Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: jhyxfoEnbaZq+wnlKI2Y3hc2uqxVnHmbLojFqSoESxk=
Subject key identifier: 0B:0F:56:A7:B5:BB:9B:25:20:8F:E5:6C:AA:8D:22:80:C1:6B:DA:AF
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 019DA4C1E82CF095897FB8E8BCAE5230E506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 052C
Signing time: Sun 19 Apr 2026 08:01:04 +0000
Manifest this update: Sun 19 Apr 2026 08:01:04 +0000
Manifest next update: Mon 20 Apr 2026 08:01:04 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: KYS6UpNIHjBq8Z2HQRSXB6KsXRGEjG5W8A7IEg2OQWk=)
2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:e8:2c:f0:95:89:7f:b8:e8:bc:ae:52:30:e5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Apr 19 08:01:04 2026 GMT
Not After : Apr 20 08:01:04 2026 GMT
Subject: CN=0b0f56a7b5bb9b25208fe56caa8d2280c16bdaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:73:24:0c:8e:d5:83:43:f4:da:f1:f3:a4:
1f:24:5b:f1:51:41:b4:91:fb:ae:f0:82:db:fc:df:
de:38:43:ef:2b:73:ff:a2:f1:78:7a:86:f8:b5:69:
85:7f:2e:25:68:db:4f:43:c6:ca:35:a4:72:31:b4:
52:80:6f:90:90:2c:68:aa:f8:b2:44:d6:67:21:8f:
a1:9b:5a:a9:15:00:53:ac:36:d6:d3:07:c1:6a:f9:
a0:40:51:63:b6:7f:41:39:67:df:8c:7d:8c:da:5f:
1e:3e:35:9e:dd:38:f9:db:52:f2:8e:1c:cf:41:18:
c5:6a:71:6c:08:7c:7e:fa:b5:46:f5:2f:18:73:d5:
b4:08:b0:41:cf:c2:4c:04:d3:f0:a5:ab:2b:c9:87:
4c:9f:bd:59:2e:ad:d7:82:ea:21:01:4c:82:b3:1b:
59:b2:32:41:04:30:29:0a:89:47:78:e8:8b:6d:a9:
29:e2:eb:9a:f0:f4:79:66:3b:f4:2a:ef:d7:12:a8:
23:37:25:70:42:3b:e9:36:bc:e0:93:e1:9c:ec:8e:
ef:47:e9:62:05:08:1f:bc:ec:8f:e2:5e:0f:c0:25:
7f:6a:bd:09:e6:e5:aa:a9:55:aa:1a:71:0f:17:08:
5f:52:e0:db:3b:6e:37:c0:5a:74:80:e5:28:5c:6d:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0F:56:A7:B5:BB:9B:25:20:8F:E5:6C:AA:8D:22:80:C1:6B:DA:AF
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:2b:8d:58:ec:24:a3:48:a8:17:fa:7c:4a:5e:92:40:56:
da:3d:31:c6:42:08:9c:c8:fb:c0:06:9a:6a:8f:ab:61:43:fb:
e1:97:2b:be:65:17:c3:40:c1:63:70:08:37:97:ce:97:14:72:
86:9e:56:14:63:5e:2b:66:a8:92:27:71:d8:5a:9d:5c:9b:26:
64:28:6b:1a:e9:9f:35:6d:54:fa:ee:35:41:e4:8f:8e:0c:c4:
e9:d1:bd:70:bb:d9:dd:9e:ba:43:a8:41:04:24:63:0f:2a:f1:
8e:06:26:c7:38:00:e2:c5:6d:ee:6a:aa:fc:3b:bd:5c:00:5d:
9d:64:6d:7a:d9:c6:13:fb:d7:8c:88:4e:bb:cd:84:52:f6:30:
81:45:f8:45:c4:81:93:9d:d2:13:47:00:d7:87:4b:b7:ff:43:
8b:70:76:d8:81:1c:3b:9f:4d:66:56:65:79:02:4a:28:59:34:
d2:8e:32:57:02:fa:68:a5:a1:34:97:1b:79:21:af:45:37:ea:
a5:2f:c4:cf:2c:51:d3:26:fb:be:14:04:ba:47:02:cc:37:98:
4e:48:16:62:ee:b9:91:16:70:3e:f1:2c:c9:19:9d:0a:26:2e:
6d:a4:b7:4a:11:66:19:93:bf:82:ee:4b:41:e2:b3:7d:88:34:
47:ed:df:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwegs8JWJf7jovK5SMOUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3
NmQ3NGUwHhcNMjYwNDE5MDgwMTA0WhcNMjYwNDIwMDgwMTA0WjAzMTEwLwYDVQQD
EygwYjBmNTZhN2I1YmI5YjI1MjA4ZmU1NmNhYThkMjI4MGMxNmJkYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB9zJAyO1YND9Nrx86QfJFvxUUG0
kfuu8ILb/N/eOEPvK3P/ovF4eob4tWmFfy4laNtPQ8bKNaRyMbRSgG+QkCxoqviy
RNZnIY+hm1qpFQBTrDbW0wfBavmgQFFjtn9BOWffjH2M2l8ePjWe3Tj521LyjhzP
QRjFanFsCHx++rVG9S8Yc9W0CLBBz8JMBNPwpasryYdMn71ZLq3XguohAUyCsxtZ
sjJBBDApColHeOiLbakp4uua8PR5Zjv0Ku/XEqgjNyVwQjvpNrzgk+Gc7I7vR+li
BQgfvOyP4l4PwCV/ar0J5uWqqVWqGnEPFwhfUuDbO243wFp0gOUoXG0q/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsPVqe1u5slII/lbKqNIoDBa9qvMB8GA1UdIwQY
MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt
YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl
LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasgrjVjs
JKNIqBf6fEpekkBW2j0xxkIInMj7wAaaao+rYUP74ZcrvmUXw0DBY3AIN5fOlxRy
hp5WFGNeK2aokidx2FqdXJsmZChrGumfNW1U+u41QeSPjgzE6dG9cLvZ3Z66Q6hB
BCRjDyrxjgYmxzgA4sVt7mqq/Du9XABdnWRtetnGE/vXjIhOu82EUvYwgUX4RcSB
k53SE0cA14dLt/9Di3B22IEcO59NZlZleQJKKFk00o4yVwL6aKWhNJcbeSGvRTfq
pS/EzyxR0yb7vhQEukcCzDeYTkgWYu65kRZwPvEsyRmdCiYubaS3ShFmGZO/gu5L
QeKzfYg0R+3f4A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:10 2026 by rpki-client