Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier: HBt2JetBd4nJtP3Iehb8SqxOR1pzRuzt0u8Liw1yIOk=
Subject key identifier: D0:08:85:D5:BB:3B:BD:A5:35:69:D3:E7:A4:52:4D:55:55:7F:1A:E0
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 019D9B19A1B9B453B6768799B17CAD672826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 11:00:41 +0000
Manifest this update: Fri 17 Apr 2026 11:00:41 +0000
Manifest next update: Sat 18 Apr 2026 11:00:41 +0000
Files and hashes: 1: aMb6lxNGb2-liUxIi8yk_IeHIOY.roa (hash: 5gSa2BaLYUZyyJ6bTUAS7v+V9L4QlBvXXfhwMvfbFhA=)
2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: GieCFvetaPmkt8iKWuR0xKExZqeWylHOUQYM/cxHfuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a1:b9:b4:53:b6:76:87:99:b1:7c:ad:67:28:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Apr 17 11:00:41 2026 GMT
Not After : Apr 18 11:00:41 2026 GMT
Subject: CN=d00885d5bb3bbda53569d3e7a4524d55557f1ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:5b:42:69:28:f4:97:e8:9c:4d:f1:c5:51:
d4:9f:d3:9a:91:c2:2e:0f:1f:ff:ef:ff:e2:59:d4:
22:5f:e0:64:4c:f2:a1:0e:cc:a5:67:57:b8:bc:55:
5c:f2:d1:52:c1:2b:97:d3:a0:2d:aa:1f:05:92:94:
02:11:12:4e:df:d0:ca:ce:f7:f8:4b:54:1d:27:d5:
01:b1:4f:79:eb:6f:dd:99:32:86:e3:c5:de:ed:b0:
0a:7e:27:fd:96:99:92:88:bd:f5:f9:ec:15:da:1b:
e7:b5:20:3f:e3:a8:fc:ca:38:3b:08:e5:87:f7:1c:
d9:1a:39:08:1e:11:ef:4d:dd:b6:fa:c1:a1:70:ba:
0e:7d:fc:17:27:ba:76:e8:3c:a9:09:79:6b:72:31:
03:27:ba:fc:e1:86:a6:fa:d7:30:9d:8f:62:7d:73:
d3:0d:5b:62:3e:09:29:14:63:57:45:93:fb:34:6c:
36:7c:1b:52:6c:75:79:9c:59:e7:b4:6e:7a:0e:eb:
31:d0:ca:31:36:18:ab:75:b6:bf:35:e6:8c:01:6c:
2b:e3:ed:cb:4f:a7:44:70:1c:a7:a6:3e:f1:61:31:
c7:8c:77:f3:6c:8f:78:63:2f:6e:0f:00:7a:01:3f:
69:3f:ec:3a:bf:11:f4:89:08:30:dc:73:08:40:c3:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:85:D5:BB:3B:BD:A5:35:69:D3:E7:A4:52:4D:55:55:7F:1A:E0
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a8:d3:07:db:fe:d8:1d:5a:0b:3f:be:ea:b7:d0:52:c1:5b:
1e:f7:04:e5:cc:53:f5:73:67:37:7e:1f:69:5c:8f:79:92:fc:
02:2d:2b:10:2e:03:77:5b:a1:ec:fe:0e:b1:83:29:98:51:b7:
c9:fa:e5:20:4c:9b:39:d1:a5:7c:78:a4:72:d4:14:44:5a:42:
76:69:30:6d:5b:ff:f5:9d:21:ea:66:49:1f:35:7b:6c:5f:94:
0f:f5:fa:11:93:2d:b6:4c:9d:14:0b:e3:e1:6b:86:79:12:4c:
6a:61:45:7a:7a:ef:a0:2c:c5:3a:f6:5e:3a:9e:5d:66:f4:7b:
a6:2a:26:12:8e:24:a5:1b:12:2c:7e:38:c7:e2:b9:ea:6e:7b:
63:c4:93:d0:c1:f3:f7:59:18:87:1f:07:81:f0:13:5b:ad:d6:
5f:aa:89:82:9f:85:61:ba:8a:9f:39:f9:ae:19:e6:e9:d0:c7:
6a:6b:7d:05:6f:4a:e8:d2:a9:24:0f:7e:80:f9:d8:1f:5f:ea:
5b:75:2c:df:a3:08:80:7a:3f:8a:7b:e9:6c:b9:60:2c:6a:3e:
a6:76:79:e0:28:da:1a:f1:e9:0a:1a:63:64:db:36:7d:91:50:
46:c9:73:c7:b6:4c:39:a0:aa:cd:bf:20:18:2b:2e:cc:36:fe:
50:7c:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:07 2026 by rpki-client