Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: gwHkd6ZGRWRUeFcsrqo1rbKOrfPUogBrfiHlCkg/Jw0=
Subject key identifier: 8E:56:27:95:BD:01:66:70:32:FA:01:5A:A9:CD:06:9C:D7:76:38:5E
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 019D9BF54492D3CFA2F094A4D58664B02A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 15:00:35 +0000
Manifest this update: Fri 17 Apr 2026 15:00:35 +0000
Manifest next update: Sat 18 Apr 2026 15:00:35 +0000
Files and hashes: 1: Nx1ZmF0LLUBVNb7pg5SUQFqkEEo.roa (hash: 7h8Dusgv5GisCOAGKVB6gWNCmRgBLzLbZbpY03tENm0=)
2: jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa (hash: nFOTFG+7OrEIpqu+RBWcBN5R7HeTDegtuQdJz0N3Rss=)
3: q-cmnczAq_R4WQig-JxyBCeiu3E.roa (hash: QW62YPpx0nobzbNY1r86LME0OVZNaU0nQ5C4usrbmMM=)
4: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: 0voC11p9GsvWLkkiyZg2vUmlFPbqhr9FGYr8sR2UgFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:44:92:d3:cf:a2:f0:94:a4:d5:86:64:b0:2a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Apr 17 15:00:35 2026 GMT
Not After : Apr 18 15:00:35 2026 GMT
Subject: CN=8e562795bd01667032fa015aa9cd069cd776385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:6a:92:a1:a7:02:4a:f3:10:af:19:28:7e:
13:19:f6:8c:bd:ac:82:94:8b:0b:43:ea:21:09:4b:
44:55:22:99:50:75:77:19:40:08:de:97:b8:39:54:
fa:34:4e:7c:be:e7:82:d3:91:a2:cf:83:f0:bc:bf:
b6:2b:9f:61:35:b7:ca:f5:ed:37:38:76:31:d4:ae:
8e:f7:9f:86:7a:e8:1c:d3:a9:68:2c:6d:2e:83:ca:
a5:83:95:e5:f6:07:a6:36:03:3a:84:8b:a5:c9:e8:
cc:36:38:e9:c0:0e:e2:f3:1b:4f:8d:33:9c:36:9a:
77:5d:37:a2:b4:be:c1:9f:de:3c:7f:bc:8c:f8:de:
5f:99:11:28:71:d3:d9:aa:f2:72:91:65:06:b2:aa:
c5:58:62:fe:bb:d0:81:27:58:ad:6e:a1:24:70:d5:
b6:58:17:23:59:f1:0d:74:43:0e:fc:37:9c:62:a9:
d6:62:08:cc:6b:91:e8:6c:2f:f9:92:9b:e5:16:74:
d8:fd:e4:f6:65:09:eb:d0:c1:51:cd:d4:fe:c4:b2:
47:4d:0e:5b:ef:dd:14:88:d9:10:d9:e6:cd:85:71:
ae:95:ba:16:18:28:c1:3b:c3:8f:c2:dd:fa:85:74:
94:ae:f5:12:0b:76:db:32:eb:3f:4b:f9:6e:24:af:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:27:95:BD:01:66:70:32:FA:01:5A:A9:CD:06:9C:D7:76:38:5E
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a5:08:57:cb:07:9b:89:9a:69:56:db:fe:ff:60:16:f7:f7:
9d:7d:8e:44:ac:29:00:1b:42:07:ac:88:ad:d8:30:72:12:d0:
1b:9f:a0:72:b5:09:98:17:3a:98:fd:84:08:f5:95:ad:31:27:
a8:18:8a:51:11:f1:0d:26:3d:1c:82:ed:7e:c2:f3:29:3a:ad:
09:16:ed:60:e3:65:96:5b:f1:72:5c:d6:55:97:24:39:b2:26:
60:dd:1d:52:05:d7:34:9c:78:90:51:08:2b:da:4f:7d:ce:6e:
84:16:e3:26:fa:4a:29:88:bd:1f:fb:4f:e9:6e:87:08:15:1f:
6b:ac:5b:45:8f:7b:58:40:17:9b:8f:fe:db:21:1e:64:bd:be:
5c:03:d2:ab:b2:4d:fd:6d:3c:aa:7e:92:97:36:85:29:47:e8:
ff:2e:73:11:23:89:78:b0:8b:70:7e:f8:07:71:cb:43:27:4a:
9d:a3:2b:d3:d3:b2:c8:c7:61:28:d9:02:9d:7a:57:2a:30:cd:
51:0b:61:06:ce:c4:9b:43:33:67:f6:27:8a:99:ad:9c:a4:d1:
a0:28:9e:cc:11:6e:c1:de:2c:52:75:09:34:ab:91:02:6c:7a:
e1:75:d3:07:1e:00:d3:a6:61:b5:3a:0c:ac:b7:78:7b:1b:fe:
0d:34:7d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:42 2026 by rpki-client