Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: XVgF1nK6+JprhsSSRbeDqGrdaymJhqqVUxQb0LO++B0=
Subject key identifier: 3C:19:19:F0:7C:43:8C:6D:2F:FC:69:B3:84:91:9D:CA:9C:A3:3D:B3
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 019D98BD76E5B81D96BA2CD4578961B580F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 0718
Signing time: Fri 17 Apr 2026 00:00:46 +0000
Manifest this update: Fri 17 Apr 2026 00:00:46 +0000
Manifest next update: Sat 18 Apr 2026 00:00:46 +0000
Files and hashes: 1: Ayy3FQCZfsnrrkGpwiilXLbjkWM.roa (hash: esgmCzM37dMW6UxbTfw9yQ8cfp/xjD2YDV7D5NJMYIE=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: 9t8GBzIn462W6OBhb0l5TZnTG9+uw3VJWlibY8+T+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:76:e5:b8:1d:96:ba:2c:d4:57:89:61:b5:80:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Apr 17 00:00:46 2026 GMT
Not After : Apr 18 00:00:46 2026 GMT
Subject: CN=3c1919f07c438c6d2ffc69b384919dca9ca33db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:26:73:36:d5:70:e7:7c:68:58:eb:e0:e6:
38:d7:d9:e6:dc:b5:30:e0:dc:cd:72:22:8a:f2:df:
b6:fc:63:44:cf:a7:88:1a:0d:9d:12:61:2c:37:c7:
d4:91:78:ca:33:82:11:c4:80:b8:b0:6c:55:b5:df:
fc:12:93:da:04:1a:10:cf:b4:86:45:ad:92:c2:d4:
87:45:1e:80:79:43:1e:94:59:26:d5:ed:0f:df:1e:
ad:31:37:00:06:0e:81:18:e0:64:85:fc:a4:3b:70:
56:f7:1b:f7:2a:da:7d:7e:68:96:0d:65:d6:5d:d3:
dc:a0:82:75:71:4b:c9:74:41:4d:fe:fa:df:57:8d:
5a:8a:05:e8:ba:c3:33:16:c0:f7:76:64:53:e8:b3:
f6:14:b6:49:e9:6b:fc:cb:8e:7f:3e:96:83:97:52:
35:1c:b3:4d:db:f3:ac:dc:18:a7:64:31:01:7d:57:
41:c1:6c:2f:c2:b4:82:71:19:21:05:d2:f3:18:b5:
e9:e5:0e:d2:7c:a2:97:7e:b8:c8:ed:ba:1f:d7:9f:
6b:08:56:56:63:48:d2:2b:de:bc:4d:d9:77:f5:b1:
b9:8d:4e:2a:9f:90:3c:79:92:d1:05:7d:b5:f3:38:
2b:96:73:8a:1a:f0:37:44:ba:95:5a:6f:00:78:78:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:19:F0:7C:43:8C:6D:2F:FC:69:B3:84:91:9D:CA:9C:A3:3D:B3
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4e:45:5b:ee:d0:6e:8e:a7:83:d4:29:b0:f7:ee:a2:fd:04:
bc:34:00:50:75:aa:f9:3c:d6:cb:1f:29:3e:cb:71:ff:2b:a2:
6c:dc:ae:c1:d7:b5:c7:01:26:4e:1a:c7:31:6c:39:01:f8:73:
7d:8b:bb:57:7c:d5:a8:69:8f:21:91:43:64:c7:4c:4e:5e:ff:
fd:24:02:a2:d2:48:db:7a:4e:05:af:20:04:57:c5:2d:ed:df:
b4:f8:8a:eb:6e:9a:1d:2d:32:08:c1:b6:7b:63:23:b8:01:50:
2f:af:2a:4e:35:69:06:f6:76:ac:1d:3f:70:e9:00:37:c2:10:
6e:b0:ae:35:10:49:7b:ca:a4:bc:9c:48:e8:a3:dc:bc:32:96:
ac:47:c0:36:70:0a:f3:c2:6b:f1:85:a3:9f:10:bf:6d:65:8a:
28:c5:09:5a:33:1a:07:7a:59:91:c8:db:41:d6:59:f4:00:48:
ef:3b:50:57:9e:c2:d8:07:a4:a8:fc:13:d4:e3:d3:21:50:8d:
c7:2b:b1:76:d8:af:b0:03:a5:f3:ed:56:06:f0:50:b3:fb:80:
b7:b8:41:c9:0a:79:cc:91:04:07:22:36:09:29:50:a1:69:8c:
5c:f5:95:b2:74:47:fe:1b:44:ea:d6:86:47:c6:96:84:d3:6f:
0f:5e:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:22 2026 by rpki-client