Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: weLIYeyfj2hQnt3k8EKeQSrUv/UMAEokJtJHYt2xYO0=
Subject key identifier: 3F:4E:D3:F0:53:56:A7:48:50:DD:9E:CE:CF:16:A6:71:3E:B9:3C:4F
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019D9998D61ED9F58FDB5F8F1DEC057CEAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 05B6
Signing time: Fri 17 Apr 2026 04:00:23 +0000
Manifest this update: Fri 17 Apr 2026 04:00:23 +0000
Manifest next update: Sat 18 Apr 2026 04:00:23 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: FRusadGqShBxkpoL2paCp-tYl9I.roa (hash: u0M4J6xRL9yocHk0JRl+kCiGzN5rm3Nwf2AuG18JDLc=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: saVZY2tu5EjDMdn/ounv+vFobckdJfaSQ+YekF1RKsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d6:1e:d9:f5:8f:db:5f:8f:1d:ec:05:7c:ea:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Apr 17 04:00:23 2026 GMT
Not After : Apr 18 04:00:23 2026 GMT
Subject: CN=3f4ed3f05356a74850dd9ececf16a6713eb93c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:0b:7c:41:9c:37:16:0a:4e:d2:e8:de:8c:
01:92:de:16:b5:f0:69:7b:b3:97:d5:3c:14:77:03:
58:3a:5b:99:84:ed:4b:38:ff:63:32:9c:41:3b:ae:
cc:1b:28:0c:71:f0:0c:fd:32:2b:70:f5:88:cd:95:
8b:65:de:1e:99:d7:fa:3d:ff:df:d0:7c:0e:f9:a3:
ef:d4:5b:fc:a8:18:6b:0e:60:67:dd:9b:85:96:fd:
a1:75:0c:fd:52:c5:b5:7a:86:0e:62:82:ac:b5:e0:
3b:af:1d:bd:71:45:cc:02:75:29:ea:22:66:8b:35:
b4:e3:0e:d5:59:7d:83:cf:2a:fa:ca:a5:90:a2:5f:
4d:ca:a9:a6:9a:48:03:ac:3d:ca:ce:a7:0f:7b:cd:
d7:f3:cb:6f:dd:ac:97:3e:25:0f:c6:b6:7f:ff:a9:
ea:8c:1c:d6:7f:0c:e8:52:18:25:a4:32:cd:a6:97:
05:2b:1a:7b:66:6e:15:e9:6e:50:e4:f6:ed:b8:f9:
65:40:40:e7:95:cf:eb:88:72:09:e0:83:53:2d:54:
96:60:14:92:c6:a0:ec:6e:49:0a:ea:ea:ce:f5:6c:
0d:fb:41:b6:72:2b:42:fd:81:d9:dd:f6:7a:30:e2:
2f:9b:e6:18:38:df:ba:b6:df:89:98:53:f7:cc:8d:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4E:D3:F0:53:56:A7:48:50:DD:9E:CE:CF:16:A6:71:3E:B9:3C:4F
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:23:41:cd:8c:0d:ae:b3:41:ce:55:69:fe:0a:47:31:7e:33:
47:c1:fb:20:31:56:b5:e0:30:d5:fc:13:b6:ad:42:f6:0e:1a:
34:2d:b3:55:ee:99:ab:30:7a:a4:26:c7:0d:eb:6d:d1:89:70:
0f:28:92:00:c3:54:6b:6d:b3:4c:5c:90:73:a5:79:5a:c6:bf:
e5:d0:b1:4d:75:fe:70:02:98:b6:26:a4:2f:6c:4e:7c:e0:50:
0f:a1:43:10:39:5f:fb:54:55:74:9d:53:04:ed:fc:e6:a5:ea:
62:a7:64:ab:ec:43:20:03:a9:7f:0b:47:0c:c6:49:c7:7d:75:
85:40:71:f2:78:c7:db:41:7d:03:15:61:54:bd:91:8f:01:d3:
b2:b8:07:ad:86:49:f5:a6:82:59:f0:5f:90:d3:1b:01:6e:fc:
de:c6:24:ef:4e:a0:1c:8d:6c:9f:c7:b0:ea:b5:91:cf:69:a5:
a1:8a:0e:ce:00:e6:e9:2d:a0:fa:67:57:fb:5b:98:50:59:15:
03:e5:dd:f1:4f:95:30:95:f3:03:e3:1d:a8:b3:36:0c:d4:5c:
15:13:7a:67:d2:eb:a8:62:ea:3a:01:33:9f:50:ee:15:de:48:
87:37:f2:91:6f:44:65:64:fe:19:cd:95:99:d2:15:41:48:89:
15:64:e8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:07 2026 by rpki-client