Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: dfKkWErQ28bSL747/HtQ3/RsAQSBshKQSW/CQnp/DjU=
Subject key identifier: 44:8E:B8:65:1D:1F:87:16:9C:F3:1B:8E:32:77:44:B0:A4:80:9B:A5
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 019D9AABB9AD091A2CDFCB55194779A50F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 0AD5
Signing time: Fri 17 Apr 2026 09:00:38 +0000
Manifest this update: Fri 17 Apr 2026 09:00:38 +0000
Manifest next update: Sat 18 Apr 2026 09:00:38 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: Ig/5+kis+/JZdi2Ors9Q3DeA58Os2PRHMViJjYbBm9I=)
2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b9:ad:09:1a:2c:df:cb:55:19:47:79:a5:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Apr 17 09:00:38 2026 GMT
Not After : Apr 18 09:00:38 2026 GMT
Subject: CN=448eb8651d1f87169cf31b8e327744b0a4809ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:9b:5e:c1:6f:53:92:24:ad:16:23:86:74:
26:fa:8e:33:fe:d8:ee:42:f4:98:b8:35:96:2a:d4:
7b:ae:cd:e2:74:cb:c6:75:06:43:74:f9:09:85:d9:
32:27:d7:fd:25:50:e7:2f:27:ab:0a:8e:a3:8c:77:
d1:86:5f:14:e9:34:54:5e:2d:9f:c1:c1:a3:17:01:
69:f5:61:fd:0d:f3:79:f1:f9:74:89:65:24:62:f9:
24:22:70:5f:ce:c1:ba:f2:21:63:72:64:1c:13:1c:
91:59:ca:91:70:c9:dd:cb:cd:0c:c7:4a:87:9c:5e:
47:8d:f7:ec:32:f1:d7:66:e5:81:a2:80:4b:cf:d6:
84:2a:3d:6e:be:24:60:d3:07:86:4c:da:af:53:c9:
10:84:b6:ee:6b:d3:75:ed:ad:83:6e:75:6f:02:b5:
da:95:1c:39:56:00:fb:63:0f:f6:72:14:91:a4:6a:
a0:fc:d3:f6:c5:27:91:ce:72:4e:10:11:35:bf:7a:
4c:87:e7:8f:0c:30:1d:29:7d:75:ca:6a:a8:cb:dd:
9c:7b:91:fa:bf:ef:1f:c1:af:7d:30:b5:25:35:a1:
53:fe:9b:bd:c1:5f:63:a8:22:b8:c6:07:54:89:13:
c3:c2:f3:57:4e:fb:ed:83:f1:75:58:00:4c:66:b2:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8E:B8:65:1D:1F:87:16:9C:F3:1B:8E:32:77:44:B0:A4:80:9B:A5
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:68:78:b9:70:10:f4:a2:bb:49:1f:34:ea:fa:3a:b6:d4:90:
8c:bd:da:b8:70:d2:ec:de:c7:b7:80:91:38:e1:e0:13:f7:ce:
c0:25:cf:ee:79:96:f0:4f:6c:6b:fc:de:49:e3:c4:c5:c8:ce:
53:8b:b9:0c:bf:92:fe:49:b1:e8:4f:4b:e8:44:0f:2a:e7:99:
f2:7a:19:66:22:25:d1:0c:65:21:13:2e:15:80:c2:0b:a5:5e:
97:a4:dc:3e:9d:0b:40:83:65:32:44:4a:d7:c2:80:5e:3f:2f:
e8:c1:7b:da:fb:ee:9c:5b:99:39:a5:5d:48:ee:39:fc:7c:16:
ab:6d:86:2e:58:b9:91:cc:f5:0c:19:3b:9d:f3:a2:82:78:92:
96:80:ad:0c:2e:9b:ca:55:21:7e:96:21:77:e1:e8:ec:61:b9:
7c:d7:19:da:5a:bc:ba:3f:55:3b:1e:e7:8d:8f:1a:ab:2a:5c:
b5:af:c4:b5:34:50:65:5b:6f:65:92:fb:c9:d6:87:73:f7:2e:
ea:06:cf:f6:84:00:6c:20:2c:71:00:6b:d2:e1:7e:a6:65:c7:
ec:14:03:35:4b:60:01:d3:c6:05:1b:de:c2:3e:a1:75:f6:8d:
c1:28:16:81:44:1a:77:ce:6f:a1:69:a4:ac:d9:ae:ff:ba:b4:
23:ca:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:38 2026 by rpki-client