Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: 4PZi0J6MqbjIMoHm09mf0gUzNGnfUMRF/ZVJ9m66cU8=
Subject key identifier: C5:B9:58:20:D2:42:25:62:F2:2D:C5:4E:AC:7E:99:22:BA:6D:DE:FD
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 019D98BE0363E03BA1D9B64FB1A32B19AB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0D2F
Signing time: Fri 17 Apr 2026 00:01:22 +0000
Manifest this update: Fri 17 Apr 2026 00:01:22 +0000
Manifest next update: Sat 18 Apr 2026 00:01:22 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: sOf9wyHNRNYcNxOZF2lN7Ssq/RqAHZ5sBQbX28ty+2o=)
2: UKN4qXdB5emZZX9TzM0PF4jJuRs.roa (hash: Y842Sm+wv4FkMHDbdNeBmo19SEMhJtIByCHRBpFd6qo=)
3: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (hash: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:03:63:e0:3b:a1:d9:b6:4f:b1:a3:2b:19:ab:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Apr 17 00:01:22 2026 GMT
Not After : Apr 18 00:01:22 2026 GMT
Subject: CN=c5b95820d2422562f22dc54eac7e9922ba6ddefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:07:60:35:64:1a:e6:85:b8:14:a9:68:ba:
aa:73:9b:69:28:cd:e1:a7:00:80:bb:cf:09:53:64:
49:5c:1f:75:17:03:92:6f:9a:30:0f:2a:a2:58:9e:
6d:35:68:69:7a:c3:e7:68:e6:20:33:25:8b:87:5b:
ba:f9:74:f0:1d:b3:a6:bc:be:d5:85:b5:dd:19:7a:
fa:f1:98:77:63:76:59:a8:27:67:53:ed:10:37:6d:
ae:6e:03:72:03:63:cc:1b:d7:b4:4a:ac:72:ef:71:
93:23:64:44:5f:52:3d:7c:b6:39:90:03:33:8b:c3:
1a:75:f7:af:b4:a9:d4:71:22:91:66:fe:bf:5d:99:
de:01:05:dc:54:68:f3:f8:04:a5:ff:1f:0c:9d:8b:
15:b2:89:13:af:a6:83:fd:73:fe:47:65:91:2f:53:
e1:22:e8:75:ae:b9:dd:33:ca:22:10:33:5b:f3:f1:
1b:6a:85:b7:b9:06:70:96:3f:3b:53:38:9b:ee:d7:
ab:42:5e:67:03:64:be:a9:6a:9d:7f:41:02:26:0a:
ee:07:0c:ff:cd:d9:d7:a1:c6:f1:a5:af:27:ad:3c:
25:61:ed:22:ea:cb:c7:15:45:85:b7:5a:c3:44:87:
24:66:a6:0e:e7:95:04:d2:f1:ed:97:49:38:86:44:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:58:20:D2:42:25:62:F2:2D:C5:4E:AC:7E:99:22:BA:6D:DE:FD
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fa:f0:4c:84:4c:f2:71:3a:e8:0b:84:7c:07:48:f0:e9:88:
cc:b1:08:39:4f:f2:20:da:b8:e2:8e:d3:48:fc:3b:b8:34:80:
66:14:e3:17:18:c0:90:1f:ff:db:27:0a:da:0e:48:22:3e:54:
64:a1:12:4e:98:4a:b7:c2:33:a9:9c:04:d0:eb:fa:f9:19:64:
c2:ef:a0:34:1a:fa:41:50:77:79:3b:3b:e8:1d:cb:56:ce:90:
db:1d:fc:92:3c:4c:10:a0:e0:33:3f:c6:59:f4:89:e6:ce:eb:
95:76:de:fe:a9:d6:22:a6:04:4a:b5:d5:9d:1b:05:1b:b0:5d:
b2:83:76:16:79:41:4c:36:91:a7:7b:b0:a6:33:99:4c:10:a1:
cf:27:f0:c6:a5:9d:b6:70:2b:42:e4:bb:1a:78:f3:69:62:82:
39:30:7f:3f:18:02:c4:c7:64:16:79:9d:e2:d2:4e:c8:d0:b3:
c4:23:21:c6:35:08:71:db:26:1c:29:3b:83:40:ec:4b:6b:4d:
2e:3d:ce:d1:da:d4:de:93:b8:dd:05:aa:24:f9:ba:8e:69:b4:
44:ee:55:39:66:1d:6b:be:68:e6:bd:87:75:89:6b:51:2a:36:
61:28:f5:f6:73:7f:d9:52:e8:11:66:d0:74:a3:d9:75:ee:ed:
21:62:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:50 2026 by rpki-client