Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: 1SMkLDs0NV8mJsY2E2Dt+5WBKAB6McHM5ZQhhhPf+qY=
Subject key identifier: 58:7C:09:21:B8:EA:A8:18:76:77:5B:A1:69:98:65:45:49:E6:12:8C
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019D9B513A66288E19EB1E8864375F467384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 0276
Signing time: Fri 17 Apr 2026 12:01:24 +0000
Manifest this update: Fri 17 Apr 2026 12:01:24 +0000
Manifest next update: Sat 18 Apr 2026 12:01:24 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: XjEpSEf/PrkLHyy07AyhDoFly2QcK2U5IsXxjFJnGS8=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:3a:66:28:8e:19:eb:1e:88:64:37:5f:46:73:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Apr 17 12:01:24 2026 GMT
Not After : Apr 18 12:01:24 2026 GMT
Subject: CN=587c0921b8eaa81876775ba16998654549e6128c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:e5:97:6b:4d:ea:07:fb:39:51:c4:0a:c1:
00:ef:48:42:95:15:69:30:75:84:14:3f:67:ec:34:
53:77:1f:ef:9e:88:98:61:0a:c2:51:28:eb:c0:11:
19:33:45:e6:e2:1f:7f:dc:2c:b8:3b:9c:e2:48:26:
2b:c1:73:67:ff:1a:9d:b3:39:6e:57:db:b6:c2:5e:
0c:42:72:08:45:ea:86:2c:53:93:a1:81:ad:a0:7b:
f1:f3:67:37:46:f0:27:25:e1:cd:3c:d8:88:b8:6c:
dd:d0:90:cd:16:79:18:9b:49:63:1a:78:e6:b6:53:
f7:0a:de:ef:05:d0:8c:76:08:f9:65:19:76:e7:b1:
f9:49:0e:48:c8:6d:2a:a5:fc:43:b8:18:ac:b5:98:
7c:06:6b:0c:aa:f5:cc:c3:0e:74:9b:5a:5d:4d:36:
a8:00:dd:89:7b:aa:3d:52:0d:1b:65:25:dd:7b:f9:
2f:f6:df:f6:26:d2:ab:a3:9d:25:2a:6a:d2:3f:25:
21:28:9e:11:30:be:87:bf:7e:09:1f:c0:b5:fb:b2:
65:a3:29:0d:1e:43:36:f0:f7:6d:b3:98:2e:7b:c6:
61:d0:6b:06:9a:6f:23:85:53:c6:23:7a:ab:b2:a7:
0a:07:3b:b2:92:64:37:52:05:f2:b4:e2:91:bf:13:
7c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:09:21:B8:EA:A8:18:76:77:5B:A1:69:98:65:45:49:E6:12:8C
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:46:46:3c:9a:9c:42:8c:5c:6c:5a:a3:5b:00:cf:ff:f2:39:
9e:08:8b:cb:66:2f:8d:7e:4a:20:55:de:1a:fd:30:d1:f0:b3:
48:7b:e0:49:19:98:e3:0f:ba:75:da:3e:af:a3:5f:54:92:9c:
49:e1:5c:1a:ac:9d:60:3e:8d:59:8d:05:59:87:39:4c:ff:be:
33:05:5d:14:f1:ef:29:fc:7c:27:79:c7:63:31:69:f0:81:29:
54:c1:a7:14:2c:c7:f2:11:ae:c1:e3:7b:56:df:0e:85:37:98:
a6:1e:56:aa:b5:12:24:ab:a0:e6:39:d4:08:7a:82:34:92:df:
67:9a:cc:26:e8:65:68:60:28:f2:b0:29:0b:fe:38:e5:1f:c7:
62:9e:ef:6d:ac:91:e1:0a:68:26:e3:2d:66:fb:04:99:09:cd:
8c:5d:f7:ef:8b:ca:a1:73:70:f0:49:47:5a:f5:f0:2d:81:04:
86:8b:ab:8b:db:04:54:2d:a6:cf:ea:b8:31:1f:a3:e2:2f:6f:
01:3d:71:9e:b1:a9:46:0a:ee:04:8a:7e:f1:04:54:59:a8:a1:
a5:d9:80:c5:6d:9e:49:6c:4b:d1:5c:02:b5:c3:37:79:4a:8e:
bf:07:63:cc:4e:fe:6a:f4:89:ac:8d:17:05:2e:54:f0:55:c9:
1f:2c:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:58 2026 by rpki-client