Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: S38Gs8IZdfWnD9GfiYlNrpIr4/+nPrMrXe+GNb4LuNs=
Subject key identifier: 1C:5F:CF:43:62:4A:A0:86:62:98:25:A7:17:C5:7E:0A:70:19:35:13
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019D9A3E8B4A99A021BA7717A14A5292C665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 190B
Signing time: Fri 17 Apr 2026 07:01:23 +0000
Manifest this update: Fri 17 Apr 2026 07:01:23 +0000
Manifest next update: Sat 18 Apr 2026 07:01:23 +0000
Files and hashes: 1: OTudHmFNPy5T-L1hWQnog6A_ceI.roa (hash: wIvVhud/9mGvpy1rcC5MEiOLhE/0LwqjcBJHlLA5qFQ=)
2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: CJVAi7c5tsBGj1zT1IRWHt+/JjoH+CAeqX+cERiKYdM=)
3: WlAKMNPruSZgFaPvtYJyDu67Od0.roa (hash: 45tdzajp934hoCjwF+mGUtWY46Eoj3bjg9Xls4lMV3A=)
4: jx_sKdRtOfabdIlKo0kHp1Tkfqc.roa (hash: 6QoNqrldBivqPVb0PBUzQN4og1sk/zgtCY4eXMCDzGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8b:4a:99:a0:21:ba:77:17:a1:4a:52:92:c6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Apr 17 07:01:23 2026 GMT
Not After : Apr 18 07:01:23 2026 GMT
Subject: CN=1c5fcf43624aa086629825a717c57e0a70193513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:d1:b8:c6:a6:09:a1:e8:5a:c7:75:1e:13:
52:8f:0d:25:c2:14:ee:e9:88:2c:7d:ea:eb:26:57:
f9:2a:65:8a:08:f4:f0:ed:be:a2:be:29:9f:50:61:
30:88:08:72:7e:32:5c:98:f8:5e:3f:f2:10:44:24:
8b:9f:2c:79:e1:c0:68:33:d5:65:bd:74:59:37:be:
35:d0:c3:5f:38:76:75:95:6a:30:4d:e4:47:63:90:
ea:64:25:aa:b1:b1:e9:e7:85:78:79:a1:24:0f:c6:
23:c2:f6:13:c9:5e:4d:57:c0:9c:f7:20:b6:0c:01:
9e:25:cf:10:26:86:3d:c9:5c:bd:53:56:68:a5:0f:
bf:cb:0b:7a:33:c5:9a:0c:ad:08:ca:b7:c9:fc:68:
9a:40:87:19:37:a4:c5:9b:50:4b:c2:7e:4c:fc:5b:
d1:19:5d:b9:65:0d:c5:c9:25:73:c3:a3:1e:e4:f4:
39:59:87:6b:71:88:14:40:a4:64:e0:87:a5:6c:0e:
c5:e5:53:59:66:74:cd:2c:c6:eb:54:27:8b:b5:ee:
66:5e:38:2e:d5:6d:f9:66:8c:f6:09:26:25:27:4c:
18:ce:6b:a9:c5:79:15:86:89:91:c7:e4:8b:0c:7b:
d5:cf:14:c6:3b:cc:30:63:4a:4b:80:7a:7b:d7:b0:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5F:CF:43:62:4A:A0:86:62:98:25:A7:17:C5:7E:0A:70:19:35:13
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:42:67:ef:b5:e8:bb:27:1b:4d:cc:fd:45:09:96:b6:f9:ef:
43:6b:3e:9d:0a:5d:19:bf:24:a9:9b:26:dd:73:ac:48:bf:c1:
92:36:f4:94:a5:8d:95:8e:8c:b1:3c:6a:49:d9:23:55:31:58:
c3:97:25:8f:c0:2e:b5:ff:b2:fc:2c:c0:6c:ca:77:cf:4d:ae:
57:e8:18:4d:c0:f3:aa:c7:23:73:22:56:1f:8e:b2:ca:8f:87:
07:da:8f:7e:57:a1:a4:bd:05:76:0b:80:f1:21:2b:3e:e4:2e:
ed:0d:70:89:78:e2:74:7f:63:d9:66:23:74:ba:b8:1e:3d:c7:
4b:99:4b:bd:5c:6f:58:e5:f3:ec:02:e7:65:04:57:b9:17:1a:
83:0c:2e:00:45:55:c8:96:9b:a6:6a:b7:1c:5a:2f:46:96:70:
55:cc:f4:63:64:70:bb:e6:b2:16:5f:dc:c1:ba:12:4f:dd:cd:
f7:36:5b:36:01:be:c9:df:52:0d:1e:26:34:53:b7:32:c5:52:
76:11:21:85:ec:16:6a:eb:34:79:d9:be:e5:94:0c:ca:b9:d6:
a5:c2:51:c9:57:a6:1b:47:99:87:89:ca:58:3f:8a:9b:7e:14:
be:15:f3:1f:08:44:f8:28:38:8e:fd:db:87:c4:88:81:c7:ef:
17:cc:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:21 2026 by rpki-client