Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: HcJAxgBc13dOLV/spi3vd4+Zbh0baHvZ/bNyjYAT8/o=
Subject key identifier: C5:DF:1C:F4:8B:FD:6C:07:D3:14:F2:07:DF:AB:E3:87:F6:F4:47:D6
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019D992B9549A1D6768F2803498BDDACE5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 02:01:03 +0000
Manifest this update: Fri 17 Apr 2026 02:01:03 +0000
Manifest next update: Sat 18 Apr 2026 02:01:03 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: A+h6ICiw1eNAt0O9A+aPxwb54g/wDy1R7LiSsVs9ntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:95:49:a1:d6:76:8f:28:03:49:8b:dd:ac:e5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Apr 17 02:01:03 2026 GMT
Not After : Apr 18 02:01:03 2026 GMT
Subject: CN=c5df1cf48bfd6c07d314f207dfabe387f6f447d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:e3:f3:fa:8c:34:c7:82:7b:0b:29:38:72:
2b:a0:98:19:99:33:ab:7b:98:0e:fc:c9:03:a7:5c:
7a:be:35:cb:85:30:0c:f8:7d:c6:aa:b2:16:99:39:
09:b9:97:66:89:05:07:d6:4d:81:65:d2:b9:5d:3f:
79:c8:36:64:5b:32:c5:fa:19:ab:02:60:23:9c:f1:
a0:72:54:b3:f9:09:f9:62:06:5f:0a:32:fc:10:47:
76:ff:52:7b:61:a3:e0:62:1d:3c:5d:2e:97:50:68:
32:3f:45:b8:06:78:0a:4f:41:bb:0f:67:20:43:31:
71:79:e2:31:c1:be:0a:26:ae:ff:fa:8a:21:04:af:
84:41:89:43:f5:4a:1a:d9:f9:96:59:b1:0b:3b:8b:
7a:37:77:24:71:da:5c:2a:0b:19:bf:52:cb:8b:6e:
ca:35:8c:48:5a:31:b2:a8:3f:7a:1a:a3:71:75:46:
30:be:b4:11:79:b5:0a:53:c5:54:3c:80:d7:8f:d5:
78:ab:21:51:ab:d8:e8:00:7e:5b:71:33:2e:07:4b:
4e:60:eb:1a:95:65:44:51:5b:0a:98:48:40:2e:73:
e3:3b:c8:90:c3:0f:af:73:18:36:92:92:06:2d:44:
38:eb:83:bf:82:6a:f4:e0:0d:34:f3:8f:ab:29:7c:
85:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:1C:F4:8B:FD:6C:07:D3:14:F2:07:DF:AB:E3:87:F6:F4:47:D6
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:be:31:99:76:a7:ee:37:42:94:18:aa:ae:55:03:55:93:33:
21:ee:99:b1:d2:d3:3c:a1:9e:b4:ed:0a:9c:ae:d1:55:74:35:
94:ed:10:56:61:6e:dd:74:f2:de:2c:c2:c8:42:34:ed:30:1b:
98:a2:88:42:2c:82:eb:52:97:d9:f8:21:3a:45:91:22:39:6b:
f4:a7:62:b5:fc:c8:5d:31:c2:3a:69:4c:44:80:0c:f4:96:44:
e2:39:25:e7:c6:32:66:e1:21:ef:6a:ba:64:58:72:75:03:7b:
37:9d:d3:fa:31:1e:0c:56:21:6d:f5:71:07:5c:6d:8e:d4:f9:
3a:92:50:04:ae:ae:1d:78:56:a9:8f:52:7b:84:f0:9a:89:59:
cc:28:6f:6f:88:85:06:81:bb:52:4b:d7:99:76:7e:62:6f:39:
25:ac:3c:88:c2:d8:fe:e7:05:0b:42:eb:14:f5:9a:d7:79:ee:
e1:58:af:99:c4:1f:d6:79:92:20:86:5f:3d:b5:e4:3d:87:b8:
86:04:eb:e2:90:ec:a0:c4:35:ed:76:d4:8b:3d:7b:d5:e4:80:
e0:64:f9:b6:ee:8e:9c:78:c2:34:f4:53:12:11:c1:15:e4:c5:
b7:49:88:23:fd:50:b4:90:d4:6e:5e:18:53:e7:f0:44:9d:d3:
fb:ff:1a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK5VJodZ2jygDSYvdrOXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzhkMDI0MTEwOGIwMWY1ZWI3MDhmZThiYmI4NDdkNTNh
MzBmMTYwHhcNMjYwNDE3MDIwMTAzWhcNMjYwNDE4MDIwMTAzWjAzMTEwLwYDVQQD
EyhjNWRmMWNmNDhiZmQ2YzA3ZDMxNGYyMDdkZmFiZTM4N2Y2ZjQ0N2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLjj8/qMNMeCewspOHIroJgZmTOr
e5gO/MkDp1x6vjXLhTAM+H3GqrIWmTkJuZdmiQUH1k2BZdK5XT95yDZkWzLF+hmr
AmAjnPGgclSz+Qn5YgZfCjL8EEd2/1J7YaPgYh08XS6XUGgyP0W4BngKT0G7D2cg
QzFxeeIxwb4KJq7/+oohBK+EQYlD9Uoa2fmWWbELO4t6N3ckcdpcKgsZv1LLi27K
NYxIWjGyqD96GqNxdUYwvrQRebUKU8VUPIDXj9V4qyFRq9joAH5bcTMuB0tOYOsa
lWVEUVsKmEhALnPjO8iQww+vcxg2kpIGLUQ464O/gmr04A0084+rKXyFmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXfHPSL/WwH0xTyB9+r44f29EfWMB8GA1UdIwQY
MBaAFEHI0CQRCLAfXrcI/ou7hH1Tow8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjct
ZDU5NmVjMTRlZTJlLzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjctZDU5NmVjMTRlZTJl
LzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJr4xmXan
7jdClBiqrlUDVZMzIe6ZsdLTPKGetO0KnK7RVXQ1lO0QVmFu3XTy3izCyEI07TAb
mKKIQiyC61KX2fghOkWRIjlr9KditfzIXTHCOmlMRIAM9JZE4jkl58YyZuEh72q6
ZFhydQN7N53T+jEeDFYhbfVxB1xtjtT5OpJQBK6uHXhWqY9Se4TwmolZzChvb4iF
BoG7UkvXmXZ+Ym85Jaw8iMLY/ucFC0LrFPWa13nu4VivmcQf1nmSIIZfPbXkPYe4
hgTr4pDsoMQ17XbUiz171eSA4GT5tu6OnHjCNPRTEhHBFeTFt0mII/1QtJDUbl4Y
U+fwRJ3T+/8aPA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:17 2026 by rpki-client