Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier: LZ/CFT6Vg08HrGaBPJMh6FUGEgnu16eFj1ABYq7b5m8=
Subject key identifier: 2B:11:BE:CD:C8:40:6D:D7:3F:75:6B:93:EA:36:21:32:17:5D:96:11
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial: 019DA3E6FE145030497493796A9076CDA868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number: 04A5
Signing time: Sun 19 Apr 2026 04:01:57 +0000
Manifest this update: Sun 19 Apr 2026 04:01:57 +0000
Manifest next update: Mon 20 Apr 2026 04:01:57 +0000
Files and hashes: 1: Is0EtUEGPtj5iPMrI__B634d_Gg.roa (hash: UcnAE32bQjXyoFuSdzK7Ox1KjdWOO+CqE8BXmt6ncsQ=)
2: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: FyoalIwJCAqEseZsjqzJwstNw2gIPcIbaR6JevslAsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:fe:14:50:30:49:74:93:79:6a:90:76:cd:a8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Validity
Not Before: Apr 19 04:01:57 2026 GMT
Not After : Apr 20 04:01:57 2026 GMT
Subject: CN=2b11becdc8406dd73f756b93ea362132175d9611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:31:51:5c:6a:f3:dc:03:d7:34:d4:21:2f:
1b:89:4f:c3:6f:f3:24:e4:fb:00:78:58:53:5f:9f:
4e:89:7c:53:88:5a:01:e8:c5:98:88:6b:3e:38:69:
f5:2a:87:a7:76:c4:ae:da:8f:39:61:70:46:be:e9:
f2:8c:e1:ed:ab:69:bf:53:82:25:5d:4c:2a:41:0d:
46:95:83:b0:ac:67:1a:f6:0b:5e:f0:fd:b7:52:d7:
fd:7e:e7:bc:61:82:14:b0:48:97:0d:76:70:fe:4d:
88:48:52:09:da:cf:dc:0a:50:5e:26:41:fa:a2:c3:
79:4e:11:e4:e2:c7:96:ef:9f:b0:d4:1b:57:0e:02:
84:c3:ce:7d:5d:1f:64:1e:9a:96:aa:c4:f7:06:d4:
ef:dd:26:e7:86:d4:02:f5:ea:48:24:bf:61:c9:73:
1c:ce:43:07:f4:d0:be:22:09:e6:77:96:d2:97:a2:
02:e7:2b:01:e5:1b:e5:9a:34:98:56:f1:db:e7:df:
e8:4e:f6:35:13:ab:76:eb:ef:1e:f8:51:1a:58:b6:
6f:17:66:81:a9:b5:4a:90:ef:d2:62:17:76:78:f7:
df:7a:32:7b:f7:7b:97:1b:1b:c8:95:ab:c2:83:21:
17:45:b2:7a:d1:83:34:66:e9:12:f0:6f:4b:44:66:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:BE:CD:C8:40:6D:D7:3F:75:6B:93:EA:36:21:32:17:5D:96:11
X509v3 Authority Key Identifier:
keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6e:85:93:78:c3:c7:3a:f9:87:31:5d:d6:79:ff:d7:e7:52:
db:dc:d3:e8:89:6a:68:0b:99:ce:e0:08:df:fc:0c:fc:ef:ab:
86:cc:ba:fc:6f:98:28:c1:7d:06:69:a1:e8:e8:a3:45:9c:fa:
cb:6c:d2:51:74:ed:32:3a:ad:d0:22:81:dc:77:b4:cf:d9:de:
33:1e:de:a2:65:be:3d:81:69:ba:bb:a1:4c:49:a6:c4:24:45:
39:b6:76:a9:98:2c:3f:d4:ce:bb:65:08:c7:a5:28:f3:fa:7b:
ba:61:93:46:6a:df:ce:d2:df:43:f8:40:5d:54:ac:c4:e3:3d:
24:bf:10:cc:da:a4:0b:af:e3:7a:dd:fa:d2:f7:04:bd:dd:ab:
f4:18:c4:c2:fd:d9:fc:e0:fe:89:50:c4:c3:f2:35:e5:a7:cb:
13:53:13:21:85:5d:d4:50:f2:44:a6:48:cd:b1:4b:02:12:37:
91:3c:6f:bd:96:79:f5:d1:5f:8d:99:cd:8e:a1:15:14:fb:9e:
98:77:74:68:3a:71:29:7f:83:79:a0:92:7c:60:08:d3:55:93:
1e:80:5c:b1:0a:10:87:65:0e:e0:4d:a7:66:a7:97:24:36:dc:
bb:a3:cc:44:49:a8:cc:d2:b0:00:b7:b5:04:91:8d:f5:32:c3:
b9:75:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:24:37 2026 by rpki-client