Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: UlVU/jsIuaRhvtHHjLbc3faoXdJF2rQzxWzKEsHklK8=
Subject key identifier: BD:FE:E7:BF:40:A1:5A:2A:3D:3D:A8:36:97:CA:99:D3:50:D7:44:9B
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 019D9998DEC6D6AC39000BA8F556DDB7DFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 144C
Signing time: Fri 17 Apr 2026 04:00:25 +0000
Manifest this update: Fri 17 Apr 2026 04:00:25 +0000
Manifest next update: Sat 18 Apr 2026 04:00:25 +0000
Files and hashes: 1: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
2: ja4HyiBI4KYvnEsTozQU8Mp2lVA.roa (hash: Lay79psaoloZk98TsyG6C83RJH7tMee/A2Y6ldt4Zmk=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: OHqCEKQcjUohyxY1K2oS+kdxptQaK2Hl3h/QXcuVLHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:de:c6:d6:ac:39:00:0b:a8:f5:56:dd:b7:df:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Apr 17 04:00:25 2026 GMT
Not After : Apr 18 04:00:25 2026 GMT
Subject: CN=bdfee7bf40a15a2a3d3da83697ca99d350d7449b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:9a:c0:2e:d1:19:85:95:85:be:54:f3:74:
bc:25:40:0a:8a:a9:88:0a:88:74:b5:39:b3:c8:25:
39:dc:41:45:0e:0b:c0:56:f7:61:b1:a1:53:94:17:
fa:0c:07:76:91:27:41:ac:0e:04:ce:c0:5d:63:1d:
bb:33:46:a3:4c:6e:71:f5:84:6a:61:f3:09:60:34:
17:a1:f1:bc:c9:c6:64:17:8d:9e:30:98:82:bc:c3:
fd:72:78:31:e6:ca:5a:df:83:7b:a5:63:03:49:20:
ff:9e:5e:5b:f7:e9:14:3c:b1:98:ff:5e:f3:5b:5b:
49:64:6d:d5:f1:93:d7:74:10:c3:c6:cf:79:c1:7b:
56:d8:09:05:35:80:b9:e5:3b:d5:7d:c4:01:b5:68:
bd:67:91:2b:d2:04:c1:33:cc:4e:c4:24:5f:b3:b0:
df:07:51:54:49:f5:bc:e7:66:12:08:85:b2:84:cc:
43:b0:57:57:04:a5:4e:1e:47:c0:9c:9c:7f:cd:48:
76:07:8b:40:74:38:df:79:7c:84:30:ee:b7:bd:4f:
d4:50:7a:d1:55:5c:d3:60:bf:dd:ef:1a:f0:a7:ea:
1b:5a:ce:f0:9d:ce:fc:a8:c6:e8:a4:6f:4f:8e:59:
4c:61:cc:db:e3:9e:40:e7:38:8b:6c:2e:ed:e4:bb:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FE:E7:BF:40:A1:5A:2A:3D:3D:A8:36:97:CA:99:D3:50:D7:44:9B
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:95:69:82:2b:f2:b1:b9:b9:3c:9f:ba:13:06:34:c1:d6:eb:
7e:09:8e:ed:9d:ee:fa:38:c5:aa:44:b4:c1:f8:06:64:6b:df:
42:64:61:62:16:31:7c:81:c9:c2:a4:34:7e:c8:74:60:95:26:
d0:a7:4a:be:a5:92:92:65:14:8d:76:f4:39:13:2f:e1:83:2d:
f3:f8:e1:c3:07:fc:58:f2:ae:62:62:78:dc:2d:aa:02:79:69:
b0:03:3c:93:a9:2e:68:a9:bb:04:d4:d5:dd:4a:e4:a1:5a:23:
64:b4:79:fb:da:97:f5:fd:d3:89:c9:1c:bb:d9:fd:d7:4a:b9:
3d:3f:f9:3a:33:c3:47:51:c9:3f:b3:09:b0:f7:a9:a3:df:ac:
12:ad:82:db:0a:4e:e8:43:fc:2c:4b:cc:cc:3c:c2:93:30:14:
84:20:ee:32:5f:29:1b:be:69:b9:0e:1a:19:ec:2d:f7:fc:12:
5d:ff:72:3a:29:1a:69:2b:f8:74:ff:70:c7:df:53:01:0b:44:
4e:a5:2f:3f:46:73:bb:d0:07:1f:69:c1:55:88:8d:79:73:61:
8f:d6:75:c8:bc:8d:de:15:7c:3c:0f:0a:75:63:67:b6:a3:b4:
2e:10:42:22:23:00:34:88:ab:e2:3c:a7:7a:10:ce:af:30:17:
77:e3:34:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:36 2026 by rpki-client