Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: XoF+SVDK3rBEUI9Av27l6ROGlTBh4MxOZLLbTL+JIRc=
Subject key identifier: 83:F4:F3:50:1C:DF:92:8D:10:3E:BE:27:7A:CF:3F:02:80:CE:E4:55
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 019D9A074A53C34038BBA187066D89AD86E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 06:01:02 +0000
Manifest this update: Fri 17 Apr 2026 06:01:02 +0000
Manifest next update: Sat 18 Apr 2026 06:01:02 +0000
Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=)
2: Lc1jl7QVxqLwMWxBrIVxsneb__U.roa (hash: E1vTmbk4SrydL0KXJtJee0AsNy8nI/ShD3+SVqKy/u4=)
3: LkGDyqDRG7mHRocUIkDmSuw1vWQ.roa (hash: J9hPT1FhbaaEOwCdYHU6hR/yFBmZm/8O5bYD8Dyfv0Y=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: VJQKMXGr4BsV3aYeiTO05Sw/L6EJLSd2rx9oT6lIT0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:4a:53:c3:40:38:bb:a1:87:06:6d:89:ad:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Apr 17 06:01:02 2026 GMT
Not After : Apr 18 06:01:02 2026 GMT
Subject: CN=83f4f3501cdf928d103ebe277acf3f0280cee455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:9d:ca:a2:f1:7f:6f:33:13:f8:ad:4b:3d:
e1:dd:9c:48:f2:78:99:ff:4a:83:00:13:f7:c8:45:
14:79:48:61:91:29:3b:4e:75:ed:88:5d:4c:87:e2:
93:ff:6e:c9:79:5b:e3:fa:68:de:44:2e:f6:b7:3d:
c0:10:cb:39:59:a7:32:c4:25:cc:5e:bb:f1:99:92:
a9:e1:9f:ec:b4:da:72:ca:3c:f1:3d:df:d3:24:25:
a9:c2:7e:79:02:82:cf:9e:81:49:4b:e5:a2:3b:ef:
b7:e3:d0:f8:02:03:01:4a:a2:8d:90:69:23:75:3f:
36:2a:e2:ea:61:26:7e:ea:11:6d:e3:45:30:2b:2a:
fa:ce:32:ce:c7:36:ec:6d:83:7c:74:bb:58:7e:a0:
88:1f:f9:21:66:be:0c:59:ec:ce:fe:52:31:23:de:
90:62:18:cd:d0:ad:b9:9a:4d:0b:29:d1:17:c5:e7:
d4:36:02:0c:b8:76:4b:7b:b4:e7:1f:1a:f1:e8:5b:
1a:53:55:30:00:fb:26:9c:3a:9d:bd:ea:24:10:b8:
b8:2e:cf:7b:8a:0b:b2:e8:50:41:ae:51:35:85:e5:
37:ec:34:b5:17:91:d0:34:8a:f4:16:9f:f5:cb:be:
40:32:6e:c9:f6:41:e0:f6:c3:92:1c:64:c6:0a:26:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:F3:50:1C:DF:92:8D:10:3E:BE:27:7A:CF:3F:02:80:CE:E4:55
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2c:56:05:b7:e3:ad:b1:55:54:8c:6e:bd:25:e8:1e:44:8c:
fd:68:41:87:42:46:9f:83:e5:49:c6:0b:d1:d5:9b:22:03:e5:
2b:2d:1d:d6:24:83:15:b8:06:e2:1e:99:57:5a:8a:e2:b2:2e:
f7:e3:28:6b:21:f2:04:ef:12:36:5a:dc:17:d5:fb:5f:e1:67:
6c:d4:21:6b:af:ab:11:2a:d5:90:ae:6c:fd:d5:76:d0:37:18:
fb:c8:c1:bf:fe:d4:66:41:b7:08:05:d3:10:04:74:db:0a:ad:
ec:e0:ae:d1:89:02:d8:37:ec:df:c6:2c:1b:8c:52:7c:4d:d9:
88:b4:a3:17:52:67:54:54:dc:65:dc:df:a8:d6:6a:25:b3:cb:
ca:ad:25:16:6c:83:9f:53:cd:17:e9:7d:9a:f2:cd:08:07:79:
1e:f1:47:b5:e4:80:08:9b:7e:dc:d9:b2:ad:a7:d7:56:7c:5b:
c0:9f:b8:60:2b:8f:07:e4:ca:a1:18:69:18:82:8e:e5:1d:09:
e9:66:d0:cd:88:89:77:46:cc:7f:07:97:9c:e0:16:a6:7e:88:
cd:fc:99:21:66:9b:92:2f:d5:c5:42:0b:95:51:a1:04:03:5f:
61:79:2e:4d:d8:71:31:43:81:e7:45:18:4c:04:85:6d:ef:e9:
68:f9:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:09 2026 by rpki-client