Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier: aIxOFOCuzeXYBp4SBdzvmxTkXbRWx58IZEb6XGUhlFU=
Subject key identifier: F5:C6:54:78:C0:D0:51:19:40:A2:0A:45:83:B1:F2:6B:1F:CC:61:48
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 019D9C9A003ABA41271E7F38F7E29ED1E8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number: 0A70
Signing time: Fri 17 Apr 2026 18:00:31 +0000
Manifest this update: Fri 17 Apr 2026 18:00:31 +0000
Manifest next update: Sat 18 Apr 2026 18:00:31 +0000
Files and hashes: 1: QRd4aPFV9jlBuWiqVWId4f78nwU.roa (hash: z76kR0ZXpWXElfaEyx2j2tbap+nSUCRwRkiT2NmSfmM=)
2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: L4i55SfPzs7DBgtsXlwn7N0VVsMPCbK/IAIvczBJFwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:00:3a:ba:41:27:1e:7f:38:f7:e2:9e:d1:e8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Apr 17 18:00:31 2026 GMT
Not After : Apr 18 18:00:31 2026 GMT
Subject: CN=f5c65478c0d0511940a20a4583b1f26b1fcc6148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:f8:ef:53:f1:26:35:a1:c8:ae:aa:62:7a:
dc:4c:33:af:78:d9:3c:07:c9:8d:73:4a:df:86:13:
b4:0b:32:53:ee:ee:95:17:f3:05:37:40:8c:c3:a9:
d5:30:b9:5e:3d:df:c3:50:a6:ed:04:c0:e3:ac:f7:
ee:31:54:4e:0b:02:cf:be:37:00:9d:ad:d6:b6:b8:
22:66:3e:15:45:93:85:85:67:11:19:c3:29:76:34:
5c:cb:d6:11:fd:39:33:d8:32:c3:63:e5:9b:13:91:
84:7f:c1:08:0a:01:8d:c3:15:ef:a0:64:15:f3:60:
37:18:fd:80:5b:35:c3:e6:26:3c:e2:80:32:d6:96:
65:6e:e7:c1:7f:9b:4c:cd:21:be:ce:38:98:b2:29:
e3:ec:a9:ec:9d:f6:a0:0a:06:13:4e:20:82:7a:a1:
c6:3f:32:d2:57:54:f4:58:78:0f:d4:6a:d2:8f:57:
54:02:4c:69:eb:6d:4b:16:0d:45:9f:12:c9:51:90:
ab:b7:c7:dd:2d:24:cc:5c:8f:89:91:1d:4c:ba:24:
e3:53:c3:6f:59:ab:81:42:41:2e:27:89:f0:b8:d6:
e2:a8:e6:a3:d4:6b:9e:23:1c:33:76:24:e5:60:b3:
0b:42:7f:7f:b4:8c:7f:7a:02:ba:74:cc:dc:e5:f8:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:54:78:C0:D0:51:19:40:A2:0A:45:83:B1:F2:6B:1F:CC:61:48
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:49:be:da:fa:19:c0:63:8a:fd:1e:4c:2e:bc:24:c0:db:ec:
53:79:d5:2b:67:bc:8e:12:14:d3:8f:c2:b9:d0:f0:d6:a0:70:
1c:24:d0:40:b6:f7:93:cc:a5:b0:db:97:92:e1:b8:7b:22:0f:
39:d7:02:8a:12:0b:14:b1:7d:d4:9a:eb:e5:ce:e9:d1:6a:45:
4d:80:87:2e:c2:ff:aa:7f:dd:3f:2d:6b:a1:df:ad:c1:24:61:
a1:4d:32:d6:fc:a0:21:43:4e:c9:99:42:67:c4:db:4d:be:27:
30:de:9d:06:e0:b4:52:c7:1a:f5:ae:1b:a0:56:b9:6e:67:ca:
6b:67:b4:c6:b3:d4:1d:0a:51:db:e6:c4:38:b8:96:95:a4:11:
b9:c9:25:12:27:9e:93:36:6c:ea:75:60:c1:ad:be:b6:fa:83:
96:a6:dd:12:8c:28:93:cb:8d:ac:d4:43:fc:7a:d0:68:77:47:
69:b1:36:c9:cf:7a:e0:c3:c2:80:63:30:94:65:e2:85:f1:f2:
69:85:0d:6d:8d:3a:4e:33:19:b7:16:ae:66:26:bc:35:17:3a:
70:dd:77:49:60:6a:28:fb:78:c9:53:60:a7:ac:df:fe:23:f3:
43:2e:51:df:64:ab:a9:38:a8:46:5a:12:bc:eb:cd:bb:a8:96:
36:48:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:39 2026 by rpki-client