Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json)
Hash identifier: 6vM/YCpZ6i+1s/fgibc/UvB/mU0vHIRu83wNM6MfNC8=
Subject key identifier: 49:46:75:F7:2E:F1:00:C8:6E:50:5B:B1:28:05:62:88:70:70:15:40
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial: 019D9BBEA1E1C2A604AE8B49FAF87AF3DEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
Manifest number: 0708
Signing time: Fri 17 Apr 2026 14:00:54 +0000
Manifest this update: Fri 17 Apr 2026 14:00:54 +0000
Manifest next update: Sat 18 Apr 2026 14:00:54 +0000
Files and hashes: 1: arEWxGjVNSq334y6Ktt8aDjalyE.roa (hash: TaWGOyG5nBxY0egiO8Xs2dGnWrPRgWPcphWefnhZTWM=)
2: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: 08hPZyURZp+tzUE43m3ZIF51wtR11NjpdJECe8mpnOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:a1:e1:c2:a6:04:ae:8b:49:fa:f8:7a:f3:de:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
Validity
Not Before: Apr 17 14:00:54 2026 GMT
Not After : Apr 18 14:00:54 2026 GMT
Subject: CN=494675f72ef100c86e505bb12805628870701540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:ae:55:2f:5c:42:36:16:8a:f7:4e:2a:a3:
1e:be:5a:9d:07:07:34:76:e7:ba:3a:82:32:9d:31:
55:d4:46:4f:48:1b:a0:5a:3a:db:03:7e:c2:8c:8f:
4b:62:0f:39:a4:25:c4:8d:10:cb:30:bb:58:b0:d3:
c9:54:8f:a1:38:42:44:48:83:b5:15:44:ed:5e:46:
c6:d5:72:02:1d:d5:ca:e0:7a:c3:9a:c0:53:5d:cb:
ae:1c:c8:b1:0e:22:b0:d1:ad:6b:71:47:c5:76:ed:
05:57:e5:ac:f0:99:d7:b5:00:1a:fd:16:ea:58:3b:
bf:f9:ed:5d:69:33:14:77:b4:88:31:64:e7:44:08:
8d:82:dc:03:10:e2:65:36:7d:13:38:5e:6e:e7:a5:
f8:90:7f:0a:a4:97:69:5d:0f:4f:bd:d1:8a:57:21:
da:e2:e6:44:fa:fb:57:7b:0f:e5:35:7f:9e:42:8c:
33:da:c1:48:03:04:d8:3a:87:ab:e4:c0:df:8f:b6:
34:09:fb:c0:4e:2c:4b:95:bc:e1:fe:25:c3:ac:8d:
44:bd:01:f7:44:6c:1e:9c:92:77:53:0d:0c:cb:2b:
80:21:12:16:10:88:71:26:b9:f5:dc:ae:b1:7b:60:
9c:ab:cc:a4:37:48:a1:f9:83:ef:3a:c6:a9:14:0c:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:75:F7:2E:F1:00:C8:6E:50:5B:B1:28:05:62:88:70:70:15:40
X509v3 Authority Key Identifier:
keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:30:20:d1:93:dd:3d:21:22:d1:9b:55:ee:26:2f:4d:6a:
45:82:8e:d4:90:61:86:26:a3:35:a8:67:12:be:bd:22:09:3f:
db:42:89:36:c3:ee:03:80:7e:cd:b7:19:59:9d:e4:3c:df:51:
0d:71:59:7e:aa:b6:3b:7c:62:b8:5a:17:f0:7c:e0:73:f3:24:
ab:9f:9e:14:f7:59:e9:70:1f:51:0f:c5:74:cd:d9:68:ba:0a:
e9:19:db:39:d2:01:b4:d6:ee:3a:35:bc:1f:6b:ff:78:52:50:
63:12:25:cd:59:b9:fa:60:7e:17:4f:a6:05:31:d1:d3:47:a6:
fc:c6:41:d6:94:b5:1f:d0:16:3b:08:6d:dd:e4:01:b8:e0:26:
4f:04:91:46:51:f7:1a:30:db:ac:c2:36:1d:0c:68:d0:88:a8:
57:12:13:f5:8d:fd:16:39:b7:ce:61:d7:f9:3c:ed:41:e6:4b:
4e:58:73:e0:ea:f5:e1:11:d5:e7:65:0e:00:e9:2b:ce:3c:d6:
7c:13:83:02:63:b4:60:d4:94:70:bb:2c:8a:21:fd:1c:a9:75:
55:07:0e:11:5f:6a:9c:13:75:1b:b7:1b:3d:52:2e:2e:76:e9:
9d:25:f1:83:21:ed:c6:cc:94:52:4f:d6:e1:5a:83:ca:e4:42:
07:e8:9b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:21 2026 by rpki-client