Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: WoLxmaNqxAaCG6bvXqxQbTQhGUe51eqfSTyLkqLNRsI=
Subject key identifier: 1E:8B:C3:42:2E:C6:82:0B:1E:3A:DF:A2:05:81:1C:46:1C:CF:F3:47
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 019DA3790F3956A547253C27181306FB14BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:01:53 +0000
Manifest this update: Sun 19 Apr 2026 02:01:53 +0000
Manifest next update: Mon 20 Apr 2026 02:01:53 +0000
Files and hashes: 1: 3qtjPVhy36B112_T9YD_k1D7PrQ.roa (hash: TnLbrW8cdvU0sgFs8JL8GKZ+s8BUvq1O8YCehip/3/4=)
2: b-_QLOAaiTLnrdshp-MjmUbpJAQ.asa (hash: zE9zRSorao8ZT6ov8SMASzQ+KxaurOF00HS44oG3cE8=)
3: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: pGO/LJ0HdoNiqba0mrEdvpdGoDP/KbXzi6t4R6vP0w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:0f:39:56:a5:47:25:3c:27:18:13:06:fb:14:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Apr 19 02:01:53 2026 GMT
Not After : Apr 20 02:01:53 2026 GMT
Subject: CN=1e8bc3422ec6820b1e3adfa205811c461ccff347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:1e:24:0b:f1:ef:63:56:91:00:ff:b9:4b:
1d:21:e0:56:aa:c6:31:1a:a2:6e:d6:ba:d8:cb:b4:
15:d9:e4:43:ab:bd:be:80:e3:cd:bc:c4:9c:20:fa:
8c:e3:b7:0a:ba:67:d6:8b:e5:e2:c4:d4:31:f5:a6:
3e:62:15:56:1a:4f:68:50:d6:2a:5d:e3:b9:dd:9d:
0e:dc:3d:77:98:59:e4:8e:c1:ca:8f:07:fc:b9:b4:
ea:5d:9f:11:89:65:0d:78:ec:23:36:da:ae:56:f6:
b9:fd:11:53:64:c1:3c:fb:e2:4b:97:19:eb:77:fe:
35:f2:c2:88:fc:53:c9:94:a0:db:61:e6:29:e7:2a:
e5:b2:32:a6:27:fc:fe:98:5c:c7:da:a1:37:f2:2c:
ec:16:8e:a6:32:2c:01:2c:4c:52:85:08:d5:eb:fe:
5d:5a:f0:7e:fd:ee:04:37:f4:d2:d1:e7:81:42:de:
97:9e:ea:e3:f3:6a:81:95:89:55:7f:4e:a7:43:80:
d9:ca:45:ef:cc:3b:94:db:6e:50:f9:a2:b5:d6:cc:
89:81:73:15:be:b6:95:e9:72:d9:f1:a9:9e:b4:e5:
38:f2:f2:40:b9:a9:f3:16:29:f0:71:ea:cf:46:d8:
d9:66:25:89:21:ca:71:d0:2b:ec:b8:1f:7d:52:c1:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:C3:42:2E:C6:82:0B:1E:3A:DF:A2:05:81:1C:46:1C:CF:F3:47
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a1:31:c6:a1:74:d1:bf:d3:9f:2d:bb:0d:57:97:21:44:f8:
0f:bd:ac:55:fb:7d:13:f9:57:b7:97:08:20:99:05:07:e5:84:
3f:21:33:29:28:23:a7:c2:8f:27:49:7b:23:fc:c0:52:36:23:
56:cc:3c:bf:bf:84:ea:3a:63:7a:78:18:17:dd:63:f7:45:37:
78:50:0b:2a:bf:77:84:04:4b:cd:5c:64:e3:f6:df:2c:f8:ce:
26:c8:62:5d:19:80:55:d9:78:28:2a:2b:bf:23:f4:8a:2f:a2:
86:b5:32:75:8a:ca:ba:4e:fa:d4:fe:3b:0d:a6:63:77:3d:8d:
79:4a:35:ed:61:d6:8e:50:76:3d:cb:ee:73:f8:75:25:be:b1:
32:b3:04:a6:86:dd:44:0e:b5:a6:43:ca:18:49:86:7d:c8:39:
af:08:d0:1b:30:f0:d0:57:d0:36:df:09:98:cc:0a:6e:33:4d:
7a:89:a8:20:46:2d:03:15:30:e2:62:71:97:1c:fe:fc:cc:18:
6e:f1:ca:8a:3e:7b:a1:af:8e:c1:11:d2:bc:95:37:fd:ae:b3:
65:47:43:57:cf:0e:de:bc:07:64:84:69:ca:a3:4f:15:6d:88:
3c:fd:32:81:49:87:ef:d3:d3:51:83:75:1f:e6:30:bc:86:fc:
86:51:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:59 2026 by rpki-client