Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: O4AxHPneN/j3Efn1Cv7aV3nisAdHXj7/dPWY5SdtEYs=
Subject key identifier: CF:C4:FC:AC:FE:43:E8:0C:57:E5:03:2D:72:92:58:D1:AB:2F:59:92
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 019D9B87D1441745F4B8FC7B1733AF4EC147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0BE3
Signing time: Fri 17 Apr 2026 13:01:02 +0000
Manifest this update: Fri 17 Apr 2026 13:01:02 +0000
Manifest next update: Sat 18 Apr 2026 13:01:02 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: 8E6oF1JJBmwxiVZ+hUYFt/emUZH3SaCTp6DxOnmeFQM=)
2: Tky4vnXZioTC1TXQq96JWTokgHg.roa (hash: aDRCWx0v8/LaP/gIfUVdK0QiOW0vds7flVFVgoIFu/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d1:44:17:45:f4:b8:fc:7b:17:33:af:4e:c1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Apr 17 13:01:02 2026 GMT
Not After : Apr 18 13:01:02 2026 GMT
Subject: CN=cfc4fcacfe43e80c57e5032d729258d1ab2f5992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:0a:76:42:06:f8:d9:7c:32:50:50:b9:b0:
c3:2a:36:bb:ad:ca:1b:38:6d:36:a7:8a:a0:02:09:
45:fd:52:3b:23:45:7b:37:11:23:84:6f:0e:2d:1a:
e5:e4:12:af:d7:fb:2d:f3:46:49:12:f9:eb:2b:47:
bf:6d:ab:74:7f:f8:ac:8e:ff:06:cc:fa:5d:4e:62:
97:17:ed:0c:96:79:4d:69:52:49:8b:fd:4f:be:2a:
1d:53:a0:d4:8c:3f:d6:ca:c7:1a:50:b0:fd:fa:f9:
fb:3d:12:86:f7:03:73:a2:1c:9a:59:f2:4b:bc:a9:
cd:2d:11:a3:6e:85:97:5f:a6:28:90:51:c5:22:7f:
92:bf:51:35:5d:16:8f:b0:9b:0c:e6:9a:98:87:f5:
87:6b:56:0b:5d:42:76:00:64:a4:ae:db:8f:b5:33:
27:66:e4:77:7b:0c:c4:8f:5f:b8:3a:47:e9:0b:82:
2d:c0:90:42:d5:a0:fc:5e:08:03:10:4a:03:bf:d9:
b0:6a:6a:d8:ec:02:13:d6:7f:74:70:8b:79:7d:1a:
f9:b2:cf:a4:38:e9:4a:72:ec:b2:70:51:09:04:a4:
a0:4b:b1:e9:5c:02:45:e7:13:05:f7:8b:4b:29:14:
b5:33:43:60:84:75:b1:d8:1b:74:70:f4:07:e8:57:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C4:FC:AC:FE:43:E8:0C:57:E5:03:2D:72:92:58:D1:AB:2F:59:92
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5a:a7:cb:d8:23:85:ca:e9:07:37:69:7c:d0:38:0c:d2:f6:
84:45:9f:60:9b:53:b0:51:38:2a:77:97:79:41:f7:5c:b3:e6:
46:45:a5:76:df:b6:8f:6c:eb:ad:a6:69:8b:e1:0f:5e:1d:22:
c9:29:6d:de:39:11:77:5c:b0:88:a2:b1:93:ce:7b:24:2f:1f:
bd:de:74:d0:a3:5e:ed:cb:ad:2d:2a:39:dd:12:c2:78:2f:54:
fa:ad:48:05:b5:c7:3e:f3:85:37:ee:ad:11:3e:35:35:25:e5:
5f:96:50:81:f1:4f:9f:8b:00:74:47:eb:92:f8:6f:9f:f6:9e:
6e:7a:48:b2:bb:57:de:67:a5:31:9b:35:23:23:9a:1c:2b:db:
8f:af:65:41:5f:39:2e:d7:e8:d6:1d:3e:78:03:f6:85:92:32:
66:d1:d4:5e:b6:1e:ea:f6:4d:0e:0e:f8:2b:25:3f:03:68:d0:
e3:12:2e:99:be:65:5b:af:19:e7:5c:96:31:c4:70:a4:1a:c7:
e9:3a:12:69:bd:18:dc:42:aa:07:2e:8c:ac:80:e6:20:09:d9:
a0:29:00:ff:57:80:57:36:13:68:cd:51:f0:11:02:96:f5:6c:
ca:f1:90:8d:c7:8f:ca:8c:71:e9:4f:fd:eb:81:ca:3a:07:b6:
c1:37:cf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:07 2026 by rpki-client