Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
File: Q16al_74NTuEg1I3YEaVLdoPq9g.mft (raw, json)
Hash identifier: giK6TXoj57r9alXcrWPtf8Gkx526VAJWcs4WmdLis0s=
Subject key identifier: 86:8E:ED:DD:99:E6:92:3D:91:A9:75:8A:69:D9:91:7C:26:C2:26:D3
Authority key identifier: 43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
Certificate issuer: /CN=435e9a97fef8353b848352376046952dda0fabd8
Certificate serial: 019D9B199298213AD046DC04755F8B7A538F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
Manifest number: 70
Signing time: Fri 17 Apr 2026 11:00:37 +0000
Manifest this update: Fri 17 Apr 2026 11:00:37 +0000
Manifest next update: Sat 18 Apr 2026 11:00:37 +0000
Files and hashes: 1: Q16al_74NTuEg1I3YEaVLdoPq9g.crl (hash: 3291LZfi4oRLuSBqES14spTqUB9yPVXHqDyuxwsax04=)
2: RduyMfyksJPRmTJ2VbOncr1ISHw.asa (hash: sPtI1ZAFxfNcfl8vI1MZDw4ggabOlaCSkTfrWmOzLms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:92:98:21:3a:d0:46:dc:04:75:5f:8b:7a:53:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e9a97fef8353b848352376046952dda0fabd8
Validity
Not Before: Apr 17 11:00:37 2026 GMT
Not After : Apr 18 11:00:37 2026 GMT
Subject: CN=868eeddd99e6923d91a9758a69d9917c26c226d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:98:b9:06:23:6e:6d:58:75:ea:b2:a2:25:9c:
ed:31:97:9b:0c:3b:a4:2b:d6:f6:79:3e:6b:b0:fb:
41:92:04:73:95:51:38:c0:62:6f:ec:06:f4:03:7d:
fb:e7:f6:2d:1b:8a:94:82:21:6b:ba:43:23:d7:05:
98:52:32:2c:57:37:bb:8f:14:89:3f:7e:a0:7f:04:
6f:b8:ae:f5:79:5a:a3:25:6c:75:fb:d1:c4:39:f6:
21:35:0e:5c:76:a9:90:a0:21:aa:03:01:04:b3:3c:
6f:20:9d:07:e2:dc:bc:70:a9:f4:33:53:e9:35:57:
da:f0:c3:c7:0a:eb:3e:01:61:3b:93:e5:e7:f1:5b:
68:ff:79:75:4d:5b:2c:31:0d:4d:78:bf:cc:ce:db:
52:d1:28:ba:89:54:2c:f3:09:05:d9:54:ff:ab:5d:
25:a9:86:4f:dd:d1:c0:7a:f3:95:5f:7f:b9:d0:0f:
86:f9:d0:16:18:02:db:28:51:4b:42:5a:93:99:01:
49:e7:d6:5a:7f:e1:ce:d3:47:e9:f6:80:7e:0f:90:
f3:02:78:c3:a4:a6:61:e1:e7:35:e6:57:af:c6:aa:
57:00:c0:49:38:73:ed:7a:23:d7:86:7c:36:14:fa:
df:44:65:f0:5f:a9:05:c9:eb:cc:ef:24:3b:be:42:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:ED:DD:99:E6:92:3D:91:A9:75:8A:69:D9:91:7C:26:C2:26:D3
X509v3 Authority Key Identifier:
keyid:43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:70:19:61:a4:d2:99:8c:86:51:23:af:8d:05:ca:25:af:30:
0c:58:10:00:72:e7:14:54:33:65:4c:fa:b6:e5:25:48:73:45:
