Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: oP92UKNssqTWDd751lKpMLdVpGooos9keyG5I4GSDio=
Subject key identifier: 48:97:57:D2:83:5C:39:8A:E3:8B:96:86:A7:C9:B0:73:40:1F:5C:CB
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 019D9AAB932597B3C520A559D5580BD19D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 09:00:28 +0000
Manifest this update: Fri 17 Apr 2026 09:00:28 +0000
Manifest next update: Sat 18 Apr 2026 09:00:28 +0000
Files and hashes: 1: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: XaT7xA7LSggbEhIVC1E0qgWUis49yUee+kfAnlMJz0A=)
2: kSqnJudP1pAwQZ-smOra_DXvmqo.roa (hash: MWXJ230azqqoaYeTEJboZO3ZCTU5ujgS6o/oqGqK34I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:93:25:97:b3:c5:20:a5:59:d5:58:0b:d1:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Apr 17 09:00:28 2026 GMT
Not After : Apr 18 09:00:28 2026 GMT
Subject: CN=489757d2835c398ae38b9686a7c9b073401f5ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:6a:ad:2a:62:c9:57:a6:84:08:80:9a:7d:
c5:44:df:f2:76:9e:fd:b2:37:93:fa:98:bb:ae:37:
6d:1f:59:a4:a7:f9:d3:f1:ec:01:56:3b:0a:3b:c0:
f0:bb:25:c1:f0:84:8d:1e:4e:5a:67:59:b1:a7:e0:
ce:e6:f4:82:e0:d7:1e:af:7d:75:1b:be:a2:22:2d:
05:5a:77:ff:a6:87:90:00:60:dd:77:8e:e0:c3:c3:
71:d9:1d:6a:dd:a3:52:9e:df:0e:80:8c:00:d6:ad:
32:22:81:3f:11:a4:a4:f1:f2:b0:6c:a0:e0:01:d3:
03:17:19:f8:77:54:32:82:8f:4c:1c:63:f4:51:1d:
e5:8e:a5:cc:35:b1:d4:00:2c:c7:66:9b:8b:56:fc:
b8:6b:73:cc:be:5a:ee:cd:06:ed:1b:81:31:b4:56:
06:0f:b1:cb:42:86:81:85:4c:78:a8:f6:c4:16:da:
03:72:ab:84:be:fd:7b:6b:48:27:d2:61:cf:b7:32:
ca:28:4c:91:d2:55:bd:7b:0c:5b:03:ea:3d:a3:52:
1e:b3:74:a7:8c:ce:d5:71:da:d5:21:41:04:4a:a7:
d3:c4:cb:52:6d:59:b8:b2:6b:51:08:38:2d:18:ad:
c7:ee:0e:03:fd:79:f5:55:a5:87:50:61:52:89:8d:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:97:57:D2:83:5C:39:8A:E3:8B:96:86:A7:C9:B0:73:40:1F:5C:CB
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:17:17:40:3a:ac:ea:de:b9:a1:9e:3e:e4:07:2a:0f:15:4c:
9d:74:68:c0:19:9a:64:8b:80:a3:52:d2:7f:e3:b8:1d:52:95:
6e:83:9d:6d:1c:8b:58:ea:a4:22:65:78:2e:f3:0f:c2:4a:62:
24:83:84:60:74:eb:62:29:34:8b:a8:88:71:cc:a5:93:f5:d8:
c4:44:65:8c:f4:38:34:63:94:52:45:34:fc:ef:64:6d:2b:03:
6b:b0:4e:1c:4a:9a:e1:99:58:62:73:57:3b:4a:17:81:a3:99:
db:34:21:e0:93:ed:5c:d7:f3:82:b3:64:44:6b:6a:ed:81:25:
db:59:e4:f1:54:59:76:4b:89:16:6a:e0:3e:07:6a:79:81:2a:
9a:b5:fc:20:3b:b2:21:d7:f9:6e:08:04:2a:21:0c:c8:2c:63:
3a:f0:05:2f:28:c0:d8:4c:eb:f3:30:f6:ef:54:ca:da:18:b3:
e4:cb:f6:d0:08:2b:8e:2a:4f:1a:bd:d0:74:37:b9:3d:eb:b1:
f0:fb:4a:5b:65:e5:b9:5f:0f:44:58:d2:86:34:39:5c:0f:cf:
a4:5b:25:49:2e:39:b8:5b:ab:67:9a:cd:ea:6c:90:e1:92:f9:
07:fd:ed:78:d9:91:67:1d:5a:7b:d0:5e:1a:d6:c4:dc:29:1d:
b7:41:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:02 2026 by rpki-client