Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: R3zWvWQF5r/2WGgWt3xWSu2xxHGxCUi8fOq06xqAIJw=
Subject key identifier: 13:9F:72:3F:3C:A9:3A:4D:D9:7A:EA:C1:6B:7C:05:BA:89:C4:B4:4B
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 019D973CE470A20C83C6F3D47F3A9BC04B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 17:00:43 +0000
Manifest this update: Thu 16 Apr 2026 17:00:43 +0000
Manifest next update: Fri 17 Apr 2026 17:00:43 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: bDQ/y2/ehXZlsXscTTfLxdHsEnFRcQOQ/vAPkdnV0lg=)
2: QJ1CsNmZtrMfqsM-LahkitaRmoc.roa (hash: 16917vIR1cAkmi46t8D1rEf6dQGk7zBSOY9QqyvHf5E=)
3: ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa (hash: DDgrDiLhVwMu1oS2zAdeQKa6HlRGjZ92/REsC3Si5kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:3c:e4:70:a2:0c:83:c6:f3:d4:7f:3a:9b:c0:4b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Apr 16 17:00:43 2026 GMT
Not After : Apr 17 17:00:43 2026 GMT
Subject: CN=139f723f3ca93a4dd97aeac16b7c05ba89c4b44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:67:ed:ad:88:48:35:6e:49:12:08:8b:5a:
f1:99:a3:7b:5e:55:10:af:9f:3a:ce:66:1e:60:9d:
85:88:35:39:5b:11:41:1b:f5:2b:47:35:24:27:76:
fd:6a:0d:4a:e6:d5:94:b7:c1:11:cd:db:78:97:7d:
f5:8d:b6:a1:62:18:f4:91:85:3a:6f:93:07:bb:6b:
08:8b:35:c0:e0:a4:0e:62:24:b5:70:36:a7:f2:1c:
10:48:ef:bb:48:d3:d5:27:57:3b:fb:7a:71:6b:8a:
24:f8:89:20:0a:01:86:b3:a5:63:5c:2f:a9:1f:71:
ab:3f:2e:95:3a:6b:34:57:bb:f2:76:1c:31:2e:14:
9d:0f:6b:6a:a4:8e:d2:8b:ad:d6:f6:20:fe:35:1d:
fb:9a:2e:59:80:3b:74:f8:9f:68:c7:5d:67:e8:eb:
1f:b3:d4:fa:c1:49:e7:42:a8:52:a6:9b:03:0d:a3:
ea:18:ce:2a:da:80:cf:a5:b0:ba:78:61:2b:ea:92:
0f:b0:fa:1a:e4:a7:cf:82:2b:7a:75:5e:49:e6:65:
99:fd:5d:d2:80:f2:04:38:bc:a9:13:13:83:dc:4a:
9e:b2:05:ca:1c:46:fb:f6:e3:d2:4e:2f:e3:15:01:
0c:93:be:8e:44:50:49:18:26:ee:6c:b6:66:34:eb:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9F:72:3F:3C:A9:3A:4D:D9:7A:EA:C1:6B:7C:05:BA:89:C4:B4:4B
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c8:53:a2:88:06:ec:44:53:de:8d:cc:ee:ed:01:52:0b:bd:
f3:a8:11:45:fe:37:44:cb:74:3d:d4:a5:33:64:cc:7a:42:e3:
29:93:92:f4:35:8a:38:6d:00:8d:94:e6:8f:5b:77:5f:d5:db:
17:ec:8a:91:cd:19:6a:d7:49:ad:d5:e9:63:32:4f:0e:98:30:
6e:09:b6:99:92:38:fc:0b:3e:60:db:b8:2f:75:2f:2b:07:f4:
6a:a3:f0:c1:72:b6:34:15:b6:bf:b4:50:bb:15:36:7c:be:86:
b1:b5:a6:36:70:9f:0f:da:94:f3:ba:0c:7d:0b:34:7f:43:f3:
30:ac:d9:6d:1b:72:cc:0e:36:a2:b1:3c:db:55:23:46:ca:8a:
72:16:0c:2f:af:c9:a6:a6:b6:91:3d:8b:6c:7d:34:0a:8c:74:
f4:d8:1f:f9:9d:4b:27:0d:5d:1f:94:9f:69:31:ea:32:78:48:
33:ce:e2:e3:a8:90:4b:37:cc:bb:b2:8c:b6:50:07:98:49:d1:
15:17:ee:37:00:26:f0:f5:59:46:d8:a1:6d:4e:dc:64:6d:60:
34:90:f0:bf:7a:a3:fb:ef:f2:6c:71:14:91:72:82:63:94:3a:
58:ad:26:19:b9:95:98:73:6e:77:bb:89:43:b8:52:65:8b:b4:
9f:38:2d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:06 2026 by rpki-client