2f:8a:cc:19:c9:c3:0f:4c:f8:c0:6f:4b:5b:78:4a:0c:91:9d:
52:c5:c2:5b:92:48:23:95:52:7a:2a:dc:0b:c2:ff:ff:d2:f3:
ea:49:79:92:63:84:2a:7c:66:36:3f:11:19:13:33:76:a3:db:
b0:b6:c5:8f:c3:c1:e1:36:63:df:3e:64:d7:97:b0:77:fe:d6:
b5:9d:e5:f3:cd:2b:98:5a:0d:bb:b1:4c:aa:73:02:f0:23:fc:
80:f2:49:83:3f:7c:b4:b0:6d:67:9d:b8:f0:3f:d9:c3:c8:60:
8c:e0:a4:5c:46:34:f3:65:e7:a9:ec:d9:f7:f6:87:31:22:44:
b8:ae:33:2f:27:a6:9f:91:ff:d7:f1:fd:05:f4:16:14:6d:bc:
4e:2d:f1:c0:cd:60:93:6a:ef:7e:8a:9d:2c:54:18:cf:a0:7c:
ef:01:38:10:15:93:6a:b1:23:d1:bf:4f:1d:87:04:1b:84:e6:
ce:1d:87:f1:f6:44:97:99:12:30:98:62:78:bd:d1:47:c6:b9:
d8:d8:e2:4f:d8:df:ce:cc:5b:77:bc:26:e4:1f:db:da:49:c0:
e7:4f:63:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGZKYITrQRtwEdV+LelOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWU5YTk3ZmVmODM1M2I4NDgzNTIzNzYwNDY5NTJkZGEw
ZmFiZDgwHhcNMjYwNDE3MTEwMDM3WhcNMjYwNDE4MTEwMDM3WjAzMTEwLwYDVQQD
Eyg4NjhlZWRkZDk5ZTY5MjNkOTFhOTc1OGE2OWQ5OTE3YzI2YzIyNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45i5BiNubVh16rKiJZztMZebDDuk
K9b2eT5rsPtBkgRzlVE4wGJv7Ab0A3375/YtG4qUgiFrukMj1wWYUjIsVze7jxSJ
P36gfwRvuK71eVqjJWx1+9HEOfYhNQ5cdqmQoCGqAwEEszxvIJ0H4ty8cKn0M1Pp
NVfa8MPHCus+AWE7k+Xn8Vto/3l1TVssMQ1NeL/MzttS0Si6iVQs8wkF2VT/q10l
qYZP3dHAevOVX3+50A+G+dAWGALbKFFLQlqTmQFJ59Zaf+HO00fp9oB+D5DzAnjD
pKZh4ec15levxqpXAMBJOHPteiPXhnw2FPrfRGXwX6kFyevM7yQ7vkKD4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaO7d2Z5pI9kal1imnZkXwmwibTMB8GA1UdIwQY
MBaAFENempf++DU7hINSN2BGlS3aD6vYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTE2YWxfNzROVHVFZzFJM1lFYVZMZG9QcTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kMjc4MjYtMzgzOC00YzJiLWFmOTMt
ZTg2ODExMTIwYzE5LzEvUTE2YWxfNzROVHVFZzFJM1lFYVZMZG9QcTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9kMjc4MjYtMzgzOC00YzJiLWFmOTMtZTg2ODExMTIwYzE5
LzEvUTE2YWxfNzROVHVFZzFJM1lFYVZMZG9QcTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXAZYaTS
mYyGUSOvjQXKJa8wDFgQAHLnFFQzZUz6tuUlSHNFL4rMGcnDD0z4wG9LW3hKDJGd
UsXCW5JII5VSeircC8L//9Lz6kl5kmOEKnxmNj8RGRMzdqPbsLbFj8PB4TZj3z5k
15ewd/7WtZ3l880rmFoNu7FMqnMC8CP8gPJJgz98tLBtZ5248D/Zw8hgjOCkXEY0
82XnqezZ9/aHMSJEuK4zLyemn5H/1/H9BfQWFG28Ti3xwM1gk2rvfoqdLFQYz6B8
7wE4EBWTarEj0b9PHYcEG4Tmzh2H8fZEl5kSMJhieL3RR8a52NjiT9jfzsxbd7wm
5B/b2knA509j3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:38:37 2026 by rpki-client