Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier: IuoQTYCw7jYlnqUdvXEGgbYEF24AOR2w0ghAsUW49zc=
Subject key identifier: 91:0C:93:1E:E7:B5:31:D6:C5:B8:5F:EC:8C:A7:A5:B4:15:C3:93:CB
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 019D98BDC85333FEFCE39B4C81484A85947A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number: 1071
Signing time: Fri 17 Apr 2026 00:01:07 +0000
Manifest this update: Fri 17 Apr 2026 00:01:07 +0000
Manifest next update: Sat 18 Apr 2026 00:01:07 +0000
Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: uqngD9lQlRFkLo+sARO9hvLjOWA0eaxD3b++rl3tGgI=)
2: b0XSo4jvDuO8MB_EbsL2q8I7iqE.roa (hash: zA5xuJEEHRh1YzXZne76m8fjU9QyWncSAVrCc1799S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c8:53:33:fe:fc:e3:9b:4c:81:48:4a:85:94:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Apr 17 00:01:07 2026 GMT
Not After : Apr 18 00:01:07 2026 GMT
Subject: CN=910c931ee7b531d6c5b85fec8ca7a5b415c393cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:7f:e6:1a:8f:7d:5d:b9:c2:51:e1:c0:1c:
31:fa:8d:e7:86:71:55:ee:c9:79:a7:f7:9a:24:c0:
6b:78:a0:9c:85:fc:20:00:4b:9d:4f:eb:66:7b:47:
c6:1f:24:a6:29:72:f6:a4:e3:a9:8e:c7:e8:c9:16:
13:fe:6e:97:8d:ab:21:d3:1f:34:3f:93:18:53:25:
ff:b6:3f:20:1c:3f:b3:6f:d6:ca:69:ed:94:1b:f5:
3e:34:93:f5:61:df:08:37:f4:f2:7b:16:8c:5a:7f:
a5:dd:6d:5a:e5:da:40:b7:1c:e7:1d:32:ac:6a:a1:
13:d7:d5:cb:65:7f:86:c5:2d:32:44:b8:eb:e0:d7:
b9:9c:43:03:f3:d7:07:1d:b8:d1:eb:a6:1d:87:2d:
e2:80:a7:9a:d5:da:8b:d6:eb:58:25:e1:72:12:ff:
68:5b:e2:3b:40:2d:26:71:88:6f:2f:5e:30:b4:ed:
54:21:0d:18:16:05:00:22:33:45:1c:d7:ed:f5:2b:
94:e6:cf:a1:d7:6e:8d:e2:19:64:f0:52:42:70:36:
61:77:52:24:24:e9:2e:1b:0f:b8:7d:58:fa:9c:76:
29:bd:8c:b3:0f:52:73:4f:e5:35:b4:95:dd:8d:b8:
9a:53:7f:2f:10:c5:f8:1b:76:10:05:3a:3d:12:8d:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0C:93:1E:E7:B5:31:D6:C5:B8:5F:EC:8C:A7:A5:B4:15:C3:93:CB
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:01:80:87:72:a2:49:20:2f:a1:e2:2b:5d:ba:ea:e0:9f:f7:
7b:33:c2:4f:c0:84:02:46:a8:e1:a6:fa:1f:5d:bc:9b:40:e0:
e7:d7:34:d4:95:6d:d3:20:04:bf:c6:99:c7:81:b6:21:3d:54:
75:af:bf:e4:3c:39:4a:7e:13:ee:b1:f1:ac:93:56:72:1a:85:
8b:cb:7d:67:4e:d8:6d:12:9d:6c:c4:53:c2:6a:31:06:f7:89:
86:d0:8d:c9:b2:40:3e:53:32:04:61:f1:4d:0f:7e:e9:97:93:
ed:9b:f4:9b:04:1c:8a:2f:93:1d:f5:5c:dc:e1:39:04:f4:31:
2a:50:32:4d:be:99:9c:a8:c2:7d:d7:3a:c2:79:f6:23:9c:bd:
e7:7f:a4:3c:c3:77:68:e9:ed:c1:b2:9b:6a:20:be:13:bf:d0:
b0:b2:69:a3:7c:64:81:60:6c:76:67:c6:9d:3d:77:20:eb:6d:
7c:7e:98:1f:b2:27:d2:38:17:9c:c9:d7:36:9b:d4:c2:d9:23:
f2:64:c1:18:e0:0c:80:ab:e9:25:15:f4:cd:54:c7:81:c3:57:
45:16:78:40:80:5d:8a:6b:fa:c7:2d:c4:e5:5e:e5:57:a8:a5:
d5:3e:cc:e5:80:15:26:18:9c:c0:e6:be:dd:21:1b:b5:15:c3:
97:87:c6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:19 2026 by rpki-client