Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: 2cOrnI/ECzSlTk6UFnJXMi4v9LOuEd9PzFig9dr3XqI=
Subject key identifier: F2:E3:37:65:DF:3F:07:6F:F5:4F:C2:0F:38:B4:27:CC:E2:8D:E4:40
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 019D9B874C759A6BAB5CAD1F3C2D4FA6268F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 1479
Signing time: Fri 17 Apr 2026 13:00:28 +0000
Manifest this update: Fri 17 Apr 2026 13:00:28 +0000
Manifest next update: Sat 18 Apr 2026 13:00:28 +0000
Files and hashes: 1: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: Z9iQAlm+hwD7cq98sZnEtJRdS5kjVL4LTvwqMlKtYRI=)
2: S9AoFvnjp3ZfWPaRfcjLBtxjKJw.roa (hash: KcKMRfjEJimpg3wHDTAgPJLLtBV5jQ0bUr2ldkt0t+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:4c:75:9a:6b:ab:5c:ad:1f:3c:2d:4f:a6:26:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Apr 17 13:00:28 2026 GMT
Not After : Apr 18 13:00:28 2026 GMT
Subject: CN=f2e33765df3f076ff54fc20f38b427cce28de440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:c5:84:65:71:32:1f:55:12:98:22:c2:4a:
15:c5:75:57:8d:f1:85:10:15:07:0f:84:91:3f:1b:
0c:2d:63:80:35:99:4c:b7:5d:35:3a:63:be:d7:7b:
e5:a8:a0:ce:2b:e5:27:aa:39:b1:be:77:b2:8b:7c:
5e:b5:6f:1e:f4:13:8f:35:38:7c:08:35:92:eb:5f:
22:a3:60:14:d4:ac:c7:0f:38:ff:71:de:1d:54:91:
fd:94:e0:ac:c6:a9:42:d3:cd:dc:16:c7:29:5e:c3:
3a:93:e9:3d:28:47:b8:bb:93:86:2f:fe:75:4e:9e:
4e:ba:78:a3:57:df:a7:62:61:89:2c:23:09:9a:a9:
cd:11:72:2a:e2:8d:67:f7:6b:eb:01:eb:13:4c:73:
3f:da:5a:60:ec:ad:73:4e:05:7a:4e:88:b6:22:af:
b4:ce:8d:a9:e8:85:51:38:d6:ce:69:6d:ac:f8:58:
5e:a0:12:a1:dc:de:af:cd:0a:f6:c2:6b:17:4a:4b:
d1:22:6b:1b:ac:61:ef:86:1f:3f:33:dd:2c:5e:d1:
34:69:3f:26:94:7d:f6:f0:f4:02:59:cc:d6:46:44:
ff:e1:a8:8b:95:e2:b9:72:d5:18:8c:48:d2:5e:24:
6e:8f:27:6f:00:65:5d:07:f6:4c:4e:f7:07:9e:4e:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E3:37:65:DF:3F:07:6F:F5:4F:C2:0F:38:B4:27:CC:E2:8D:E4:40
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:03:fa:72:39:7a:53:a8:39:35:e9:9b:88:5f:11:6c:fd:
3b:b5:21:ee:be:c8:6b:14:dc:f2:3c:a9:81:ef:d2:2a:62:34:
58:21:b3:1e:af:8d:3d:19:43:68:ed:e7:44:a1:be:a4:8a:28:
b2:26:be:ae:64:dd:02:0c:e3:fa:0b:39:45:f2:45:00:08:f6:
e1:9d:7e:80:94:e2:f6:1b:17:89:48:d4:ad:be:2e:20:0c:66:
18:a1:c1:7a:4c:e1:36:a6:d0:05:06:2f:d5:34:85:bc:39:88:
d7:a7:7b:8f:19:82:e2:05:ff:25:ee:98:2b:df:c2:94:0c:80:
b9:83:7d:fe:0b:86:07:f7:81:1f:81:e5:d3:be:ae:37:74:e0:
91:54:4d:a5:59:ab:35:ec:79:a7:57:9a:05:c2:c7:3b:05:6f:
30:76:54:6c:56:97:80:12:d6:72:d8:a5:48:aa:57:83:9c:68:
d0:6c:ff:dd:79:b9:af:40:19:2a:c1:27:c6:77:2a:8f:2e:15:
9a:fe:ec:60:ba:f6:35:ba:b2:ff:be:f7:ef:48:68:fb:01:8d:
1f:b3:63:27:0d:9f:a6:2b:83:27:12:65:f0:f5:27:8b:08:8d:
e2:dc:de:c2:ee:19:2a:7e:ad:73:74:fa:4b:79:70:db:b3:aa:
4c:3f:74:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:03 2026 by rpki-client