Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: Q6O0XBvIjVtjbBrH2/Uhj2LLK/kGJF32AO8Rig5veLE=
Subject key identifier: D0:FA:1D:98:34:46:82:8D:61:A3:E2:8A:94:5C:09:23:B4:8A:F5:17
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 019D9A3EF2517DB2BC707654A948E928C1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 05C8
Signing time: Fri 17 Apr 2026 07:01:49 +0000
Manifest this update: Fri 17 Apr 2026 07:01:49 +0000
Manifest next update: Sat 18 Apr 2026 07:01:49 +0000
Files and hashes: 1: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: 6VMhmY3i3NFFFRxBACEreOG4j5PMvxhELs2dDUiQ3+s=)
2: xQVJZ8XeKi_qZ897AqedzU_uyhs.roa (hash: XTuOm3CC6G0L/jW20RlJG4su70zRym46AnwfyGu3Vek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f2:51:7d:b2:bc:70:76:54:a9:48:e9:28:c1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Apr 17 07:01:49 2026 GMT
Not After : Apr 18 07:01:49 2026 GMT
Subject: CN=d0fa1d983446828d61a3e28a945c0923b48af517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:5b:84:f1:04:b4:5f:83:13:b6:da:e8:5a:
8d:0a:a4:32:73:4f:7f:a3:b5:c3:5b:4d:3d:0c:ed:
3f:b1:72:0c:48:f9:c1:fc:a3:15:17:5b:b1:12:1c:
37:2d:de:c5:23:91:cc:95:e6:d0:81:ea:6c:dd:3e:
d0:12:e2:ee:cc:f5:d5:fd:ae:05:86:af:dd:c0:ba:
1c:27:ef:b5:07:b5:2f:a8:1f:f2:46:c3:7d:58:0c:
11:ce:51:f3:04:21:1f:8f:6c:c8:90:da:19:b6:05:
4e:1b:16:3a:43:a1:87:52:3d:24:e8:1a:80:12:6e:
4b:2f:d3:72:22:a8:46:1e:1c:d4:68:99:ad:24:81:
57:63:7a:cc:56:b4:0b:f1:e1:73:aa:87:13:17:eb:
f5:84:58:c7:ca:94:fc:ad:61:5c:3e:6b:70:9c:f8:
15:94:7a:41:23:82:47:f0:85:6d:e0:b3:94:0c:bb:
d7:1d:1b:6b:a5:28:18:33:23:14:0e:d8:62:40:7a:
65:46:2f:e3:f5:5a:d8:d8:62:9b:eb:31:01:b3:c3:
97:5f:b4:e8:3c:d7:63:51:76:44:16:ce:e3:e8:2a:
f3:07:32:f8:04:32:aa:44:b1:5f:8e:a4:b7:b5:0e:
7f:85:a6:52:fa:6f:17:04:40:8b:02:7a:cd:24:1c:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:1D:98:34:46:82:8D:61:A3:E2:8A:94:5C:09:23:B4:8A:F5:17
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:c7:59:c6:f1:71:d3:e1:a4:92:13:39:95:d2:52:31:91:
1c:f8:cd:c7:cc:01:3d:4b:77:0f:d8:a4:dd:7c:fb:29:80:4c:
b3:81:dc:3e:63:4a:8d:21:ee:1b:d7:18:20:25:20:37:bb:9f:
f3:e0:e2:20:55:5f:fc:ae:e0:1d:53:4f:1c:d0:92:61:a7:b5:
62:ab:9c:a4:50:9c:d2:db:bb:76:e0:40:f3:a5:b0:21:a0:e6:
d7:91:c6:6b:be:32:36:ff:7b:37:91:22:3d:fc:28:5e:15:57:
6f:07:e8:1d:35:5f:d5:e3:f7:f4:71:d0:c2:1c:2f:a5:9a:01:
56:42:54:52:37:74:2e:5a:09:fc:ca:5d:00:d4:0b:17:18:c5:
3c:a4:a5:28:7b:aa:1c:c1:f8:fe:37:88:ed:3e:42:24:e9:0a:
08:bc:ab:80:05:b3:ae:f4:30:ba:71:0d:64:15:eb:9b:86:7e:
22:3a:85:c7:41:42:24:8b:ec:49:cd:df:17:ae:cd:f4:c3:f6:
8d:25:2c:38:4c:53:1f:3c:f0:46:8b:26:fd:e0:5c:38:a3:5c:
e6:54:33:26:93:6d:44:47:53:26:16:51:a4:69:08:04:63:20:
fb:e1:a4:45:e8:93:19:b8:a3:36:fc:89:1d:bb:4b:61:d2:38:
25:fd:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:41 2026 by rpki-client