Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: B1FD+G3NFWlLMdVnONhWDrzocf7NDtUCuqSYtpxPXEs=
Subject key identifier: 0F:BD:FE:44:9B:BD:1D:D2:0F:9E:03:C8:55:75:B1:D9:07:8C:51:6F
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 019D98BD9A1AB2D0B2DFF947BBD11FF10FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 1858
Signing time: Fri 17 Apr 2026 00:00:55 +0000
Manifest this update: Fri 17 Apr 2026 00:00:55 +0000
Manifest next update: Sat 18 Apr 2026 00:00:55 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: l6KehxwNMwnx1+JXQo/n9PhVelgqfE1cWQYmE3lLy6s=)
2: ekViUfVjeX96GOzSolN__8-4A4k.roa (hash: YyzGmywtQBLblhHE3rDDlveGwps6u/nY6w46Xdc6qtY=)
3: meH9o9i7-j2R-Vcd-oY44f90eGc.roa (hash: jMkC1VRwXkD+Vzq7AX9qpzMXsW5ynXfkYRel0vHaW90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:9a:1a:b2:d0:b2:df:f9:47:bb:d1:1f:f1:0f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Apr 17 00:00:55 2026 GMT
Not After : Apr 18 00:00:55 2026 GMT
Subject: CN=0fbdfe449bbd1dd20f9e03c85575b1d9078c516f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:70:5d:ba:8e:ad:10:90:68:17:23:be:61:
35:f8:88:32:04:68:7c:5e:88:81:51:96:49:58:5d:
9d:66:d9:e9:9e:83:fa:3e:04:7c:69:47:c9:79:7e:
28:1c:fb:56:69:77:c1:7f:03:cc:14:c2:c9:ad:75:
f2:8f:93:f0:af:29:05:90:a8:e2:16:1e:fa:f9:1e:
78:94:2a:7a:98:3c:aa:57:2b:46:9f:c9:96:dd:57:
5a:33:10:8d:a1:1f:39:40:f1:8c:46:06:a1:9c:4e:
73:ef:c6:43:63:68:91:67:f1:59:4e:0f:ad:01:4b:
f5:02:56:3f:1f:9c:ac:51:fa:20:71:0c:63:bf:94:
3f:94:59:f0:90:8f:bf:c1:32:42:d8:d2:ad:fc:24:
3f:ba:6f:94:52:3b:03:d5:69:ac:7e:76:4d:4c:97:
85:20:62:35:a8:92:3c:de:1e:90:3a:b0:a0:df:15:
69:cf:87:15:18:00:c0:71:93:81:68:13:c0:cb:31:
57:d4:be:7f:3e:e8:52:d3:aa:9e:cd:12:a8:77:2c:
8a:b8:cd:ed:cb:59:fa:3d:f2:98:59:26:78:ea:2f:
60:ad:45:61:85:13:84:62:62:85:50:29:6f:97:15:
e9:ec:c3:b9:86:05:cd:2a:f5:c6:d0:50:45:23:25:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:FE:44:9B:BD:1D:D2:0F:9E:03:C8:55:75:B1:D9:07:8C:51:6F
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a6:9b:37:c6:4c:f0:50:10:9c:b5:a3:44:38:88:f4:37:1c:
46:f5:69:50:ca:c3:31:74:6b:e6:8d:c5:75:91:10:8d:3b:62:
0e:21:af:be:57:58:14:8c:16:e9:04:7f:78:38:04:ac:2c:7e:
02:f7:29:18:23:54:95:a2:99:d2:6f:05:29:f5:d4:58:c2:ab:
aa:76:35:85:47:70:d0:32:fc:59:81:95:a7:92:a8:91:22:97:
d8:60:e1:16:c4:e2:38:3a:42:2a:ac:66:b3:b2:fa:83:68:89:
85:c6:8f:21:8b:ab:9e:c0:b5:ab:a1:dc:7c:2f:f5:53:2d:42:
b9:61:a4:f2:96:4c:ff:d1:d9:25:c7:4a:4b:20:43:a3:ed:b9:
0b:a4:93:37:8c:5e:67:8a:80:ae:cc:75:2b:d2:8e:a7:ad:8d:
2f:74:7d:b4:8a:a0:ce:e0:10:62:44:14:95:4e:8e:ff:1c:f1:
30:20:0c:40:5a:ac:7d:cf:fb:e2:b2:15:80:20:72:f5:85:28:
fb:ab:dc:f0:85:81:d3:45:26:d0:39:40:6a:20:bf:80:c6:94:
1b:b1:59:eb:9c:c5:95:e4:1b:c7:fe:77:83:dc:09:cb:7a:e6:
0c:90:b8:0b:14:0e:09:43:37:ee:fe:6c:fe:c1:a3:c1:30:74:
e9:aa:16:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvZoastCy3/lHu9Ef8Q/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWJmNDM3NWYxN2EwMzU3MDE5NjkwMzAxZjk0MTkzMjRm
ZjdkNDQwHhcNMjYwNDE3MDAwMDU1WhcNMjYwNDE4MDAwMDU1WjAzMTEwLwYDVQQD
EygwZmJkZmU0NDliYmQxZGQyMGY5ZTAzYzg1NTc1YjFkOTA3OGM1MTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7VwXbqOrRCQaBcjvmE1+IgyBGh8
XoiBUZZJWF2dZtnpnoP6PgR8aUfJeX4oHPtWaXfBfwPMFMLJrXXyj5PwrykFkKji
Fh76+R54lCp6mDyqVytGn8mW3VdaMxCNoR85QPGMRgahnE5z78ZDY2iRZ/FZTg+t
AUv1AlY/H5ysUfogcQxjv5Q/lFnwkI+/wTJC2NKt/CQ/um+UUjsD1WmsfnZNTJeF
IGI1qJI83h6QOrCg3xVpz4cVGADAcZOBaBPAyzFX1L5/PuhS06qezRKodyyKuM3t
y1n6PfKYWSZ46i9grUVhhROEYmKFUClvlxXp7MO5hgXNKvXG0FBFIyUkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+9/kSbvR3SD54DyFV1sdkHjFFvMB8GA1UdIwQY
MBaAFEJb9DdfF6A1cBlpAwH5QZMk/31EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQt
ZjBlZDhmZTgyYjk3LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQtZjBlZDhmZTgyYjk3
LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqabN8ZM
8FAQnLWjRDiI9DccRvVpUMrDMXRr5o3FdZEQjTtiDiGvvldYFIwW6QR/eDgErCx+
AvcpGCNUlaKZ0m8FKfXUWMKrqnY1hUdw0DL8WYGVp5KokSKX2GDhFsTiODpCKqxm
s7L6g2iJhcaPIYurnsC1q6HcfC/1Uy1CuWGk8pZM/9HZJcdKSyBDo+25C6STN4xe
Z4qArsx1K9KOp62NL3R9tIqgzuAQYkQUlU6O/xzxMCAMQFqsfc/74rIVgCBy9YUo
+6vc8IWB00Um0DlAaiC/gMaUG7FZ65zFleQbx/53g9wJy3rmDJC4CxQOCUM37v5s
/sGjwTB06aoWgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:38 2026 by rpki-client