Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: Lef0E6SC7iLEnCq5Kn2a8PZ56EKJ9oeWjuL3hxNsVec=
Subject key identifier: CF:78:5E:83:93:17:CF:C5:65:53:86:73:2F:0E:50:C1:7B:B4:DA:A0
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 019DA4C1B1F276E1485A4BB4C1BC7400AC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 08:00:50 +0000
Manifest this update: Sun 19 Apr 2026 08:00:50 +0000
Manifest next update: Mon 20 Apr 2026 08:00:50 +0000
Files and hashes: 1: 5DE_W6pAcWsoXSwOt7MJk1c52UM.roa (hash: xF+d5aYH+/051lwctUkQ5P94uH29GuKQimWqiTvacVc=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: CTmMihMbd2OGAhfzPE92wOexfDIg0ZymWJv1AigmjmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:b1:f2:76:e1:48:5a:4b:b4:c1:bc:74:00:ac:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Apr 19 08:00:50 2026 GMT
Not After : Apr 20 08:00:50 2026 GMT
Subject: CN=cf785e839317cfc5655386732f0e50c17bb4daa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:45:7a:82:5a:7e:cd:84:e1:b6:28:af:af:
30:cc:54:e0:b3:1a:6f:2d:5f:e0:e8:29:51:60:4f:
02:e9:3f:5b:08:d1:80:be:77:07:41:20:bb:58:e7:
e7:ab:6c:41:b9:75:d4:c5:6f:a9:a0:c5:61:3d:d4:
58:f0:66:ab:5a:5d:b6:60:c6:d8:70:19:8a:ee:fd:
d8:10:d7:cc:6b:5b:3b:4c:83:f9:10:b5:9c:da:37:
28:7e:c8:3d:09:46:fb:54:1a:ba:62:88:ec:9e:da:
ae:d9:f6:e8:e1:7e:01:9e:4d:27:78:8f:ca:be:ad:
6d:04:40:25:2d:3d:ac:3a:11:96:5c:79:b1:6e:06:
07:c1:68:a2:6a:39:6b:14:09:af:d0:24:8c:a2:7a:
88:f3:b1:5f:3e:78:53:b5:c6:80:09:2b:dd:2c:ae:
53:b0:55:75:9b:e4:e6:11:cb:8b:62:3c:07:25:c0:
1d:a9:e5:09:fb:9b:50:1b:72:e1:56:df:15:e9:c3:
59:d4:23:e9:2a:40:89:45:99:07:d7:75:77:c3:6b:
0f:6d:e9:fa:54:27:b1:1c:4a:75:8e:73:cc:a7:7a:
b8:91:46:51:87:cf:ac:e1:35:64:9e:82:95:16:f9:
4d:90:ac:f2:d8:0d:bc:2d:10:95:ff:8f:a0:43:0d:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:78:5E:83:93:17:CF:C5:65:53:86:73:2F:0E:50:C1:7B:B4:DA:A0
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d1:32:8d:26:1b:d7:a3:8f:f1:00:dd:13:de:0e:e2:c9:bd:
d8:ee:9c:1f:a0:80:28:21:c1:8c:37:96:cd:e4:11:5a:d5:09:
ea:f9:2a:d1:4d:69:79:b4:25:8d:bc:d7:16:06:d8:9c:88:12:
3b:44:a1:27:e3:f7:22:0f:c1:be:9f:fd:39:4f:ba:15:b6:3a:
69:33:e3:b9:b2:6c:ef:bc:94:64:90:7a:15:86:f6:34:81:f5:
e4:1a:91:36:1a:c0:0f:37:d0:e0:fc:2d:8b:0f:12:99:ff:c9:
8b:9b:a3:17:ab:d9:6b:af:b6:bb:83:c3:d9:00:40:c4:18:c6:
b3:eb:6a:a9:ab:66:c7:96:23:83:15:df:ee:68:33:9a:48:3f:
6a:06:bc:ae:ad:7e:4f:d8:8a:c2:96:9f:77:ad:42:bf:ab:3b:
51:0c:73:7e:9b:06:65:e7:51:d7:9b:bf:17:63:59:c0:3c:71:
6e:3c:e4:5b:52:d9:9e:40:aa:4b:7e:ce:5c:34:4b:fa:f9:3b:
54:a3:f2:69:15:0e:70:71:0b:5e:0b:1a:b0:62:00:aa:66:aa:
3b:af:20:87:74:22:64:e6:64:98:09:72:c8:2c:05:fc:c7:f9:
4b:79:73:20:1a:ae:de:ee:83:f3:63:11:7c:6a:b9:d2:cb:6e:
6d:e5:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:40:36 2026 by rpki-client