Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: baEaqFqbGactuLY+rn54gCs72CEMQDVCyoW+Yo/JLI0=
Subject key identifier: 6F:BC:44:78:F5:D6:78:EB:74:B0:C6:DF:64:A5:82:37:D4:A4:B6:7B
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019D9AAB99BC04D83C323A2E1B8674873493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1692
Signing time: Fri 17 Apr 2026 09:00:30 +0000
Manifest this update: Fri 17 Apr 2026 09:00:30 +0000
Manifest next update: Sat 18 Apr 2026 09:00:30 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: ALdZQhrvcR6pJtTMoLjx69MI95U0P73qz35HmnzS90c=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:99:bc:04:d8:3c:32:3a:2e:1b:86:74:87:34:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Apr 17 09:00:30 2026 GMT
Not After : Apr 18 09:00:30 2026 GMT
Subject: CN=6fbc4478f5d678eb74b0c6df64a58237d4a4b67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:42:0d:99:59:af:cd:ac:b6:4d:5f:e1:db:
25:e1:c7:0c:f9:05:a2:88:18:ba:e0:17:8a:50:6d:
c3:bc:97:5b:69:78:dc:ee:d5:85:90:9a:98:44:7a:
4f:55:4a:4c:9f:d5:d1:37:17:2c:50:79:01:89:c0:
90:76:67:ab:fc:5c:4b:97:a5:85:06:a4:f7:8d:6e:
a4:b1:7d:f3:1e:14:27:ac:96:42:f5:e9:9f:38:03:
cf:3e:17:78:a0:cf:d2:26:89:2a:95:d1:d7:1d:ff:
89:7e:14:d6:0d:17:80:9d:1b:1d:91:a5:05:1f:71:
d5:83:bf:cf:c7:03:53:b0:34:2a:3b:a2:ff:cc:54:
c5:b0:bd:e2:a8:49:1e:7a:a1:0f:a7:25:c1:43:3c:
76:6b:30:a8:0e:06:f6:4b:4f:68:3d:5d:83:5a:7f:
98:5b:85:27:8e:b0:ba:82:cd:d0:62:e3:e5:f3:0a:
cf:b4:0c:09:47:9f:65:62:4c:ea:8a:c1:86:3d:a9:
f6:2f:6d:33:d2:ae:34:78:82:3b:fb:c2:8f:e6:34:
97:ff:41:d8:88:28:72:cc:f1:20:c6:fb:c9:14:e9:
ed:25:1e:60:d1:72:85:67:ef:30:a5:47:31:90:d7:
96:cb:ee:f7:75:17:4d:b4:8e:7b:a3:8d:83:0e:d4:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:44:78:F5:D6:78:EB:74:B0:C6:DF:64:A5:82:37:D4:A4:B6:7B
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cf:d2:74:fd:ff:62:c2:b4:77:c2:cc:bb:e8:83:e2:e6:56:
47:ed:53:93:37:b3:1d:a1:dc:d9:a6:37:76:b6:ff:b7:09:b9:
dc:53:92:25:22:49:d9:da:61:80:0a:db:7d:69:3f:2a:d1:24:
f5:06:49:cc:c8:ff:43:f3:e7:68:7c:77:29:db:48:3f:5b:93:
22:48:9e:97:35:0f:2b:27:e2:15:81:2d:62:f5:07:e5:ff:24:
5f:fb:0f:51:ea:d0:63:9b:d1:54:6b:a0:0f:6a:d1:c6:4b:40:
0a:95:b7:8e:99:7f:1e:83:3f:c3:03:a7:a4:ee:49:e2:11:a9:
c5:3e:11:b4:8c:8d:bd:6f:ab:9a:02:9a:ad:ec:e9:75:29:a9:
6d:99:97:75:9f:d8:52:9d:64:5d:a7:06:0f:47:ff:98:af:60:
4c:90:69:26:4a:dd:23:7c:7d:20:db:2b:9e:62:55:01:60:a8:
4b:fd:b1:f5:04:0e:99:d6:41:08:74:f4:fb:84:91:92:74:24:
58:71:76:5b:7d:39:69:9f:21:3b:77:b2:13:53:a3:95:ab:9a:
e4:f9:5b:3d:26:b6:db:70:fb:2f:10:dd:8a:4f:05:fa:c4:c5:
d5:f2:b3:ce:81:ea:ac:a0:8d:37:1a:f2:dc:35:2e:be:fe:28:
03:7b:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:29 2026 by rpki-client