Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: Pz00C5RNgwq0Qxfp0OjW5dQIm/SD6cTlj+6+vOl+/4c=
Subject key identifier: 4C:52:D5:3A:C2:2B:30:51:0B:35:D6:2E:AA:62:EB:F9:70:B6:37:A4
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 019D9A74D20BD6A5C10AA2F8BA2B85F17EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 078B
Signing time: Fri 17 Apr 2026 08:00:40 +0000
Manifest this update: Fri 17 Apr 2026 08:00:40 +0000
Manifest next update: Sat 18 Apr 2026 08:00:40 +0000
Files and hashes: 1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: N58209pxh0L09kLXe5DEZR8jJ0e1+j7Wzg8NYdWTq9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d2:0b:d6:a5:c1:0a:a2:f8:ba:2b:85:f1:7e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Apr 17 08:00:40 2026 GMT
Not After : Apr 18 08:00:40 2026 GMT
Subject: CN=4c52d53ac22b30510b35d62eaa62ebf970b637a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:2c:91:9c:7c:ec:ae:6f:22:64:5f:d8:c9:
42:16:67:cc:7e:01:47:60:99:be:b6:27:ad:c2:7b:
f9:14:22:4c:b4:70:36:d7:18:9d:97:ff:29:27:85:
c9:e5:5b:d4:b5:b6:c9:65:02:b1:b4:2f:40:52:b1:
80:03:28:50:9c:1c:2a:ef:2b:a1:88:9c:62:ad:9d:
94:14:44:bd:9d:9f:74:25:6d:fd:7c:7a:7f:84:64:
73:65:dd:e5:85:4d:bb:8c:ad:4b:ba:28:4e:9e:40:
2a:69:39:4d:2b:22:aa:0e:5c:54:7b:78:af:32:4a:
b3:26:ec:69:f5:67:ee:f0:e4:e5:0b:42:30:c5:7c:
2b:a2:73:ad:41:94:b3:c9:7e:53:a8:31:45:47:8f:
ec:52:98:1d:db:43:98:f8:6b:1d:9c:e7:05:24:df:
3d:83:21:2e:b5:23:38:69:eb:7e:e8:14:cb:1b:8c:
c9:78:80:33:ee:d8:a1:d8:da:38:bc:54:9b:44:bd:
82:bb:a5:db:a5:4a:9d:90:d0:1d:62:9a:9a:7f:81:
b8:78:50:88:4a:5e:12:05:e1:27:1a:a7:37:f4:12:
b3:f3:90:e7:d5:34:94:4c:c8:66:62:2a:e8:0c:2f:
96:b0:33:3c:a5:60:f6:2e:f1:3a:3c:b4:ea:9f:5d:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:D5:3A:C2:2B:30:51:0B:35:D6:2E:AA:62:EB:F9:70:B6:37:A4
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:05:84:d0:2d:a8:4c:0f:69:61:a8:62:04:5f:df:20:38:c2:
60:09:3a:ba:93:44:97:6d:54:9e:27:df:34:f4:61:5e:09:9d:
00:1e:b9:d6:01:ee:a1:36:92:2c:b4:6c:c6:a5:79:87:29:b4:
b5:cb:21:2f:71:90:27:f9:7c:0c:ed:b9:97:44:1b:6a:6b:e4:
20:9a:70:e5:dc:1f:07:a3:58:b7:4d:7e:0b:1f:03:9a:c9:3d:
94:e6:f6:d7:91:ed:be:80:1d:a0:b4:7c:37:75:12:af:1f:5b:
1e:3b:fd:bf:6e:be:ee:16:93:75:71:68:c0:b5:58:ea:e3:90:
d2:b0:f0:9e:e3:ac:46:eb:d8:28:f7:a6:b3:6b:38:73:36:d1:
ab:55:90:a3:26:99:32:27:e0:7b:96:18:3c:2d:9b:0d:85:4d:
54:fb:d2:21:f6:8f:43:5f:f8:d5:77:a1:67:46:ce:f2:fd:7a:
f9:49:03:2e:59:86:1c:fa:7f:42:32:7c:f2:dc:8b:5a:f1:d5:
47:09:c6:d6:cd:a7:35:40:d1:46:7a:2f:57:22:5c:4b:fd:c0:
62:0a:3a:e7:a9:33:68:b5:39:6b:5c:5e:22:0e:40:56:62:0d:
16:21:91:f9:96:a6:63:c6:d6:e6:5b:89:b9:6d:d8:f4:cc:4c:
72:62:99:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:26 2026 by rpki-client