Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: QoEfMDyQ00s0gw6HqFp9DcToCGfoHNAoxRTaUvm/9wI=
Subject key identifier: CB:03:C5:87:B2:1B:86:89:4A:85:BB:3A:43:78:1C:6D:BE:20:C1:3A
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019D9A06FF0E2B5849AC76C14E826DA58ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 06:00:42 +0000
Manifest this update: Fri 17 Apr 2026 06:00:42 +0000
Manifest next update: Sat 18 Apr 2026 06:00:42 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: yneqYC/W0bCuXZdaHRVF/TI+mts6hq4F1LmobkDoBQQ=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ff:0e:2b:58:49:ac:76:c1:4e:82:6d:a5:8a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Apr 17 06:00:42 2026 GMT
Not After : Apr 18 06:00:42 2026 GMT
Subject: CN=cb03c587b21b86894a85bb3a43781c6dbe20c13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:1a:51:e6:1f:10:c0:65:0a:54:70:aa:d3:
ef:e4:b5:01:c1:4a:a4:20:b0:f9:b0:02:90:3d:5d:
82:16:ea:e7:8d:3e:19:cd:ab:73:37:1b:0a:de:6a:
fc:fa:b5:63:4d:6d:a5:bb:87:4b:2c:3a:89:a1:1c:
5d:4f:fe:69:55:a9:16:13:98:98:09:5e:47:08:ec:
91:d3:c2:b6:96:fa:b8:e0:0f:12:92:f1:b0:b4:1c:
e9:fa:d3:24:5f:c6:eb:22:d9:80:55:f2:06:a8:10:
62:0c:a9:b3:f6:ed:5f:df:52:c0:67:ef:9c:16:9c:
58:63:e9:fd:83:17:ba:4f:72:86:fc:cf:6c:2c:98:
ed:7d:da:d7:21:8f:6a:f9:b4:1d:9e:d6:b4:e3:ad:
fb:24:07:bb:c8:a5:60:35:29:ac:56:98:1e:c0:21:
84:7d:b2:ec:16:11:10:37:31:5d:07:d2:33:3f:c2:
ee:c3:08:22:d4:90:2f:9d:2d:3e:13:34:87:d3:dd:
9b:ca:d0:03:50:fb:34:30:0c:46:be:09:5a:6a:1a:
64:a6:14:17:10:15:75:35:ee:e8:20:da:f7:6e:1d:
f4:41:14:8b:f4:82:ec:13:96:53:70:b5:f0:0b:0d:
b5:a0:c0:6d:6a:ba:6f:8c:4d:c5:99:10:b4:b0:59:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:03:C5:87:B2:1B:86:89:4A:85:BB:3A:43:78:1C:6D:BE:20:C1:3A
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c0:12:4a:f8:60:57:22:76:94:92:f9:e2:36:9b:f5:3f:6e:
46:2e:47:b2:69:12:a8:63:c7:98:bd:06:b0:ce:e2:89:71:aa:
44:6f:1f:aa:a5:da:a5:77:3d:e1:26:5b:75:4d:fa:ca:0e:c8:
38:8d:b1:01:46:bf:c8:f3:9b:42:7d:7b:38:59:2e:e0:64:e0:
a3:db:97:8f:22:29:41:eb:b4:8c:83:d4:f5:36:d9:e6:ec:56:
cc:fc:3a:dc:a9:3e:01:c5:33:7a:ca:7f:ec:a1:9c:d6:d9:d8:
a6:65:1d:4f:81:6b:f6:d8:c2:70:2b:c4:b6:64:94:b2:ee:50:
26:7b:45:65:43:59:67:7e:5d:70:f5:29:e3:e6:2d:7c:45:a7:
d4:60:16:73:32:ce:09:e0:cd:9f:8f:53:c6:30:b9:83:b7:c5:
40:03:59:81:8d:3c:2b:1c:86:a6:c3:80:87:89:ed:c2:85:5e:
89:09:f6:54:51:03:44:af:43:5a:b2:eb:73:be:ba:77:48:3a:
83:83:f6:b7:78:e7:03:18:9d:fe:1b:e8:25:74:a9:1a:cb:fd:
94:ef:c1:73:be:15:99:24:bb:84:05:93:fc:fc:6c:99:5d:9f:
5b:8f:c6:39:7e:3d:0a:63:ea:b6:56:cc:ef:b1:df:c9:3c:28:
d2:17:88:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBv8OK1hJrHbBToJtpYq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyM2Q5MzA1NGYwNjNjZjhhMjkxODYxNzM1ZjkwMDU5YWI5
ZWMxNjkwHhcNMjYwNDE3MDYwMDQyWhcNMjYwNDE4MDYwMDQyWjAzMTEwLwYDVQQD
EyhjYjAzYzU4N2IyMWI4Njg5NGE4NWJiM2E0Mzc4MWM2ZGJlMjBjMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBIaUeYfEMBlClRwqtPv5LUBwUqk
ILD5sAKQPV2CFurnjT4ZzatzNxsK3mr8+rVjTW2lu4dLLDqJoRxdT/5pVakWE5iY
CV5HCOyR08K2lvq44A8SkvGwtBzp+tMkX8brItmAVfIGqBBiDKmz9u1f31LAZ++c
FpxYY+n9gxe6T3KG/M9sLJjtfdrXIY9q+bQdnta04637JAe7yKVgNSmsVpgewCGE
fbLsFhEQNzFdB9IzP8Luwwgi1JAvnS0+EzSH092bytADUPs0MAxGvglaahpkphQX
EBV1Ne7oINr3bh30QRSL9ILsE5ZTcLXwCw21oMBtarpvjE3FmRC0sFkImQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsDxYeyG4aJSoW7OkN4HG2+IME6MB8GA1UdIwQY
MBaAFEI9kwVPBjz4opGGFzX5AFmrnsFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgt
NWYxYjY5MDQ4ZmUyLzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgtNWYxYjY5MDQ4ZmUy
LzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcASSvhg
VyJ2lJL54jab9T9uRi5HsmkSqGPHmL0GsM7iiXGqRG8fqqXapXc94SZbdU36yg7I
OI2xAUa/yPObQn17OFku4GTgo9uXjyIpQeu0jIPU9TbZ5uxWzPw63Kk+AcUzesp/
7KGc1tnYpmUdT4Fr9tjCcCvEtmSUsu5QJntFZUNZZ35dcPUp4+YtfEWn1GAWczLO
CeDNn49TxjC5g7fFQANZgY08KxyGpsOAh4ntwoVeiQn2VFEDRK9DWrLrc766d0g6
g4P2t3jnAxid/hvoJXSpGsv9lO/Bc74VmSS7hAWT/PxsmV2fW4/GOX49CmPqtlbM
77HfyTwo0heIHg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:50 2026 by rpki-client