Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: CTiyJAm0q44n8ZRUKvJlFxqkECDGenP6mOnWXAVKHCM=
Subject key identifier: BC:96:A5:A8:0F:98:7C:9E:64:4B:1C:6E:96:E1:53:7D:BF:60:5C:C6
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 019D99D052284600BA581B92D15D1FEDB19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 05:00:59 +0000
Manifest this update: Fri 17 Apr 2026 05:00:59 +0000
Manifest next update: Sat 18 Apr 2026 05:00:59 +0000
Files and hashes: 1: fksKXRKS55Q1EzjRDTMK_vqizsE.roa (hash: ofAdtnCLELO0txtL3rvBXK9EQmnTv0xBnbEG6eay9CA=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: ZwdUy8Mfabsegej6CCFtHtzSbS3reUKqg5iQ95BW2L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:52:28:46:00:ba:58:1b:92:d1:5d:1f:ed:b1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Apr 17 05:00:59 2026 GMT
Not After : Apr 18 05:00:59 2026 GMT
Subject: CN=bc96a5a80f987c9e644b1c6e96e1537dbf605cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:5f:68:8a:83:ca:e9:67:9b:4a:83:bb:76:
bf:90:99:d0:15:44:f8:b6:20:1e:14:e1:c3:3a:fd:
d0:0c:07:06:ed:40:75:3a:8a:00:74:c9:8d:0e:8e:
00:77:f7:61:0d:ff:39:1b:9f:43:eb:4c:8e:1d:58:
23:4b:c5:8f:d7:e5:76:2e:3e:77:a7:c8:2a:59:c3:
26:23:f6:74:7e:ac:be:d4:88:6e:d9:dc:7b:2e:28:
e0:5b:c8:9f:75:f0:f7:e3:d4:1a:f1:5c:06:d3:ca:
d2:1b:0f:05:d3:65:97:63:12:d3:15:e4:e4:16:db:
34:de:35:0d:f1:ca:5c:27:aa:6b:16:87:a4:c8:2c:
00:40:87:ed:15:49:3e:56:da:11:51:30:d4:1c:2a:
92:7c:d1:7a:ee:a2:90:44:b8:30:dd:62:47:bd:a3:
70:09:2a:02:de:77:c0:28:12:a8:71:40:66:74:b5:
ef:a1:a5:b1:ce:c1:a9:34:aa:94:fb:47:0c:0a:43:
01:0e:09:71:89:1d:51:ff:de:5c:45:89:9d:de:e0:
e5:ce:6b:51:07:cf:be:9a:66:d0:91:d0:6b:f0:03:
a3:2c:28:af:cf:0d:d0:d1:ec:3f:ae:f0:f8:74:c0:
7a:cc:68:4b:ac:f6:47:3e:69:bc:65:1e:8d:62:48:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:A5:A8:0F:98:7C:9E:64:4B:1C:6E:96:E1:53:7D:BF:60:5C:C6
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bc:32:45:bb:7f:5c:a8:e1:70:62:77:8e:0d:a8:00:fa:b0:
77:22:2a:d7:97:4e:6d:14:af:d1:08:2f:e0:47:b2:86:ee:83:
c6:77:dc:76:94:b4:cb:e8:e1:88:cf:50:6a:72:ab:b9:11:29:
0e:71:c2:85:22:cb:06:84:96:b0:5c:f9:b4:23:13:7a:be:89:
03:db:3b:0b:10:a5:0a:68:5a:f1:35:eb:3a:ff:b1:95:12:f9:
df:4a:4d:1e:0a:dc:0a:f6:41:d0:85:02:37:df:aa:db:26:22:
b2:42:97:ea:63:18:b0:9e:df:b1:57:c2:39:0a:df:8e:12:7c:
98:fb:7b:33:0c:94:fb:b8:3e:ab:04:97:dc:bc:e4:54:1e:be:
56:19:5f:6e:c0:d8:c9:d7:97:3b:96:89:87:0a:b0:34:c4:e5:
c3:ae:99:bb:e4:a8:88:fc:b1:d0:7f:f9:be:35:69:cc:33:ba:
b6:b4:3b:9a:98:b4:18:8c:50:ee:b8:19:d1:f8:45:fd:eb:0b:
6e:ed:ee:33:e9:6c:83:63:18:e5:95:70:31:14:38:12:f2:23:
2c:2e:ce:4d:6c:79:75:87:76:c5:44:bf:ed:7a:02:20:50:3d:
62:69:f4:5d:59:72:c2:0b:33:58:f2:0c:1d:20:6e:6d:26:37:
94:d1:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:24 2026 by rpki-client