Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
File: Q9JznRqU2rlXbiF80N-FdyBLIwA.mft (raw, json)
Hash identifier: sgEyagzxUDFQS1oOoV/cHDpXYyJ/B4e0zdh3Bif2V1Y=
Subject key identifier: A6:88:28:B3:5B:ED:0F:95:2F:1C:F4:2C:D0:15:73:16:8D:C1:1A:92
Authority key identifier: 43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
Certificate issuer: /CN=43d2739d1a94dab9576e217cd0df8577204b2300
Certificate serial: 019D98F438D3AFEAB15B9EB302AE8A3DB5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
Manifest number: 0618
Signing time: Fri 17 Apr 2026 01:00:35 +0000
Manifest this update: Fri 17 Apr 2026 01:00:35 +0000
Manifest next update: Sat 18 Apr 2026 01:00:35 +0000
Files and hashes: 1: Q9JznRqU2rlXbiF80N-FdyBLIwA.crl (hash: DKEKtDu1nif7X58r8aa+sk445d7PPPWguV12Mn86Or8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:38:d3:af:ea:b1:5b:9e:b3:02:ae:8a:3d:b5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d2739d1a94dab9576e217cd0df8577204b2300
Validity
Not Before: Apr 17 01:00:35 2026 GMT
Not After : Apr 18 01:00:35 2026 GMT
Subject: CN=a68828b35bed0f952f1cf42cd01573168dc11a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:0a:b0:be:21:99:c3:b9:24:7a:3e:19:da:
19:65:bf:31:e4:45:94:bd:c9:e6:01:34:04:1d:20:
fc:50:64:9d:7c:4a:4e:0e:a0:11:e6:87:c7:f4:35:
3b:fb:dc:cc:9a:2a:84:9b:f3:d3:d3:aa:29:c8:93:
82:c4:96:93:72:7d:39:75:df:06:80:8c:1d:3d:4d:
28:4b:f2:81:68:74:22:1a:77:00:59:8f:5d:73:b3:
29:27:c9:4e:ea:97:4d:d8:b0:57:9e:5c:3c:9a:a5:
8f:ad:36:45:71:70:32:95:18:44:86:e3:78:6d:11:
2c:8b:17:48:1b:b3:ad:5c:98:69:3e:b7:5c:1e:81:
a6:96:b5:e9:d5:6c:89:66:0f:d2:bd:57:bc:51:d1:
57:91:c5:d8:d6:3e:f6:cc:89:05:69:ae:fd:2f:4a:
ff:8b:94:b0:ad:91:e0:76:94:f9:d8:aa:9a:5e:b3:
68:6d:f1:03:83:1d:87:d4:4f:cb:65:7d:89:34:41:
f3:c9:c8:8a:5b:ed:76:c0:3e:ea:ff:50:35:03:43:
04:b9:2f:a8:5f:26:ad:b7:4b:68:61:75:f9:3e:a5:
38:5e:56:6d:94:ff:40:8f:c1:f8:88:c0:65:31:20:
01:69:31:45:35:91:d5:ce:95:dc:72:8b:ee:0e:d5:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:88:28:B3:5B:ED:0F:95:2F:1C:F4:2C:D0:15:73:16:8D:C1:1A:92
X509v3 Authority Key Identifier:
keyid:43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b0:88:ee:ba:88:fe:d5:c8:55:03:da:08:72:a1:0c:e9:ae:
ae:9e:69:2e:c5:9c:a7:8c:35:bd:68:02:70:00:9c:8e:91:02:
4d:9b:8f:ed:32:08:62:35:ef:bd:ee:3e:f4:9c:ca:d2:e5:a2:
