Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File: QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier: CabmV+iChEI/5zSU2OTpReziJ/8KWowSwfNZeTxuZmg=
Subject key identifier: C8:45:AE:6A:66:AE:9B:C5:88:C9:1D:5E:54:F2:1E:26:36:A4:61:6B
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer: /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial: 019D9DACFE33DFBA7E59DCC95DD6D8FEC79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number: AF
Signing time: Fri 17 Apr 2026 23:00:53 +0000
Manifest this update: Fri 17 Apr 2026 23:00:53 +0000
Manifest next update: Sat 18 Apr 2026 23:00:53 +0000
Files and hashes: 1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: lVkX+fA4GA6o56IYAOhS6RJjvcY6IGcNHL6JYqxtmGk=)
2: wH_MfDJl_h2tECJc3oCb2Qz0pi4.roa (hash: 8pIUEql8CBNNXltIona5AYLJWg9u6/3eIQY5XVZR3ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:fe:33:df:ba:7e:59:dc:c9:5d:d6:d8:fe:c7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Validity
Not Before: Apr 17 23:00:53 2026 GMT
Not After : Apr 18 23:00:53 2026 GMT
Subject: CN=c845ae6a66ae9bc588c91d5e54f21e2636a4616b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:89:82:ac:40:65:e9:02:4b:25:43:48:0f:
15:f5:fb:03:25:7f:3a:cf:d3:bc:52:08:6b:c1:37:
4a:a9:59:cb:e0:b3:92:aa:be:04:3f:9a:2a:58:9a:
a4:c6:38:19:ca:2b:76:eb:cb:af:cc:7e:7e:4d:f3:
96:48:4b:8a:22:28:d8:59:ba:9d:54:97:0f:b0:ed:
b9:22:79:b1:36:3a:ea:eb:9d:9c:77:e4:e7:d6:ff:
84:c8:d2:6d:15:9c:6f:2a:87:34:7c:fa:4a:bc:dd:
46:78:cb:2f:6b:e1:7e:ff:94:74:39:96:99:66:94:
00:4e:08:90:3c:8d:8e:bf:fd:aa:df:e4:a6:9f:a0:
e9:46:f3:f9:67:b0:55:a3:c7:84:4c:43:b4:5e:49:
64:af:bb:a0:a2:9a:e0:01:6c:75:ee:b7:0e:e3:36:
c0:7a:11:4b:d3:1b:a0:ee:c5:16:ed:58:06:01:b1:
48:f2:05:9e:93:d9:44:18:f5:41:c2:ed:33:fb:b0:
3e:9d:5f:56:0c:81:5c:1c:9c:00:b5:ca:61:f1:8a:
38:03:f7:d7:7b:b0:93:ce:dd:09:f9:19:84:64:e4:
2f:ed:9c:ed:7c:49:5d:15:b5:70:24:d1:0d:d5:f8:
66:57:1a:94:7f:78:42:fb:23:f1:98:30:09:37:a6:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:45:AE:6A:66:AE:9B:C5:88:C9:1D:5E:54:F2:1E:26:36:A4:61:6B
X509v3 Authority Key Identifier:
keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:81:7b:51:8e:e8:9d:76:15:7d:e6:41:cd:09:58:2d:cd:b0:
09:e6:87:a4:a9:c3:bc:44:c3:a7:00:1e:42:9f:6c:a2:75:4a:
4a:6f:5b:80:94:12:ce:60:fd:44:26:2b:ba:86:6a:c0:1c:ca:
0f:9c:61:1b:84:df:7e:98:4e:0b:b7:a5:11:64:51:4a:92:47:
f3:d6:ac:46:49:bd:07:d0:bf:3a:fb:f6:da:78:e9:a3:be:a9:
de:0b:3c:71:bf:b6:71:ab:e8:92:95:90:e6:14:75:2b:b1:62:
fc:c9:e6:c2:7e:91:54:e6:5e:1d:75:51:6c:67:e7:0c:6f:be:
7d:cf:79:ad:62:dc:ce:c8:40:6a:db:6f:11:3e:d1:a0:df:9a:
12:75:ab:46:0a:c8:23:e8:ca:59:34:f4:ea:b7:9f:92:fc:a6:
bb:9b:e6:f8:9a:66:20:52:8e:00:44:8f:cc:2d:04:a1:35:98:
a5:70:6f:0e:27:60:c2:ee:f4:2c:3b:67:11:94:ce:7d:a5:48:
bc:63:94:8f:52:94:46:91:49:15:72:79:57:3b:df:f5:b1:86:
2a:87:ba:76:17:a6:bd:f8:0d:2e:61:5f:6c:d3:2d:1a:6c:37:
57:1e:a0:4f:61:90:2b:58:1b:a7:75:37:e1:e0:73:dd:b9:d3:
ec:68:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:37:22 2026 by rpki-client