Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: Ktl/et9Ya2Gwy7/aNk+xObYK0mQTpXuFwdIMvjiPTYE=
Subject key identifier: 56:95:F6:2B:94:35:E8:85:52:A2:36:3E:71:0F:30:DB:DA:43:4A:8C
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019D9B875144D02FC4C94BC3BAFB271DE9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 13:00:29 +0000
Manifest this update: Fri 17 Apr 2026 13:00:29 +0000
Manifest next update: Sat 18 Apr 2026 13:00:29 +0000
Files and hashes: 1: hLY2--5SKTnZ1QC36Cf-E8Iq5ho.roa (hash: lfg0kzyvgHw2ZfZ5eS4nTJ7bYAVmeebrxL6dhvaG0Ms=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: /3dtRNUm5hvnYlbSlbXpcRwmv4lqvVrvrtwMLlNSBpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:51:44:d0:2f:c4:c9:4b:c3:ba:fb:27:1d:e9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Apr 17 13:00:29 2026 GMT
Not After : Apr 18 13:00:29 2026 GMT
Subject: CN=5695f62b9435e88552a2363e710f30dbda434a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:03:be:fb:15:58:95:96:78:2b:52:b0:80:
7a:cd:eb:5e:0f:77:c3:dc:ca:55:77:7a:27:34:f5:
3d:88:1a:ed:c8:6b:a9:57:93:19:c1:7a:b6:c2:43:
fe:46:1c:dd:8e:47:54:41:06:26:87:77:29:b8:ed:
4a:71:f9:d0:3b:d0:2a:c9:cc:aa:72:82:5c:aa:79:
6c:f6:d9:d2:25:77:5c:4f:f8:11:3f:69:fc:9e:dd:
ce:bd:b7:34:0d:7c:c4:d2:78:e2:b8:6c:45:25:00:
f5:1d:49:1c:d6:8b:69:da:f0:a5:21:72:96:c5:98:
e2:78:b9:4e:4d:31:35:b2:45:44:98:10:56:5c:d2:
cf:47:2b:07:cd:e2:73:39:9b:50:d4:eb:39:84:88:
07:da:2a:1b:78:5f:8e:2b:de:20:a8:45:a3:24:cf:
b0:57:b0:44:eb:df:66:7c:a5:0c:9e:a9:31:b7:5a:
8c:fa:15:3b:6e:81:83:36:d9:88:5b:b9:e8:43:ea:
c5:3f:92:4f:e2:71:3a:ff:06:83:52:8a:27:6d:9d:
51:52:b2:2a:e9:e7:fd:64:59:4a:8d:ea:d7:7f:92:
b6:8b:27:f4:4a:e5:a3:f8:73:aa:6f:36:b4:8d:0e:
45:b4:90:16:90:5b:55:b5:f8:22:85:3c:c5:6c:22:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:F6:2B:94:35:E8:85:52:A2:36:3E:71:0F:30:DB:DA:43:4A:8C
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:be:a5:f9:e5:74:3f:f2:7e:22:7b:16:18:9f:05:c0:58:f9:
30:2a:9d:cb:59:f4:43:c9:0e:b6:91:d9:d4:98:89:f0:e1:54:
44:0e:c7:da:d9:74:eb:cd:00:11:20:1d:18:01:38:b5:3b:a3:
5d:4d:01:12:5b:34:5b:ea:a5:e7:6f:2a:1d:4e:3f:e4:10:3b:
90:11:8e:da:84:dc:d0:2b:f1:2e:b6:e5:70:19:91:70:a7:ba:
78:31:93:c2:49:f6:41:66:a2:2f:81:09:18:e7:8e:eb:89:b8:
be:34:10:10:ae:2b:83:d5:31:20:96:88:c5:39:75:72:0f:b9:
cf:e2:54:78:c6:a2:e3:3f:56:7f:9e:8e:92:ed:ae:6a:10:a9:
b8:d9:c6:78:2d:d5:70:cc:d8:c5:24:bc:a0:74:92:bf:7c:86:
03:83:67:96:a9:30:b9:3e:97:b8:67:18:bd:ee:00:44:7d:ed:
44:75:bc:cd:bb:95:53:16:9c:1c:70:d3:70:e6:b0:1f:d4:75:
c1:ec:b3:9a:f2:c5:e8:cf:3d:d0:c4:29:82:29:41:40:65:23:
76:ab:58:5f:76:a5:f3:a3:58:d5:39:41:00:83:4b:86:91:50:
fc:7a:6f:7c:b6:82:99:38:13:2c:59:c0:bb:31:da:1f:f4:bd:
1e:43:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:39 2026 by rpki-client