Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File: QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier: tTByOmPw2QrdFORMPMhs0S5r0sNiIIwuYsXMQfYS4x8=
Subject key identifier: AA:E0:51:68:9C:A7:40:FA:5D:13:50:A7:7C:3B:EF:7E:8E:4A:FC:96
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 019D9A74A1E56F5AD70C6806EF3FE428E694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 08:00:27 +0000
Manifest this update: Fri 17 Apr 2026 08:00:27 +0000
Manifest next update: Sat 18 Apr 2026 08:00:27 +0000
Files and hashes: 1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
2: 6wrwVwIOmyHRFv2kHnVse0hIMz0.roa (hash: 3Bl4eyRcujw6eiEUMKOOuOVx73Mu069CKt56gjYDvno=)
3: MaMuRhJpZN3sUs2ReczUrxtPqog.roa (hash: CIDmAVgYtghMXGXHEdC7pvKkJAeXg2JMbpBDZ4AJ2O8=)
4: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: pbrlxnwab0ttg8RiG7VoFHZNmbuuEfhH1KGejrvOasM=)
5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a1:e5:6f:5a:d7:0c:68:06:ef:3f:e4:28:e6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Apr 17 08:00:27 2026 GMT
Not After : Apr 18 08:00:27 2026 GMT
Subject: CN=aae051689ca740fa5d1350a77c3bef7e8e4afc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6e:3d:a9:4a:91:2a:25:5b:ea:9b:8b:e9:ff:
9a:dc:83:c3:50:d4:a9:3b:c9:96:7e:27:97:b8:de:
7b:ac:0a:4e:0b:c3:8d:60:ef:dd:55:5c:91:2a:6b:
b9:61:74:66:b7:4a:1b:e5:2f:1f:ea:4e:ef:3f:92:
25:66:69:38:b6:13:80:bf:13:61:c8:e0:ce:8a:6b:
de:89:0c:c7:bc:d1:74:fa:ae:6c:6d:b6:42:43:2f:
57:0e:38:53:e3:75:89:e6:a7:b3:8c:4c:78:00:b0:
b0:3b:0f:3d:9d:e3:50:7a:a2:03:3d:3e:0f:2b:49:
e5:61:99:94:dd:26:b4:d6:5e:d7:e0:cf:f4:9f:c7:
68:27:64:b6:db:8e:30:2c:63:17:29:7e:15:19:ec:
79:9d:7e:8f:98:0f:f3:9f:e0:49:be:78:c1:dd:76:
d8:c9:ef:c2:db:59:15:c1:db:04:e6:0f:28:ab:ee:
b2:49:0e:7c:fa:6c:6c:66:bd:41:e6:c5:2a:56:84:
47:5b:ec:7a:90:20:a1:9b:de:94:c3:12:a0:26:6e:
3f:ca:00:fe:69:79:3b:b5:96:3b:f3:1e:ad:9a:60:
b3:b2:74:61:0d:61:68:89:3c:e0:af:df:6d:f3:1f:
37:a5:11:69:56:e5:1b:58:6d:ef:0e:64:60:b5:4e:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E0:51:68:9C:A7:40:FA:5D:13:50:A7:7C:3B:EF:7E:8E:4A:FC:96
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:23:a4:88:2a:97:76:ac:fb:a7:06:0b:71:62:63:24:ca:1a:
b6:03:a1:7e:8f:0e:7f:0e:0d:25:1b:64:00:af:a1:a1:c3:0f:
f5:1c:37:e0:e4:75:7b:d8:25:28:a1:4e:9a:12:9a:ef:f2:6d:
1f:14:8f:ce:bf:ab:92:22:33:f9:02:15:54:31:99:e9:82:85:
75:72:5c:98:f3:94:fe:42:42:d1:aa:4f:3b:3c:df:7a:ca:e5:
54:16:d2:9a:02:71:3f:75:ec:1c:6d:f1:f7:01:b9:d4:27:35:
cb:55:c5:95:93:ae:b0:74:81:84:ca:52:7b:ed:09:85:b2:2a:
45:fa:e5:73:30:ec:a4:82:0b:f1:4e:f8:c0:eb:e4:c5:1b:1a:
32:74:d9:25:1e:c5:3e:a0:6f:e3:1c:a8:91:e7:92:67:0b:45:
ee:1a:9c:9b:c5:33:63:a7:e8:ad:8c:0a:d7:dd:fc:c7:75:5c:
a0:53:40:2d:f7:d0:9e:69:36:64:78:ca:2c:ce:59:f0:8b:6b:
25:2a:c3:bd:1f:87:1b:70:d2:f8:cf:24:fe:f4:57:4e:9b:73:
5a:82:4e:c5:fc:3a:65:8d:5a:64:f2:01:1c:bb:e8:3b:de:e5:
07:7a:c9:59:cf:1f:37:74:5d:2e:2e:f4:83:20:35:12:53:43:
03:c8:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:57 2026 by rpki-client