Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: +AK+z9t9FmvtGc8fgg59LDh7vcrxFj7fQl8i1E61i9s=
Subject key identifier: 57:C2:39:6E:80:D4:E2:C7:D3:B0:78:27:BB:F0:49:02:60:74:06:DB
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 019D98BDAB46CD20EE0F53C44BF54514C16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 0E95
Signing time: Fri 17 Apr 2026 00:01:00 +0000
Manifest this update: Fri 17 Apr 2026 00:01:00 +0000
Manifest next update: Sat 18 Apr 2026 00:01:00 +0000
Files and hashes: 1: 2UrjK_FlsYX5StVCQ2WmRFfnp6U.roa (hash: jZ7AryuTGRinL/OIX+iNfd8KYT9tdCnaqxvwfiWTks8=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: 4JAobJX9oqbjWOkQcpw+mVAy5usA8Y4N9lq/QqHftgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ab:46:cd:20:ee:0f:53:c4:4b:f5:45:14:c1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Apr 17 00:01:00 2026 GMT
Not After : Apr 18 00:01:00 2026 GMT
Subject: CN=57c2396e80d4e2c7d3b07827bbf04902607406db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:7f:a1:9d:dd:a8:01:33:96:f5:55:0c:6c:
79:2b:50:7a:38:98:8b:68:c3:1c:fc:6e:28:dd:71:
12:2c:e3:45:74:31:5f:24:a6:a4:91:8f:b3:9a:7d:
68:61:a9:88:4e:f0:e5:3f:f9:b0:28:af:df:6a:c3:
11:ea:54:58:b8:ac:1d:04:d0:76:d2:3d:8e:ab:29:
ac:05:92:2f:93:04:e7:cb:50:64:bb:56:92:a0:1b:
a4:61:ff:85:62:6c:46:51:fd:6e:cd:ab:1f:19:9a:
43:b6:7c:c6:eb:af:01:40:0f:ec:41:47:35:46:50:
72:5f:2b:60:78:ae:50:a0:a1:0f:7d:c2:74:63:45:
07:34:28:be:54:2b:44:d6:df:c1:1d:9c:6d:86:df:
7a:a7:4b:cd:40:f2:1e:2d:51:3c:a9:d1:26:c8:07:
d0:4d:6b:26:0c:ae:04:5d:9e:1d:99:34:b5:28:7c:
74:2a:df:09:31:ab:36:e5:fb:04:cb:00:d5:05:a1:
6c:50:d2:00:a7:fa:2b:64:6a:fd:61:cb:d6:a4:28:
3d:f7:af:1c:f9:86:2e:21:5a:8d:5d:90:9b:d8:dd:
8d:e2:22:56:20:0e:a3:71:24:d0:1a:7f:8b:01:1d:
77:ae:b8:a8:c0:3e:1c:f3:0b:14:8c:96:e4:15:5f:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:39:6E:80:D4:E2:C7:D3:B0:78:27:BB:F0:49:02:60:74:06:DB
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:a9:e9:37:d8:51:d6:2f:fd:b5:05:be:2c:17:c1:78:23:
c5:b9:de:4b:38:c1:8d:92:64:c6:4b:38:77:01:d1:27:9e:b3:
b3:48:d1:d5:9a:b0:0f:75:b9:75:a4:64:d7:cb:15:37:03:7f:
7a:13:82:f2:4c:b7:7f:e2:82:42:08:58:f7:0c:1a:d2:25:a3:
48:21:ce:ae:8e:42:49:71:a8:e6:00:cc:b3:e0:7e:9a:d9:f1:
9b:dc:41:57:61:ba:0c:54:84:e1:94:6b:b1:18:22:e5:89:a6:
a6:f9:69:23:57:01:a5:9e:3c:dd:dc:75:7d:c8:77:08:ff:77:
50:91:a0:81:6f:bc:91:72:49:60:9b:c8:59:17:ac:f1:fe:67:
b4:f0:a8:40:13:23:1d:88:0f:c8:ab:19:4f:83:71:74:91:43:
0a:68:3f:56:26:58:60:70:ce:57:65:ea:60:8e:85:50:91:ef:
0e:7d:6e:62:36:c3:98:a1:fa:7a:dc:24:45:c2:e2:fb:f7:56:
67:f6:8c:c7:ad:ea:8f:1c:86:7d:56:b6:15:5b:a2:15:fc:ea:
ac:15:73:c5:91:83:d6:ae:27:12:5c:ad:de:95:84:b4:f3:ad:
7f:4e:93:5a:c3:98:0b:02:32:95:09:cc:0d:ff:b4:f6:c6:13:
2f:df:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:03 2026 by rpki-client