
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: E77srchFPcwXNjm/TdIKnpvDhrCLRKSsGamHyGoBy8M=
Subject key identifier: 68:0E:E5:AA:0D:CD:16:66:2D:60:47:6E:C8:9A:CF:7A:C2:7F:01:90
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 019D9BBF7226D3A362BE86D43360AEA23815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 14:01:47 +0000
Manifest this update: Fri 17 Apr 2026 14:01:47 +0000
Manifest next update: Sat 18 Apr 2026 14:01:47 +0000
Files and hashes: 1: E3Abz8c2x25X2p1IuNZFKekLDzE.roa (hash: DciKvL6unAo5I4YBQh4SUA/jwjzYuA3QTOA40FWqmwU=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: WTONX9R6il+KkV3UERfSMCg1lr7tMS03qNTHrWu1I24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:72:26:d3:a3:62:be:86:d4:33:60:ae:a2:38:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Apr 17 14:01:47 2026 GMT
Not After : Apr 18 14:01:47 2026 GMT
Subject: CN=680ee5aa0dcd16662d60476ec89acf7ac27f0190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:f9:27:e6:c9:2e:a0:30:7a:bb:7e:f5:6d:
6d:55:af:1a:92:3b:e2:19:2e:92:d4:fc:0b:73:10:
21:76:c6:e2:37:b5:95:5d:79:4d:27:42:19:56:f6:
1d:f6:ca:c5:73:67:7f:2f:97:21:a7:34:1c:bf:d9:
ee:b9:65:42:77:e6:68:06:6b:c2:89:72:4e:2e:df:
53:1d:2e:11:14:50:70:e6:19:b2:5c:e7:5a:0b:12:
ce:8b:d9:2f:6b:b8:60:a3:13:35:f0:c7:d4:0a:71:
90:61:94:ee:ca:8a:e4:ad:8a:bb:69:ad:5a:8f:5f:
46:71:33:47:6b:18:54:de:88:29:d6:7e:6f:a3:6f:
66:dd:4e:f3:36:7d:64:06:25:23:66:66:a4:e2:45:
71:62:53:88:c9:a3:92:23:0d:20:bf:90:41:51:b3:
8a:28:e5:96:c2:89:69:ff:a0:5d:36:75:ba:e6:20:
66:30:69:6a:57:c6:ab:a9:52:37:d2:69:8d:b0:61:
97:ee:28:53:e6:02:49:eb:17:f6:78:e5:72:31:49:
fe:ca:2d:6c:fe:db:1d:ec:3f:18:49:bd:3e:ba:dd:
54:b0:8c:b1:de:ce:68:48:ff:b3:05:7f:66:2c:06:
68:a5:7c:1d:13:d5:87:b7:7e:d3:4a:28:ac:e3:11:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0E:E5:AA:0D:CD:16:66:2D:60:47:6E:C8:9A:CF:7A:C2:7F:01:90
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3d:97:17:22:9d:91:b3:58:79:68:e8:2b:f5:8b:88:0c:66:
26:62:14:8d:d2:6f:52:d3:a6:e0:ca:49:29:b0:ba:2e:17:06:
25:83:f7:18:48:76:47:71:66:52:be:66:b5:ab:6c:06:07:c6:
bb:71:04:93:3d:1b:2c:15:99:38:0d:8d:52:94:55:54:60:c7:
9c:5e:6a:6f:d3:b8:ac:33:5b:2a:fb:90:53:e0:0b:e8:5d:83:
67:c8:75:ad:71:cd:b0:3d:28:9b:c2:2b:a2:34:8e:5d:84:25:
50:68:63:9f:23:b1:b5:93:af:7c:01:7b:8b:d6:89:3d:cd:b7:
e0:b6:0f:61:dd:de:9f:c6:1d:78:38:38:ea:cf:5a:af:bb:53:
f5:e9:ff:a0:fb:1d:7b:15:d4:d8:99:07:29:70:4e:50:49:c0:
af:b8:a7:4b:4b:f9:48:fe:31:59:90:6f:b2:5c:18:8e:52:c3:
72:3c:db:8e:22:73:6f:60:5a:46:36:c9:02:13:04:2a:85:5c:
f7:d4:08:19:f9:f1:d8:6b:41:d6:74:74:93:74:88:39:9f:32:
b0:6e:26:16:7f:30:30:12:5b:0e:4f:5e:41:99:bb:9a:48:f0:
34:5a:a4:d0:df:60:b4:7b:ac:23:86:2a:81:00:c0:c1:1b:4d:
b0:93:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:09 2026 by rpki-client