Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: UCm9WKGLXtdaD2IwSMoA4WW4+5dfdxCYL2m/UPXlgk0=
Subject key identifier: CD:21:E1:F8:84:97:2D:4C:15:E8:2E:C1:08:9F:C4:0D:8E:7A:C8:F9
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 019D9A075580673C5A132C34C490E107D091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 0A95
Signing time: Fri 17 Apr 2026 06:01:05 +0000
Manifest this update: Fri 17 Apr 2026 06:01:05 +0000
Manifest next update: Sat 18 Apr 2026 06:01:05 +0000
Files and hashes: 1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=)
2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: a+nWjEuht4feZcrLHbJ5HICAzEctTAhjc5mDkBvJtnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:55:80:67:3c:5a:13:2c:34:c4:90:e1:07:d0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Apr 17 06:01:05 2026 GMT
Not After : Apr 18 06:01:05 2026 GMT
Subject: CN=cd21e1f884972d4c15e82ec1089fc40d8e7ac8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:53:89:0a:b0:08:88:35:e7:56:4e:1b:80:
c7:a7:cc:b8:43:cd:d9:d6:ce:0c:1a:3d:0e:de:eb:
aa:c6:6c:75:22:94:e6:40:d0:9b:a0:d9:ef:48:5d:
5e:c8:f7:00:ff:6c:cd:61:86:c1:e8:b5:aa:8e:16:
2d:39:c6:01:5b:86:9d:4f:f1:85:7b:bf:6c:2a:cd:
62:0e:34:8f:a4:83:7f:b9:af:f2:42:e8:a4:b1:13:
6a:b9:a9:49:ea:fe:cf:86:a6:9e:ee:c4:7c:b3:73:
37:d0:12:b5:03:73:e3:0d:1f:d2:5f:a4:74:70:53:
b0:20:f7:84:35:6c:25:16:07:73:29:72:61:ff:2a:
fb:dc:f9:a2:8e:61:c4:aa:f6:da:e0:e5:c6:80:41:
7e:49:d6:50:32:cd:35:ae:8e:04:8b:d5:f2:24:80:
27:23:10:b8:77:18:e2:63:c6:c5:28:3b:7e:5d:ad:
d3:e2:28:c4:1e:2c:4a:30:73:e7:9c:94:39:d5:5b:
bc:92:6b:1d:6b:79:be:3f:15:9d:a4:cf:1d:9a:a9:
b0:f5:fc:9d:e2:a9:8f:36:5b:47:e6:2f:52:e0:cb:
57:a0:ca:b6:80:c5:ac:ce:f1:b6:64:4a:f2:09:79:
49:56:d2:80:38:2e:46:73:ef:20:8c:5b:fd:be:a1:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:21:E1:F8:84:97:2D:4C:15:E8:2E:C1:08:9F:C4:0D:8E:7A:C8:F9
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0e:b7:87:3f:51:77:e1:2c:54:6e:52:92:53:b9:c1:81:1c:
ae:94:99:97:8d:98:98:c8:0e:96:81:af:1c:8e:f3:44:a2:ac:
4e:9c:41:ed:72:6e:09:9d:45:67:7a:e7:b5:c6:3e:f0:07:aa:
5a:c4:57:a7:13:42:50:e9:0b:93:6a:cc:1b:70:1d:4c:55:b8:
0b:a9:67:b0:29:e8:62:f3:13:ba:81:37:76:fa:45:a5:64:f8:
0b:b2:f0:44:39:11:44:33:9e:ce:50:a8:85:19:73:25:3c:c4:
52:63:61:c0:b6:82:6f:79:19:0b:ac:0c:ee:90:fd:ed:f4:ec:
2e:f8:dd:e6:53:97:e4:da:15:3f:30:86:92:75:2a:bf:b0:14:
83:f8:2c:37:17:ab:90:c3:a9:19:52:b6:3b:d2:62:b2:28:f8:
a7:7c:2f:08:a0:0e:6f:67:b3:1b:b8:fe:0c:97:56:b3:e3:09:
5b:d3:0a:d0:de:89:7d:0b:a6:dc:d9:93:3d:cc:46:52:2f:98:
fe:b1:d5:8f:eb:92:93:33:02:2c:b4:b9:f5:48:16:d7:34:a3:
e7:ef:e9:3a:d7:4b:36:e0:54:b7:19:58:18:ae:0e:fe:b5:71:
df:4f:38:aa:c4:18:85:f1:d3:c4:bd:01:d5:ae:1e:3e:49:11:
2f:4b:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:40 2026 by rpki-client