Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File: qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier: TXy0m0VwL8KGPn1mEPUbuuzTu9J/KE0R2cN5dM4oMII=
Subject key identifier: 1A:E1:F5:18:08:2B:86:31:A7:A5:9E:C3:32:2C:FA:B8:71:39:F3:BD
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer: /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial: 019D9B507E5EF4505FDE89C250C2F1E9A426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number: 1144
Signing time: Fri 17 Apr 2026 12:00:36 +0000
Manifest this update: Fri 17 Apr 2026 12:00:36 +0000
Manifest next update: Sat 18 Apr 2026 12:00:36 +0000
Files and hashes: 1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: MJL8Fxucxsf6ZODS3rcMEhn+150f4N075buId4Ij57E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:7e:5e:f4:50:5f:de:89:c2:50:c2:f1:e9:a4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Validity
Not Before: Apr 17 12:00:36 2026 GMT
Not After : Apr 18 12:00:36 2026 GMT
Subject: CN=1ae1f518082b8631a7a59ec3322cfab87139f3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:87:f9:3f:73:7f:18:23:87:c5:0d:1a:3a:02:
d0:05:dc:54:33:d6:4b:98:0a:b2:1d:b2:dc:98:1c:
98:82:08:6d:88:f9:d5:90:28:61:60:b8:dc:49:0a:
0f:17:08:6d:7d:c5:3e:59:bf:1f:2e:b4:25:a1:24:
6a:54:62:d3:d0:e8:4b:d2:1a:f4:79:6d:91:1f:3b:
48:12:aa:ed:fe:56:9c:88:6d:5a:e3:2b:ef:82:c2:
6e:50:86:7e:0d:f9:7b:e4:02:14:de:38:7f:a9:9a:
50:11:a3:b7:1b:49:e2:f5:10:3a:bf:f7:18:90:ba:
ae:bb:06:5e:9f:79:cf:a7:c8:3a:df:27:6c:69:c2:
9e:a2:fa:61:b3:f9:5f:be:af:9a:b4:e3:50:a5:e1:
eb:d1:f6:49:61:b5:9c:3e:fb:89:2f:43:84:98:71:
4b:3a:95:e5:53:ca:8d:9a:8f:05:ed:58:b4:c0:51:
85:52:0a:70:a2:9c:6a:26:cd:cc:c6:f9:f6:c9:c3:
60:82:2d:d8:eb:e5:14:ea:87:2f:da:62:07:1e:8d:
24:a0:28:5e:b8:82:22:d9:9b:34:04:e7:7c:71:22:
af:b3:5f:0a:9e:f9:33:ba:21:16:db:36:29:54:2a:
dd:19:81:03:15:95:ac:a5:86:fb:c9:68:7b:dd:11:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E1:F5:18:08:2B:86:31:A7:A5:9E:C3:32:2C:FA:B8:71:39:F3:BD
X509v3 Authority Key Identifier:
keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a1:df:c1:c8:84:af:03:ca:80:9b:23:07:08:4a:3c:a5:3a:
e2:68:28:c0:e4:0a:39:b1:f9:50:f5:9e:b8:89:58:30:38:dd:
19:e2:3a:e6:c0:96:9f:ce:bb:68:6f:0f:2d:ad:20:85:5d:50:
fe:1c:6e:4b:14:72:52:9a:25:88:58:2a:85:db:94:bd:88:5a:
ed:85:0a:9b:3e:eb:06:4d:34:b1:6a:80:d7:99:fc:d7:39:38:
74:09:59:e8:fc:81:33:5a:59:9d:ff:6f:f9:93:f5:45:65:e1:
72:6d:73:fd:93:33:95:73:ee:33:e4:53:65:96:30:31:58:98:
c9:07:5d:96:2a:d6:48:24:68:40:d5:78:d1:47:26:c2:cf:28:
bc:93:ba:1d:b5:aa:dc:49:6f:27:20:54:02:8a:ec:84:b2:a6:
ac:a7:e9:04:4b:6a:79:71:a1:4d:9e:94:fb:cc:32:06:f2:fd:
83:d1:6a:a2:8a:fd:51:ad:8d:39:17:63:51:1a:12:a4:36:87:
f1:91:66:92:d2:d6:da:a4:fe:77:b3:af:bb:6d:21:23:2b:4c:
9c:f7:4e:2b:c0:3b:57:1e:39:1a:74:65:37:fe:f9:51:7b:bb:
f8:19:ae:c5:6b:29:22:ea:9f:41:40:f2:4e:dc:e1:95:01:98:
98:a1:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:30 2026 by rpki-client