Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
File: QpoEfERhf8-ynNVy962HR9C5Mms.mft (raw, json)
Hash identifier: LakgPcs819EW29GLv5R2Nv2dOk45epFjrT4cKB6PhV8=
Subject key identifier: 90:D5:3B:07:DA:73:35:87:8F:D0:E9:6C:F0:57:C8:AD:7C:B3:F6:BF
Authority key identifier: 42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
Certificate issuer: /CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Certificate serial: 019DA48AF7C38AA92C8D5F7743DD5D438528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
Manifest number: 0D3C
Signing time: Sun 19 Apr 2026 07:01:03 +0000
Manifest this update: Sun 19 Apr 2026 07:01:03 +0000
Manifest next update: Mon 20 Apr 2026 07:01:03 +0000
Files and hashes: 1: QpoEfERhf8-ynNVy962HR9C5Mms.crl (hash: 1OxWzhNjwQ6ZvWPnsF5J6rUXUzb5PoIVkz5dbaoxky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:f7:c3:8a:a9:2c:8d:5f:77:43:dd:5d:43:85:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Validity
Not Before: Apr 19 07:01:03 2026 GMT
Not After : Apr 20 07:01:03 2026 GMT
Subject: CN=90d53b07da7335878fd0e96cf057c8ad7cb3f6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:aa:83:27:34:f6:a9:2d:73:b0:e9:64:21:
6b:e6:be:38:f5:f8:10:55:4c:2a:c2:5e:4c:07:0c:
cb:d3:53:83:d9:e0:cb:ef:39:f4:bb:d5:09:a7:8b:
37:08:f2:4d:d1:f2:47:f9:17:d2:ac:89:5b:e9:98:
a2:3d:60:11:3c:0a:c2:e8:c9:a4:76:02:98:0e:c2:
8d:1a:0e:a7:ae:e0:b4:1f:3e:53:62:7e:7f:26:37:
39:0f:ff:f7:46:0c:59:02:cc:10:cf:c9:17:72:da:
28:de:5a:8d:7b:aa:94:9f:0b:f1:47:98:7a:e9:bf:
1a:0a:64:c0:32:30:47:a4:db:80:04:83:e9:6d:42:
df:bb:f8:9c:9b:7a:64:30:40:a2:25:50:8e:2d:af:
fa:d4:d1:fd:63:78:4e:df:d5:13:8c:41:99:fa:d2:
46:7e:74:25:26:65:12:0b:a6:ea:47:92:93:08:df:
78:7b:1f:e6:0d:e3:9e:db:fd:27:c9:03:b3:4a:45:
1c:de:0c:35:42:9a:1b:a9:d0:37:50:65:c2:0e:72:
de:68:5e:80:1f:c3:1e:d3:62:ff:fc:e7:bc:01:d0:
3d:f3:60:55:2e:b4:30:7a:97:7f:c3:c8:1f:00:b4:
d9:e8:d9:3c:3f:a3:54:15:ff:56:8a:10:89:9a:93:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D5:3B:07:DA:73:35:87:8F:D0:E9:6C:F0:57:C8:AD:7C:B3:F6:BF
X509v3 Authority Key Identifier:
keyid:42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0e:55:e8:a2:2f:b8:6f:59:b5:a6:d4:3b:20:10:f8:6d:20:
f3:95:70:c2:49:0f:5d:ba:d7:79:86:8c:af:be:b9:72:16:1b:
37:3a:14:11:b3:e9:95:df:c9:e8:96:2e:56:68:5e:e8:e9:15:
43:62:30:b1:d0:2f:31:6d:f7:de:a6:7f:4a:1a:39:a9:fd:d1:
b6:51:d2:6e:0b:d5:1a:f9:7e:2e:be:ab:0c:91:b4:2e:91:e9:
26:f4:86:a7:8e:f0:e3:79:0d:79:fa:8d:a2:5e:99:b9:be:77:
70:67:c7:b5:4c:7c:55:c1:9a:70:35:5d:d9:ec:c2:90:42:60:
d3:6f:d5:8b:d6:44:08:19:1e:3a:2b:4f:44:0c:4b:4d:97:1a:
ba:d9:e4:8c:bc:d1:62:af:00:0a:08:ce:95:18:58:76:d9:d9:
39:63:ee:02:5f:2a:77:17:03:c6:6d:87:70:e1:f2:57:e7:61:
12:08:07:d8:1a:c1:e4:23:73:fa:3e:cf:77:ba:09:05:35:4d:
9f:91:84:0d:b1:2b:d4:73:d3:37:1a:9b:e4:e5:0e:b4:91:59:
aa:eb:32:80:00:7f:3c:e4:53:f0:a7:84:e5:12:48:9e:ff:1d:
6b:ff:a1:35:c0:69:d1:19:92:a8:b4:4a:ce:f6:db:bf:d0:3d:
50:aa:7a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:57 2026 by rpki-client