Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: 4+9/4AefVgWFOnspVEB144f2jtM5UtGreaDrGOUKYUw=
Subject key identifier: 42:1B:6F:55:B6:92:19:93:7C:E5:63:BC:5B:10:03:F2:F8:EE:A8:39
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 019D992B694EE64ACE13254E84629C908148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 15D1
Signing time: Fri 17 Apr 2026 02:00:52 +0000
Manifest this update: Fri 17 Apr 2026 02:00:52 +0000
Manifest next update: Sat 18 Apr 2026 02:00:52 +0000
Files and hashes: 1: fEi6HkF-C6surJLz6ozVnN3DCKA.roa (hash: Sz33Ft2tcLfICDqBq5ZnLaKyfti3irB30drgbFVQKSw=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: I70kysVdAL+SeOf6LWsPLztbIrXnH49hviMl+WCoTqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:69:4e:e6:4a:ce:13:25:4e:84:62:9c:90:81:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Apr 17 02:00:52 2026 GMT
Not After : Apr 18 02:00:52 2026 GMT
Subject: CN=421b6f55b69219937ce563bc5b1003f2f8eea839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4c:a8:cc:19:40:ed:f9:25:50:68:d6:24:9b:
95:d9:db:bb:db:0c:75:ba:b0:dd:0b:82:a5:92:c6:
b6:7c:0b:6c:f3:1a:5a:dc:88:6f:90:ee:7b:c3:42:
66:e0:72:84:38:e7:c1:ce:6e:d4:24:d7:f7:9c:37:
51:ed:1c:27:fd:71:35:53:2e:e7:9a:a6:0d:26:c0:
d3:94:fa:fe:30:3c:04:0b:99:a8:d8:cd:c1:bf:0c:
03:57:aa:4a:5e:21:76:e3:a3:6c:cf:c0:f1:69:70:
5c:dc:ca:1d:61:85:91:fe:97:6a:de:e8:6a:94:c4:
2c:eb:4b:85:57:9b:a0:c3:d0:23:57:57:8a:5e:85:
64:65:66:d8:f7:9d:99:f7:39:5d:87:11:8a:04:6e:
a6:ad:d8:a7:bd:21:dc:ae:5d:48:86:e5:95:92:5c:
c0:5c:19:86:25:4c:bc:4f:c8:5a:58:a5:cc:03:0a:
90:df:0e:8a:92:bd:f4:80:95:b6:dc:39:f1:d8:32:
82:b1:29:6f:96:81:1c:1f:20:bd:c6:ce:2d:10:50:
10:ba:79:b0:90:e1:df:8d:a4:c7:2b:ed:29:25:2b:
44:cf:73:13:b7:6d:b2:04:65:69:be:f8:63:a3:83:
09:23:8c:f9:42:d0:51:52:03:8f:cb:6a:12:70:a5:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:6F:55:B6:92:19:93:7C:E5:63:BC:5B:10:03:F2:F8:EE:A8:39
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:17:f6:ec:c8:6f:89:2a:92:5f:32:e7:0a:0a:f1:1f:73:b6:
55:46:e4:0c:0c:ab:90:8a:d2:14:b4:4e:5c:a1:1b:6d:5a:82:
cf:2e:ff:b6:e3:8e:ae:51:0b:9d:cf:69:a3:c5:24:7c:7e:3f:
ed:9c:69:a9:b2:2a:1c:65:cb:1c:e7:4b:2d:81:dc:30:fc:4e:
ff:d5:2c:ec:65:03:05:b6:74:da:6a:2c:79:1a:5e:d3:f5:65:
c5:aa:50:51:cf:a2:39:8c:7d:2a:11:d2:4b:e2:3c:04:75:67:
93:84:d5:e8:2a:ff:95:11:e4:3e:7a:c4:9c:f6:09:23:48:5b:
17:21:29:43:b2:89:4b:82:93:3a:48:47:b1:7b:72:16:8a:c9:
d7:0f:0a:62:93:ca:ee:9a:7a:b7:45:60:4c:3b:f6:ab:34:c1:
d1:77:79:48:66:e9:24:59:1f:e3:90:a5:8b:54:77:9d:7e:84:
d2:59:91:1a:43:f3:3f:43:20:86:3b:72:a6:c9:85:ed:55:ae:
fa:8b:6e:21:55:29:1e:42:03:a9:15:7f:6a:a6:94:27:ad:04:
f9:0b:04:9f:76:b7:16:85:e1:62:16:9a:9f:c6:cb:19:65:2e:
b1:71:80:43:28:b8:26:29:d6:6e:8e:58:0f:eb:8a:8a:65:7a:
e3:6d:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:59 2026 by rpki-client