:02:3c:46:b8:c2:99:
34:13:6f:06:9f:96:a1:f4:e5:21:bd:39:84:46:f3:
b4:82:8c:96:53:de:c4:f8:b0:a9:a8:d7:6b:eb:e1:
9a:d0:92:66:eb:be:b0:c4:cc:70:78:e7:0f:aa:36:
f2:75:56:b3:3e:d8:51:b3:f0:4a:cd:9f:65:63:3e:
d6:41:fd:3f:27:ef:21:d5:7e:1a:54:75:47:f5:1d:
8e:58:b1:b9:fc:99:e0:53:d3:ee:79:20:f7:c1:b5:
5c:be:59:c6:66:1b:37:c6:ab:85:c0:aa:51:f0:1d:
df:42:ca:e2:fe:c6:c6:59:74:2e:de:27:c9:20:f4:
8a:73:6f:10:d3:6f:f9:02:d3:18:4c:e1:a4:38:15:
10:bd:e1:6c:72:a9:eb:a9:46:de:14:e6:b3:50:61:
dd:c5:20:f0:9e:20:e9:5a:0e:bc:0e:fe:4d:5b:45:
1a:fb:46:dd:9a:5d:97:50:77:5f:4f:42:ef:e1:94:
04:f8:de:de:7e:b3:f6:1f:0a:11:ca:3a:46:16:e0:
78:82:6c:a4:f3:d2:3d:ce:e1:b8:d5:21:1b:d7:80:
db:9e:45:9a:29:61:ea:b7:a6:22:ff:a9:7b:7e:cc:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:02:EA:A5:F5:53:9E:93:27:4A:55:D5:8C:5B:85:A3:B6:71:FE
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d8:14:62:32:49:6c:14:30:90:c1:67:41:db:01:45:19:a5:
89:58:8c:fc:ea:bf:01:da:d5:1b:21:4c:bc:f3:9d:83:49:f2:
c0:26:ab:8c:b1:b2:98:d0:4e:d0:f3:75:c5:f2:c6:50:44:2e:
42:a3:ba:b6:7d:13:68:ed:1e:07:cb:ba:a1:d8:86:d4:10:5a:
46:6f:83:ff:f3:f6:6e:da:fb:80:5f:72:0b:0f:b5:33:c4:6a:
89:3d:7b:ae:eb:ed:24:5c:5b:e5:61:34:dc:db:17:4f:d0:eb:
5e:ba:44:1f:3d:b1:22:7e:25:46:7b:e5:4e:4c:85:48:48:6d:
20:82:af:ab:02:03:ed:2b:d9:41:95:ce:6c:34:f4:b5:eb:81:
19:4e:44:b7:8c:47:09:8b:52:d0:14:ff:a1:95:22:c9:5a:40:
b7:e5:9f:1e:af:97:42:7e:be:0f:2e:d0:c4:a5:e4:09:c6:ed:
81:4c:c6:e7:78:4d:27:9a:72:04:97:ea:09:8e:81:f8:2b:6a:
65:44:be:ad:ea:7b:7e:06:37:71:d5:73:3c:d3:f8:b2:3f:aa:
6b:da:54:56:7c:fa:2f:b1:c3:fd:75:7b:1c:3c:66:c2:c4:b7:
f6:3a:ce:63:f4:37:c0:cd:fb:33:9e:63:8c:8d:3e:f3:f5:c7:
61:21:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:37:41 2026 by rpki-client