b2:a0:1b:96:58:a7:e8:5d:f5:fa:f6:72:c9:7c:5b:ce:2a:35:
0b:9f:00:82:fb:c9:06:97:8a:ab:be:8e:09:4b:5b:29:a2:ce:
ce:0f:41:29:52:09:fc:d8:16:3c:88:81:8e:71:db:99:62:a6:
7e:46:d6:89:b4:98:f0:c2:81:49:8e:b1:d9:c6:bc:5a:57:e2:
ad:25:19:ee:c9:97:81:d8:37:cf:5b:51:06:5b:b8:af:ee:97:
39:43:3a:42:59:45:06:ef:9f:37:a3:d5:75:ce:49:a8:f3:1d:
22:c1:9f:dd:b2:e3:03:66:37:80:91:f2:1d:45:d6:5a:40:b2:
71:d3:8c:5e:73:00:cd:dc:2b:25:fc:7b:a9:31:ed:87:d3:81:
c9:b3:c3:bf:25:4b:10:9c:82:db:a6:51:d1:59:4d:17:34:67:
a0:24:4e:f0:31:92:b6:a4:25:4a:78:98:c9:f1:15:07:81:db:
8a:8b:ea:ab:da:0a:9f:ad:6e:67:f4:e7:38:02:c8:6b:4e:3e:
42:76:93:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9DjTr+qxW56zAq6KPbXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDI3MzlkMWE5NGRhYjk1NzZlMjE3Y2QwZGY4NTc3MjA0
YjIzMDAwHhcNMjYwNDE3MDEwMDM1WhcNMjYwNDE4MDEwMDM1WjAzMTEwLwYDVQQD
EyhhNjg4MjhiMzViZWQwZjk1MmYxY2Y0MmNkMDE1NzMxNjhkYzExYTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCkKsL4hmcO5JHo+GdoZZb8x5EWU
vcnmATQEHSD8UGSdfEpODqAR5ofH9DU7+9zMmiqEm/PT06opyJOCxJaTcn05dd8G
gIwdPU0oS/KBaHQiGncAWY9dc7MpJ8lO6pdN2LBXnlw8mqWPrTZFcXAylRhEhuN4
bREsixdIG7OtXJhpPrdcHoGmlrXp1WyJZg/SvVe8UdFXkcXY1j72zIkFaa79L0r/
i5SwrZHgdpT52KqaXrNobfEDgx2H1E/LZX2JNEHzyciKW+12wD7q/1A1A0MEuS+o
Xyatt0toYXX5PqU4XlZtlP9Aj8H4iMBlMSABaTFFNZHVzpXccovuDtWO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaIKLNb7Q+VLxz0LNAVcxaNwRqSMB8GA1UdIwQY
MBaAFEPSc50alNq5V24hfNDfhXcgSyMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlKem5ScVUycmxYYmlGODBOLUZkeUJMSXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ZmU1YzUtOWJhMi00ZTY2LWJhMmUt
YTQ0MzI2YTM5Zjk3LzEvUTlKem5ScVUycmxYYmlGODBOLUZkeUJMSXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ZmU1YzUtOWJhMi00ZTY2LWJhMmUtYTQ0MzI2YTM5Zjk3
LzEvUTlKem5ScVUycmxYYmlGODBOLUZkeUJMSXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLCI7rqI
/tXIVQPaCHKhDOmurp5pLsWcp4w1vWgCcACcjpECTZuP7TIIYjXvve4+9JzK0uWi
sqAbllin6F31+vZyyXxbzio1C58AgvvJBpeKq76OCUtbKaLOzg9BKVIJ/NgWPIiB
jnHbmWKmfkbWibSY8MKBSY6x2ca8WlfirSUZ7smXgdg3z1tRBlu4r+6XOUM6QllF
Bu+fN6PVdc5JqPMdIsGf3bLjA2Y3gJHyHUXWWkCycdOMXnMAzdwrJfx7qTHth9OB
ybPDvyVLEJyC26ZR0VlNFzRnoCRO8DGStqQlSniYyfEVB4Hbiovqq9oKn61uZ/Tn
OALIa04+QnaT+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:34 2026 by rpki-client