Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: cDfAAgJO0koNGqonQ91Asj2X/ByTvltg/cuoaR6uIqQ=
Subject key identifier: D2:2E:E0:FB:E0:E4:82:06:BF:9D:71:B2:5F:36:94:0F:B3:8A:B5:3F
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019D9962AE304DDDD3170A9FD417D2DC260D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1884
Signing time: Fri 17 Apr 2026 03:01:14 +0000
Manifest this update: Fri 17 Apr 2026 03:01:14 +0000
Manifest next update: Sat 18 Apr 2026 03:01:14 +0000
Files and hashes: 1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: q552loc7aEmwq5DatHAu4np6IBglbnWMDPaXT0X1S0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ae:30:4d:dd:d3:17:0a:9f:d4:17:d2:dc:26:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Apr 17 03:01:14 2026 GMT
Not After : Apr 18 03:01:14 2026 GMT
Subject: CN=d22ee0fbe0e48206bf9d71b25f36940fb38ab53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:2a:aa:3e:9d:15:6c:f8:e9:02:7f:02:08:
53:1c:0f:d4:2b:3a:5d:15:6a:1f:8b:44:75:3e:b3:
ed:48:89:7e:9f:c9:2a:8a:6a:ea:28:c9:2c:50:6b:
10:14:d7:71:4b:f5:65:51:c5:62:15:db:a3:40:f6:
d7:e9:ec:26:39:da:79:a2:ea:e5:e5:00:c8:45:cf:
87:84:87:de:d2:a8:de:58:79:72:21:bf:e4:84:8e:
c0:54:04:b3:44:5e:bb:5f:a5:a2:7c:b6:b8:a6:60:
3f:89:b0:64:30:ca:66:32:a0:9f:53:f6:a0:d4:07:
63:0e:52:32:58:ef:db:b1:1a:6f:a3:37:bf:91:a1:
d3:a4:22:0b:71:c1:04:3f:55:b2:8c:ca:32:44:35:
3b:fa:75:10:77:f6:45:ea:30:87:d9:ea:f8:75:27:
ad:e0:cf:ae:1e:23:9f:00:57:16:24:35:1b:b1:1f:
44:78:36:0a:6b:fc:e7:0b:6a:5a:54:2c:2e:bf:54:
b4:a6:34:91:11:b3:12:42:be:7f:95:d9:a9:e0:70:
3a:9e:c3:91:e3:b7:7e:89:e5:1e:88:5e:1e:71:99:
ab:6d:18:39:c5:1e:47:a5:e3:1a:ad:ec:90:36:e5:
54:12:94:88:14:56:f2:57:7d:b0:59:7f:b8:f1:d3:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2E:E0:FB:E0:E4:82:06:BF:9D:71:B2:5F:36:94:0F:B3:8A:B5:3F
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b1:76:5b:f4:7b:d6:b8:67:33:87:fc:eb:5b:c0:66:1d:8e:
ae:7c:bd:a7:b2:2d:bd:77:2f:6f:45:be:e2:84:80:6f:0b:ed:
0c:86:d9:bf:c8:4c:51:0d:31:d8:04:8f:39:87:b1:c8:f8:85:
f9:dc:42:64:db:93:f9:89:5f:9f:af:c6:42:7e:38:dc:a9:21:
9b:99:50:56:56:c8:e0:8a:ea:c5:16:41:a9:b5:2a:6c:68:79:
dd:92:da:04:d3:0e:5e:21:22:76:fc:11:91:65:99:33:49:93:
e1:5a:a2:df:ac:c6:c0:1a:f5:2f:9b:dc:f5:74:a3:40:80:bf:
36:4f:b5:27:c9:d1:a4:8f:6c:bf:8e:dd:1b:e7:f7:cd:f3:27:
db:d7:21:42:0d:14:00:2b:1f:ff:ef:ad:92:dd:15:71:6c:61:
5f:dd:39:6f:eb:d2:b5:da:02:dd:6d:40:1d:a6:4c:53:c1:ca:
ce:b9:22:a8:91:07:57:d3:64:3a:59:8b:6e:01:30:64:13:3b:
de:85:91:ad:9f:54:6c:e8:65:d1:0b:db:5f:0c:7f:42:5f:7e:
17:c4:37:41:a8:52:85:0f:e8:57:91:dd:a1:a7:68:e5:65:5f:
5c:a7:a4:79:ce:fd:a8:d6:c9:4a:46:af:d6:b9:2d:c1:bc:cd:
a5:9a:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:41 2026 by rpki-client