Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
File: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft (raw, json)
Hash identifier: x4lGRR6mka9fjPb81uZUENwTyfEziaqEHqZzqHxvgyw=
Subject key identifier: 35:C2:C4:2F:BA:3A:09:2B:1C:7A:0F:98:4E:C1:EA:74:F6:3A:11:6F
Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
Certificate issuer: /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Certificate serial: 019D9BBE4C9485EDD8A3E756A5F259BF1807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:00:33 +0000
Manifest this update: Fri 17 Apr 2026 14:00:33 +0000
Manifest next update: Sat 18 Apr 2026 14:00:33 +0000
Files and hashes: 1: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl (hash: 4kVriYA4Vxl6GbsV9igKr2JuOQPI1qmq5tDJVIu9wz4=)
2: aS8mVetVV64JjwlhI8fk4CgYJuY.roa (hash: 5ScmfISq4FtoPsxtoa+DY1bHZcOcz3J826X0cZ02V54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:4c:94:85:ed:d8:a3:e7:56:a5:f2:59:bf:18:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Validity
Not Before: Apr 17 14:00:33 2026 GMT
Not After : Apr 18 14:00:33 2026 GMT
Subject: CN=35c2c42fba3a092b1c7a0f984ec1ea74f63a116f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:43:28:c4:8c:cb:8f:4e:05:b0:48:e5:f2:
43:67:32:77:e8:04:00:08:09:f7:48:f2:c0:5a:da:
98:71:a6:a0:21:76:5f:fb:12:e7:8b:63:73:e3:97:
cf:30:58:f0:ab:13:29:d6:c8:5c:28:ba:39:6f:4b:
fb:68:21:82:96:93:56:da:b7:59:85:36:5a:57:8a:
96:cf:de:b5:ec:17:92:f5:71:94:1c:25:4e:37:9a:
91:2c:07:1b:57:25:85:fc:63:c6:5f:ec:5d:65:9d:
8a:e2:bd:da:23:4a:1c:a8:a1:2e:f6:59:81:5f:e2:
98:73:9c:f4:0f:42:ee:ac:0b:80:78:52:f3:ee:65:
19:53:60:db:4a:99:50:5c:73:5b:d4:31:af:7f:45:
8a:60:bc:ee:0e:53:fc:2b:dc:b8:f0:0e:3a:c2:22:
27:78:2f:cf:c7:41:47:4a:22:49:97:b2:7b:8d:d4:
02:b3:f9:48:60:5f:86:16:7e:29:89:8a:d1:65:79:
c0:82:da:23:a9:51:09:e2:5c:a5:45:5d:55:09:66:
5a:14:51:c7:db:28:b8:7a:cd:14:35:a5:d9:f9:63:
8a:8f:81:5d:2f:74:c5:8f:6d:c9:fa:9d:43:0e:ad:
59:fb:76:93:03:30:03:c5:7e:ed:1b:d3:a5:c0:ae:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C2:C4:2F:BA:3A:09:2B:1C:7A:0F:98:4E:C1:EA:74:F6:3A:11:6F
X509v3 Authority Key Identifier:
keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d4:8f:ba:f0:d2:99:6e:e2:03:b7:82:fa:f3:df:bf:f3:a8:
d7:3e:e7:3d:99:4a:31:18:50:a6:e0:2c:54:9a:f1:f1:ef:a6:
02:5a:16:dd:0a:7d:76:e1:b4:d2:0f:1e:c7:b6:41:25:17:88:
97:00:7c:d8:26:b1:32:84:e4:cb:fa:d6:28:8a:f3:57:70:a8:
a5:9d:48:e1:32:37:b1:83:f1:30:c3:78:e9:08:20:d6:fc:89:
8e:89:55:96:6b:a7:f3:c3:be:bf:84:0e:ab:2c:ef:b1:dc:09:
cc:f1:a3:fa:3f:9a:a7:24:80:91:e6:fe:e3:1c:29:19:94:09:
27:4a:53:53:ae:52:a6:de:fe:f8:52:18:14:c6:bb:27:d6:c5:
f8:ae:54:fc:a0:51:65:75:2b:fb:3e:1f:ea:09:f6:7c:d8:e9:
6b:a0:98:1b:6b:e3:29:34:23:84:55:37:08:03:75:7d:39:eb:
5e:5a:d7:19:00:0c:fc:9d:78:f1:7a:e9:7b:8a:6c:23:cb:47:
af:17:e1:08:46:8b:fa:d1:69:db:7e:21:2e:1f:b2:52:c4:8c:
78:a9:d2:1c:d7:fa:4f:36:79:ab:5b:2d:c1:5f:fd:52:4a:75:
f5:db:27:e5:bc:bf:4f:20:18:2f:25:16:30:d8:58:3f:92:ba:
04:e6:5f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvkyUhe3Yo+dWpfJZvxgHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWE1ZTM5Zjg2MzU3MzZlNDhkZjUzODIyYTVjYWNjMTBi
NDNhMWYwHhcNMjYwNDE3MTQwMDMzWhcNMjYwNDE4MTQwMDMzWjAzMTEwLwYDVQQD
EygzNWMyYzQyZmJhM2EwOTJiMWM3YTBmOTg0ZWMxZWE3NGY2M2ExMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnFDKMSMy49OBbBI5fJDZzJ36AQA
CAn3SPLAWtqYcaagIXZf+xLni2Nz45fPMFjwqxMp1shcKLo5b0v7aCGClpNW2rdZ
hTZaV4qWz9617BeS9XGUHCVON5qRLAcbVyWF/GPGX+xdZZ2K4r3aI0ocqKEu9lmB
X+KYc5z0D0LurAuAeFLz7mUZU2DbSplQXHNb1DGvf0WKYLzuDlP8K9y48A46wiIn
eC/Px0FHSiJJl7J7jdQCs/lIYF+GFn4piYrRZXnAgtojqVEJ4lylRV1VCWZaFFHH
2yi4es0UNaXZ+WOKj4FdL3TFj23J+p1DDq1Z+3aTAzADxX7tG9OlwK5PjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXCxC+6OgkrHHoPmE7B6nT2OhFvMB8GA1UdIwQY
MBaAFEDqXjn4Y1c25I31OCKlyswQtDofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9iNjI0MzktN2U0Ny00MmUxLThmZGMt
MThlOTEyOTYwMjJkLzEvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9iNjI0MzktN2U0Ny00MmUxLThmZGMtMThlOTEyOTYwMjJk
LzEvUU9wZU9maGpWemJramZVNElxWEt6QkMwT2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNSPuvDS
mW7iA7eC+vPfv/Oo1z7nPZlKMRhQpuAsVJrx8e+mAloW3Qp9duG00g8ex7ZBJReI
lwB82CaxMoTky/rWKIrzV3CopZ1I4TI3sYPxMMN46Qgg1vyJjolVlmun88O+v4QO
qyzvsdwJzPGj+j+apySAkeb+4xwpGZQJJ0pTU65Spt7++FIYFMa7J9bF+K5U/KBR
ZXUr+z4f6gn2fNjpa6CYG2vjKTQjhFU3CAN1fTnrXlrXGQAM/J148Xrpe4psI8tH
rxfhCEaL+tFp234hLh+yUsSMeKnSHNf6TzZ5q1stwV/9Ukp19dsn5by/TyAYLyUW
MNhYP5K6BOZfOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:09 2026 by rpki-client