Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: 1wm0ptNezG5G1LbVaRNVRTnRkGMH0GkefPfetRHnoVA=
Subject key identifier: AB:E2:D0:BF:27:63:79:80:F0:C4:00:52:ED:70:EB:51:15:BB:F7:66
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 019D9B196217090CDFB82240CDD02BFB8DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 0CBD
Signing time: Fri 17 Apr 2026 11:00:25 +0000
Manifest this update: Fri 17 Apr 2026 11:00:25 +0000
Manifest next update: Sat 18 Apr 2026 11:00:25 +0000
Files and hashes: 1: 3loz_wUg8iUnmUBOtpVHROxNJvk.roa (hash: J7VMYCaBbkzMjXRMgzvhwXQZ2f23okoS+RYz+uaW5gI=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: 3aealkvVb3D1+Xfg2yKRlqnRDJnU7frKnJM6CaZJsxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:62:17:09:0c:df:b8:22:40:cd:d0:2b:fb:8d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Apr 17 11:00:25 2026 GMT
Not After : Apr 18 11:00:25 2026 GMT
Subject: CN=abe2d0bf27637980f0c40052ed70eb5115bbf766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:74:37:d3:f0:8f:ae:53:ea:86:c3:e4:e9:
17:08:50:b0:48:30:f4:07:82:5f:8f:a6:3b:7a:54:
3f:a0:31:3f:32:06:96:7a:be:96:c4:1c:a3:30:a2:
c6:0f:e8:28:27:2b:5f:dd:94:92:8d:df:6e:a6:53:
4f:a0:3a:8f:01:c0:ce:50:d5:b7:f2:ab:8b:6f:78:
e9:f8:01:0f:b4:23:fe:80:1e:1c:d0:2a:1d:46:9f:
45:a4:c0:4c:92:da:6c:97:70:94:68:bb:20:67:71:
1f:0b:d0:ef:82:1b:f1:0a:df:5d:a7:49:c0:8f:ed:
36:11:ad:dd:80:9d:4a:6b:e2:6b:8c:11:06:79:3b:
ea:d0:89:e7:7b:0e:f4:96:e8:d7:a1:56:d4:e8:cb:
a0:a0:f1:fe:4b:a3:b0:5e:26:9e:c3:ae:7a:59:ec:
6b:f3:df:c4:5f:af:37:0f:2f:30:bd:0b:81:a8:d4:
d0:cf:dc:a6:d6:e1:73:64:e1:04:89:ef:fc:0a:0e:
58:f9:23:78:28:64:22:a2:e5:77:fc:a7:50:b9:7c:
ad:de:3c:f5:b1:0f:78:87:41:77:2b:ad:f3:46:f3:
1a:1b:66:c1:f2:f5:f3:4d:44:71:20:b0:c6:ea:92:
09:e2:8f:e1:90:68:53:f8:84:15:5e:d3:d8:80:b4:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E2:D0:BF:27:63:79:80:F0:C4:00:52:ED:70:EB:51:15:BB:F7:66
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:72:cb:7e:b6:74:ba:59:7a:70:fb:f9:2d:20:20:28:54:aa:
93:ad:89:79:58:93:10:8b:d9:23:17:63:7f:86:b6:fc:52:06:
cf:63:c3:93:1f:a5:62:7e:70:d6:e7:da:76:22:c0:89:02:41:
10:45:db:3c:f3:7f:b6:73:4a:06:e2:b5:c0:e3:6e:f6:64:2f:
29:a6:c1:98:5b:f6:49:86:06:1b:db:68:94:90:25:bf:48:b0:
dd:4e:18:fd:4f:ae:0f:d1:50:37:3b:9b:7a:4f:c2:19:fd:31:
c9:45:ed:3a:26:2f:5e:9a:5e:0e:e9:d7:da:1f:e7:f4:db:e8:
bf:95:fa:04:b4:d3:b3:e8:60:07:c6:f8:a5:82:77:b2:de:5d:
79:2c:2f:c4:2e:5d:fa:e8:b1:33:44:ac:d2:8e:b3:f9:f1:f2:
81:fd:5f:84:c1:86:e3:e0:1d:a1:2b:45:35:cb:b0:fc:08:fe:
e1:a8:9d:7d:b7:6c:ff:8a:de:41:42:91:08:0a:4a:40:92:c5:
fe:81:e6:05:fd:fd:aa:18:96:63:81:51:a8:68:83:88:d3:a5:
a1:5c:38:a3:b2:40:94:41:4e:02:69:25:f7:cb:53:0c:ee:3d:
82:87:de:7e:e3:b5:88:6c:12:d6:34:b6:16:69:80:39:e0:e8:
ad:0c:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:29 2026 by rpki-client