Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: bj4a7fbkpUzT0gcXxcqhIOwzNPQlLVyau5qAC9WBPIw=
Subject key identifier: 95:25:A1:54:0C:C8:CE:E3:EE:BA:D3:03:9B:DF:AA:AB:C8:31:C8:B3
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 019D99992BC2B655BB3CC4B8895F8470B5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 0570
Signing time: Fri 17 Apr 2026 04:00:45 +0000
Manifest this update: Fri 17 Apr 2026 04:00:45 +0000
Manifest next update: Sat 18 Apr 2026 04:00:45 +0000
Files and hashes: 1: 1V2N8PP3W6pg2dn86MMXMCFavbg.roa (hash: 6GyZmIlJdg5hYdJcaopJTcDcXE9f3YbiakWtgZ82HCg=)
2: MBMbLrsZWEsBNYoYuyLSlAPF2WE.roa (hash: BixX2lk4Zd4GgNurHhSn7REJ4Le+26ZBWj1SCXORrcE=)
3: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: wU0Mpzp9ARpnyv3A35JQQRak7mf1V8c/DKUyKRaFbUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2b:c2:b6:55:bb:3c:c4:b8:89:5f:84:70:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Apr 17 04:00:45 2026 GMT
Not After : Apr 18 04:00:45 2026 GMT
Subject: CN=9525a1540cc8cee3eebad3039bdfaaabc831c8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:a8:9e:13:68:9f:e4:75:83:20:60:f6:e9:
d5:26:4c:8f:c8:a5:90:7f:33:0b:f2:f3:94:0a:62:
3d:76:3b:22:72:1d:c0:d5:25:82:51:ac:60:72:4f:
d7:d1:88:64:9c:5a:64:5d:43:83:8f:04:37:0b:a2:
4c:96:f0:21:4c:3b:13:ee:a7:aa:c4:a7:e8:20:14:
2d:2b:a3:67:7e:eb:ac:90:d4:37:54:85:7c:2e:38:
0c:bd:b3:f1:02:6d:ca:46:25:55:b5:93:4c:b5:4e:
61:2f:95:41:9d:c2:87:2d:a7:db:cf:f0:a2:a2:9b:
8c:ae:01:50:11:8f:7e:d4:23:94:a8:18:5f:2f:f0:
87:29:57:c3:4f:95:64:47:4a:f1:ff:63:0a:13:54:
8a:ca:18:b4:1d:f5:a8:96:f7:54:b4:77:5b:10:c4:
18:0d:7f:e3:04:93:3c:bb:b5:08:da:4b:40:2e:d0:
6b:c1:12:45:66:4e:14:9b:0c:fb:6d:33:20:5f:93:
21:a9:21:9b:ca:a4:14:c1:ee:b8:59:1b:98:2e:f4:
9e:e3:7e:65:2c:88:26:d9:65:e2:f0:f2:74:d1:9e:
56:9c:5a:a4:ed:cb:e8:f7:b8:13:ae:97:96:3d:a1:
36:05:f5:e0:00:93:ab:13:62:1c:52:af:51:78:5b:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:25:A1:54:0C:C8:CE:E3:EE:BA:D3:03:9B:DF:AA:AB:C8:31:C8:B3
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:55:08:b9:35:ce:e7:cd:0f:f2:de:59:d5:ed:0f:79:4e:17:
b7:a9:c2:7b:02:5f:6b:39:c2:dc:0a:63:2a:e2:93:7c:33:03:
c3:59:5f:d5:f7:fc:90:17:23:26:62:93:8a:82:e5:56:c4:04:
bb:8a:52:49:9d:f9:cb:9e:db:29:0d:02:50:88:7f:2f:bb:08:
1d:a9:82:bb:22:1e:db:6e:61:6b:b4:bb:1b:e3:8d:8f:6c:79:
18:aa:1b:29:b5:07:ad:c5:fc:a5:08:86:27:8d:5e:25:64:44:
db:67:fa:2c:de:d8:29:6a:7b:43:03:b2:a2:5a:d8:66:d4:bf:
0a:03:03:af:b8:e9:bc:50:76:30:09:39:68:c3:9e:53:8a:dc:
b8:d9:d1:ad:c5:c1:ba:8b:ff:65:9d:97:79:bd:0c:ea:7b:18:
4e:de:83:43:d7:7e:b6:a0:03:48:bf:f4:74:06:e4:98:81:a3:
9b:a9:71:d9:93:47:99:41:3a:1b:42:93:d2:1c:a2:08:e9:94:
c7:6e:c0:48:8f:a9:4b:92:d3:2d:3c:83:b6:60:79:f2:11:08:
58:c8:24:3d:a9:a8:e8:5b:a7:3f:bf:b7:d8:d7:da:4d:f8:47:
09:80:8c:bb:f5:63:5d:c9:1a:a1:9c:97:54:7f:31:50:bc:92:
31:4b:a4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:21 2026 by rpki-client