Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: QRjnmRpBjB4uw0o4WKDft/STzcfUjR0buA+YrERiA7k=
Subject key identifier: 5F:A6:7B:8F:3C:BB:FD:C9:7B:8E:39:7E:D0:AB:DA:73:EC:1E:AB:62
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019D99D0B99B4D6F125272221A1EA9932D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 15B7
Signing time: Fri 17 Apr 2026 05:01:25 +0000
Manifest this update: Fri 17 Apr 2026 05:01:25 +0000
Manifest next update: Sat 18 Apr 2026 05:01:25 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: slgsnWMFU76T2Hb3bj+fz77oXK5fdOnu0/+5hHUR1bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b9:9b:4d:6f:12:52:72:22:1a:1e:a9:93:2d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Apr 17 05:01:25 2026 GMT
Not After : Apr 18 05:01:25 2026 GMT
Subject: CN=5fa67b8f3cbbfdc97b8e397ed0abda73ec1eab62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:ba:fe:8d:d3:d0:b8:68:d4:58:c8:38:ad:
64:92:4f:9a:b4:f9:72:cf:69:27:70:91:c0:57:39:
36:30:9d:16:e1:ce:3e:1f:ca:34:b8:21:3d:a5:d1:
0c:5d:6d:0e:10:81:66:7f:e1:d1:4d:54:92:52:0b:
90:c0:66:a8:b2:8f:28:ce:6d:56:89:cb:2a:c0:0c:
42:93:c5:a9:e3:7e:63:45:24:b1:2c:38:d4:7c:1c:
f6:37:c5:05:06:a1:6b:24:9e:0d:55:02:f8:0a:92:
d2:f4:a2:55:81:d9:2d:d8:60:b0:22:e0:a0:3b:85:
89:08:67:47:55:0b:3c:56:09:19:47:d4:d1:f7:33:
3d:27:fa:85:9c:6a:87:73:bf:3b:66:de:35:b7:b8:
7a:e7:57:3f:60:21:eb:15:47:82:2f:3f:ea:4d:54:
fc:13:f0:db:c3:72:00:88:25:64:de:47:d4:27:e7:
32:a2:17:f5:ac:30:73:c9:86:07:89:c7:65:9b:aa:
38:2c:92:aa:1f:ea:44:40:61:8c:d6:2b:3d:de:3c:
0a:c6:ed:32:c4:9b:c2:08:05:4f:4f:84:cb:57:7a:
e8:4d:d0:1d:84:8a:87:2b:e0:92:15:c7:0d:0a:14:
e9:9b:4f:30:bb:2c:b8:39:b9:29:09:10:bb:ec:bb:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:7B:8F:3C:BB:FD:C9:7B:8E:39:7E:D0:AB:DA:73:EC:1E:AB:62
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:ec:f7:4f:a7:ad:d6:d5:f3:ce:d0:a5:d6:69:cc:dc:ff:
41:44:00:b2:34:b3:34:6b:ee:6e:a7:35:9a:d9:ae:31:9f:57:
5e:92:5d:04:70:cc:17:bb:19:4b:ec:57:63:63:14:98:f8:ab:
f0:89:0c:fe:f5:74:48:b2:b7:71:e0:ba:5f:1b:ff:8a:46:62:
1b:23:fd:82:fb:b4:fd:38:a0:9b:d9:5a:be:e9:a3:f5:1f:74:
ab:8b:54:c9:c5:73:8a:78:4d:02:41:ea:9a:8b:89:28:10:27:
0b:0a:f0:90:a8:47:bf:6a:f9:76:e2:5c:3d:88:30:13:01:4f:
d4:1f:d6:6b:e8:30:87:ec:db:05:49:b5:10:06:5e:47:74:21:
0f:e6:29:54:e6:84:66:ae:25:e4:84:29:65:1f:90:bc:45:67:
19:4b:51:1c:ec:cc:29:69:fc:47:e4:ab:24:9a:79:14:53:93:
21:c7:a1:92:ce:29:04:b9:51:b8:6f:5b:8d:a5:44:c9:53:2b:
fa:38:d2:b0:25:8e:d9:5d:9e:93:75:e8:50:ee:5b:d4:ae:15:
c7:c0:01:3a:4a:bd:08:d2:1e:9f:1d:4a:45:99:36:47:d8:b9:
0b:48:9f:ac:f8:78:00:f9:a4:b8:4e:25:60:ef:ae:a5:ed:5c:
fd:2e:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:37 2026 by rpki-client