Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: xY5jaYWTbHx87NLM4q+dDAb5cyng5Lhduo38PBxYAuA=
Subject key identifier: FD:78:C2:38:1A:AA:65:BF:DD:70:8D:48:75:DF:AC:04:A2:33:2F:68
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 019DA453BE151A1EDC9F9BCDC3C7A5FD1044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 03CB
Signing time: Sun 19 Apr 2026 06:00:44 +0000
Manifest this update: Sun 19 Apr 2026 06:00:44 +0000
Manifest next update: Mon 20 Apr 2026 06:00:44 +0000
Files and hashes: 1: 1-w8Q-F1I4Vy41impjChS3fMIIAk.roa (hash: PVWxllXwJBpTCgl4ua9BNgJtEDKI8J3jMk9ds1kt2/o=)
2: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: astk/u4u3QF4X7b9aTf+87QUGOLIcVFSPem/JOk3rag=)
3: yb-12kSjdtmFiYKJ7b0iZYnL188.roa (hash: d+vCdRtSTB6tb47VKY7kwlb2RuHWojh//M171AF/m/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:be:15:1a:1e:dc:9f:9b:cd:c3:c7:a5:fd:10:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Apr 19 06:00:44 2026 GMT
Not After : Apr 20 06:00:44 2026 GMT
Subject: CN=fd78c2381aaa65bfdd708d4875dfac04a2332f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:e8:2e:18:a3:33:ff:63:8e:3f:4f:67:bb:
bf:dc:c1:fc:b6:0f:71:48:d9:53:56:3b:27:d6:63:
67:76:21:36:93:97:cf:dc:51:ff:22:4a:bf:27:ff:
e4:49:23:c4:cf:9a:ac:41:0a:31:73:35:67:e8:10:
52:d6:63:a1:bb:d2:ad:4b:60:ea:0f:45:93:1a:1d:
aa:72:64:74:ec:94:eb:ac:59:a5:91:37:11:1c:3a:
e4:08:01:42:d1:b1:d6:ce:b9:0e:c3:3c:37:7a:6c:
28:ae:41:8c:3a:75:13:9c:bd:32:3f:39:73:09:80:
1c:e1:3a:ba:a3:d4:cb:7d:92:e1:31:8f:b3:7b:89:
5d:48:a0:ff:c3:5f:0e:a7:86:0d:c8:90:00:5e:70:
ab:ea:ec:26:bb:f4:08:7f:d4:f0:6c:3a:ed:bb:34:
a0:78:29:15:cd:5e:ed:be:9f:36:e5:be:8a:b4:da:
45:ad:75:d5:7a:f1:fb:2e:56:0b:b7:8b:2d:14:eb:
06:c2:c8:40:e1:6c:99:6a:df:2e:93:6c:c3:44:f7:
9c:72:9c:c1:9b:f7:c4:c8:fb:e3:5f:1b:1e:da:2f:
ff:80:f4:77:81:72:62:6a:12:49:3d:b6:49:65:0a:
45:cb:f3:6b:7e:37:9f:a6:ca:8e:c8:65:4a:8f:ee:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:C2:38:1A:AA:65:BF:DD:70:8D:48:75:DF:AC:04:A2:33:2F:68
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:30:7e:42:2c:5a:dc:00:4f:b3:41:ef:50:e1:66:fc:79:2f:
9e:f8:d8:e0:75:bf:d5:43:4b:bc:f0:e8:06:ae:ba:37:05:87:
18:27:93:b8:9a:f1:67:93:dd:cf:0e:cd:64:e6:ee:f5:29:a2:
54:c6:32:82:41:f1:23:d1:c0:50:e9:fa:8a:57:3d:bf:70:6e:
d3:00:4f:67:48:fd:6f:33:90:9d:ef:79:7d:1f:c9:d4:7d:9f:
18:40:d7:40:a5:7e:37:98:4d:f8:dc:3b:a5:f4:5c:47:48:7b:
40:47:3d:2c:71:ef:22:2f:43:ee:e2:dd:ed:f2:f2:0e:be:1c:
c9:bd:4e:98:f9:36:e3:45:fe:31:e8:00:da:c7:0e:69:87:60:
27:3b:b4:a5:3a:e0:47:76:15:10:b0:38:d4:25:d0:94:e9:b3:
de:59:1f:98:2d:e5:1c:36:f7:bd:03:fa:a7:a5:72:8e:e6:49:
80:25:dc:0b:26:81:1c:9a:31:77:cb:b3:70:33:c9:e1:c5:1d:
b5:10:74:d5:c3:4d:71:2f:03:aa:7e:f0:47:e4:6c:bf:e9:9b:
38:00:ad:a3:2d:66:46:f6:8d:29:17:2b:2f:5b:2e:1c:72:c5:
e8:0b:aa:c5:18:cd:68:25:6c:35:07:bd:b7:09:5a:ed:f7:c2:
79:97:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:08:44 2026 by rpki-client