Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File: Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier: cDBdxkeER9p3os0e7qSIdU7Le05+RNdbvAc4nKv/DvQ=
Subject key identifier: 8B:F3:DA:E9:A5:81:76:1E:91:AA:1D:0B:07:F7:02:51:F7:D4:B2:C7
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer: /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial: 019D98BD3F63F838DA0C76F6C4841C5DA3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number: 1568
Signing time: Fri 17 Apr 2026 00:00:32 +0000
Manifest this update: Fri 17 Apr 2026 00:00:32 +0000
Manifest next update: Sat 18 Apr 2026 00:00:32 +0000
Files and hashes: 1: 1-fDNlBb6dsCiNLwxYDANed4hKIM.roa (hash: 9WlEGtitw0vTUbPB2qKPl7C4ap723iLSdLT/GkzHijE=)
2: EeCb3xsgZulN1LmF6ikRslFxSCw.roa (hash: jjFm2wg01dKI6dAHnYnTU6ux1bEVbh+vpvsqWitVX/U=)
3: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: p4U6eqyJXMsvedKufnFDthquVJelsgnMzCRSxhmbqLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3f:63:f8:38:da:0c:76:f6:c4:84:1c:5d:a3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Validity
Not Before: Apr 17 00:00:32 2026 GMT
Not After : Apr 18 00:00:32 2026 GMT
Subject: CN=8bf3dae9a581761e91aa1d0b07f70251f7d4b2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:db:a8:2c:16:40:c7:d3:9c:55:df:65:94:
ff:67:0a:76:2b:84:58:2c:97:d6:26:fc:4c:50:1e:
ac:d0:49:ba:c1:9a:62:b4:32:16:91:ca:bf:9d:b4:
b3:82:e3:21:b3:61:1a:04:40:93:fa:a8:9b:80:56:
4d:5f:e0:ba:0c:c3:d2:9d:6e:b5:e7:02:1e:40:a7:
95:e4:04:5f:87:52:b7:69:3a:74:4e:18:42:76:4b:
9b:41:fa:32:24:58:26:1b:48:1b:5a:f2:54:32:1c:
d5:59:73:bf:f6:d7:64:0b:fe:24:75:c1:60:c3:d7:
52:95:bc:ec:29:ef:c0:55:0b:ea:d8:26:8e:a9:86:
9b:e3:a7:83:6d:9e:c8:c7:b1:c4:b4:ef:99:6d:da:
3c:15:98:29:9b:23:6e:ae:00:07:65:03:3a:e8:5a:
3f:8f:42:d9:96:1a:31:a4:95:38:d0:50:39:37:fe:
6f:d3:1e:d8:52:cd:4a:d2:a9:2e:49:b9:30:7b:aa:
b7:e8:95:e5:66:d8:40:a3:a6:19:99:74:a5:74:3a:
47:97:66:c3:80:08:02:ca:b8:6f:3e:41:d4:f2:14:
c7:79:36:02:01:e0:60:f4:9c:67:e4:43:9a:07:c0:
07:2f:f0:c3:12:cb:d1:9e:7c:f9:03:78:b1:cd:2b:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:DA:E9:A5:81:76:1E:91:AA:1D:0B:07:F7:02:51:F7:D4:B2:C7
X509v3 Authority Key Identifier:
keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d2:ac:85:cf:63:b2:67:20:f2:55:32:88:ac:af:a8:de:8b:
e7:84:d0:b4:bd:a9:c8:72:38:0c:6b:a5:25:bc:41:1b:3c:44:
82:49:74:bb:79:c4:c5:c4:35:25:fd:f4:91:a3:7b:8b:1e:2b:
37:2f:6a:51:0e:46:20:c9:2a:4a:de:70:6c:c0:ef:35:ac:bd:
b3:f7:65:44:f0:20:0f:84:a7:eb:ab:0a:e1:ea:c8:f4:79:92:
99:89:ec:c3:ac:f6:db:17:61:8d:3e:b5:c4:4d:66:26:39:dd:
ce:f7:27:d0:ab:b5:28:92:af:e3:f7:01:7d:1a:56:76:64:7d:
1a:93:ab:50:3b:33:8e:98:f3:05:f4:11:ac:04:37:c8:db:b7:
98:88:70:42:b9:c5:6d:2a:90:fc:db:cc:05:c6:b3:7e:a5:f0:
09:50:33:41:42:26:c6:5e:1b:99:c9:c7:3c:2f:a2:42:e3:ea:
a1:93:31:00:d7:89:05:e3:bc:67:82:35:9a:0c:cb:5c:1a:a7:
c6:f5:fa:83:9b:bc:72:ba:ca:ce:ee:32:43:29:18:78:23:73:
3a:dc:1b:15:36:5d:42:35:ed:58:e0:54:5f:7b:c5:a9:df:a3:
22:be:b4:3b:b2:21:03:5d:25:e6:2c:5c:5a:29:44:94:70:51:
70:4f:16:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:20 2026 by rpki-client