Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: A8kTdbxhaIz48CrI07Kx8fCpZOqlqzUSjc7MZ2SDBQ0=
Subject key identifier: E5:0A:37:7D:9A:2D:76:80:D3:D8:C0:6D:A8:03:D9:8D:53:A4:6A:65
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019D996215A4E10EE9BD3BFD0FAE4B2D8E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 1656
Signing time: Fri 17 Apr 2026 03:00:35 +0000
Manifest this update: Fri 17 Apr 2026 03:00:35 +0000
Manifest next update: Sat 18 Apr 2026 03:00:35 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: VinEwj2W9+3r41ls8Igha4fRcKsguy+tOewGv/03ir4=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:15:a4:e1:0e:e9:bd:3b:fd:0f:ae:4b:2d:8e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Apr 17 03:00:35 2026 GMT
Not After : Apr 18 03:00:35 2026 GMT
Subject: CN=e50a377d9a2d7680d3d8c06da803d98d53a46a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:31:89:9c:72:b7:3f:49:c7:f1:a2:ea:33:
18:a2:78:d5:98:05:fe:b8:3d:d9:ad:df:dc:a1:ab:
d3:83:7f:01:8f:c0:23:d3:fc:6d:f4:4f:28:06:6c:
73:9b:24:4d:f5:18:89:45:0d:a3:f1:7d:93:75:64:
e7:e8:01:64:65:d9:f8:19:25:8b:86:b3:5f:8e:1d:
62:5f:2d:19:c8:e3:1c:11:d3:09:81:82:e4:b6:d1:
67:55:da:1c:51:82:23:8e:37:ba:dd:f2:33:71:71:
67:4f:13:6b:e4:5b:2b:0e:54:3b:2e:fd:5f:d4:aa:
26:47:e0:af:25:d8:bd:a4:46:c1:98:fb:88:0b:72:
c2:09:ba:df:4f:e9:81:38:f9:c3:37:a3:3d:c3:3d:
02:6c:ae:19:72:8b:78:02:1b:71:3b:8d:17:81:79:
70:9d:e8:de:3a:07:a4:8e:ff:44:02:04:bf:53:94:
4f:76:79:2f:c2:d5:c2:6d:3b:fe:bf:46:f9:ef:46:
1d:a0:17:3e:14:90:74:98:98:01:47:03:28:11:75:
41:51:07:b4:c3:69:d6:33:a3:08:95:84:b8:f7:72:
74:c3:be:73:96:dc:9a:af:30:8e:ff:2f:91:2c:82:
12:52:a7:0f:95:8b:d4:3c:7a:51:87:42:3c:12:7c:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0A:37:7D:9A:2D:76:80:D3:D8:C0:6D:A8:03:D9:8D:53:A4:6A:65
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2a:5c:dd:17:65:79:93:ce:a3:6e:d2:d6:bd:a1:bd:75:f9:
02:6d:5e:ca:c1:b8:9b:94:90:76:bd:b7:73:ae:5f:42:7d:d2:
e6:be:f1:e3:2e:0b:45:39:6b:5d:4d:d2:2b:be:6c:ab:ed:99:
14:88:a9:12:e7:4b:30:42:07:2a:53:40:63:43:ff:3c:98:10:
65:de:81:0f:24:a6:0c:0e:7b:0c:db:07:58:b5:f0:f9:e5:61:
5b:f1:39:86:51:6f:d2:ea:7d:75:5a:13:0f:80:f6:6b:d3:ad:
48:62:0e:ae:c3:21:65:a9:e6:d7:b5:08:78:c7:09:7d:bd:5d:
16:f8:61:82:67:e1:51:50:c7:bb:14:1f:b7:52:5d:d0:3e:72:
ea:ae:aa:37:00:85:a0:8d:5a:d2:a4:eb:1a:45:bd:01:6f:3d:
dc:7c:22:9e:01:55:5c:f8:f5:0b:86:29:99:93:43:fb:44:05:
d7:6d:02:a8:a6:f8:09:33:84:ad:b0:ec:4d:c2:d8:a1:46:e4:
7f:2f:25:da:13:c5:9f:59:4e:c4:78:ed:89:40:ab:89:d8:1f:
f0:6b:43:10:a7:8d:38:df:85:37:86:45:57:1c:37:0c:e1:5a:
60:f5:95:0d:d0:52:e3:c3:72:81:1d:45:3b:5e:75:9a:99:49:
8e:0e:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:04 2026 by rpki-client