Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: nzXgliGP8J1DBAawRk2eTFJgba/+E6bY0GwtsrdU6EU=
Subject key identifier: EF:D2:D2:74:DF:D8:CC:1A:EC:CB:40:22:FA:B1:2D:A7:F4:61:75:A2
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 019DA3E6C823F6DF79B9749278BFBEF2E71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 11E4
Signing time: Sun 19 Apr 2026 04:01:43 +0000
Manifest this update: Sun 19 Apr 2026 04:01:43 +0000
Manifest next update: Mon 20 Apr 2026 04:01:43 +0000
Files and hashes: 1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=)
2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=)
3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: Ju5rGxt+aIOFsgU6RFibp2LDwg4TXL/aigqcu6SMKX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:c8:23:f6:df:79:b9:74:92:78:bf:be:f2:e7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Apr 19 04:01:43 2026 GMT
Not After : Apr 20 04:01:43 2026 GMT
Subject: CN=efd2d274dfd8cc1aeccb4022fab12da7f46175a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:2d:03:7b:af:61:b5:cc:f9:a2:86:71:44:
6b:3f:d1:1d:ed:cc:17:0d:ce:a9:8e:be:82:71:44:
b9:1a:b8:2b:4f:3f:43:0c:0a:f2:7e:9b:6a:5b:94:
7b:b2:fa:3f:95:f3:31:da:d2:ed:69:05:f4:3c:2d:
91:6f:d4:11:b3:4e:a5:03:b8:3d:a2:ab:15:4e:93:
b9:83:f0:2d:00:9e:c5:13:d0:d5:f1:4c:27:35:5d:
da:d7:0d:a9:8e:17:e2:58:2b:dc:ea:36:c1:a4:16:
21:9e:fa:62:0a:38:70:8c:09:48:56:a2:b4:cf:79:
f8:86:00:93:da:ba:bf:10:b7:c1:b1:67:8d:09:a0:
6e:51:67:13:f3:b4:13:b3:47:0b:60:e1:7f:63:df:
58:5e:c4:3e:6b:63:43:22:20:63:be:9d:b3:a1:44:
ec:1a:cf:96:ed:c5:d4:56:b9:12:dc:2f:9a:60:38:
a3:e5:81:92:20:c5:6e:4c:01:be:83:89:07:66:3b:
9b:b6:f1:1f:b1:f2:cb:61:cd:cc:bc:57:2a:e5:5e:
67:02:ed:bd:f9:22:60:0d:4f:6f:3a:ab:c8:f7:b7:
f0:8a:a5:99:bb:22:c4:84:89:7f:6e:27:2d:c1:08:
e0:92:a7:7e:06:83:36:a7:aa:80:05:a9:87:8f:bb:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D2:D2:74:DF:D8:CC:1A:EC:CB:40:22:FA:B1:2D:A7:F4:61:75:A2
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:94:30:37:eb:a7:c8:ab:dd:22:a1:90:63:34:79:ea:25:2d:
bd:1e:9f:50:26:9f:44:71:2b:62:0a:85:a3:ab:f9:9a:d3:a1:
23:a4:e7:63:e4:87:53:b5:93:ea:14:b2:6b:ba:f7:88:d5:46:
d5:3a:04:c1:a0:53:5e:2c:91:90:0b:dc:11:7c:b6:7d:55:98:
75:49:70:68:bf:85:86:c8:9f:53:45:c2:cf:81:c3:f5:2d:62:
e2:ed:da:57:fc:9b:7d:dc:6b:9e:f1:dc:d8:37:d4:8c:7a:98:
b4:63:e7:7a:90:d0:40:4c:88:1c:99:c3:2f:76:18:73:24:b8:
53:8d:0f:32:bf:32:19:37:f2:92:15:14:03:e9:dc:a2:46:72:
ec:e3:2e:41:84:9f:4f:01:7e:31:22:c3:9f:16:e6:07:4f:7c:
f1:01:da:0b:de:cd:0b:d3:08:08:e9:2b:bf:20:9d:6d:35:3b:
b8:e5:1b:f0:de:af:55:86:27:44:c6:65:b4:51:06:fe:4f:57:
68:29:5b:df:c7:ae:93:47:0a:4f:21:82:6c:17:7a:40:a0:53:
4e:1b:7b:d4:b6:38:44:40:5c:08:3e:67:b9:31:6c:93:c3:84:
18:6e:2d:05:12:5e:96:5b:72:ce:5c:59:a0:5e:d5:cf:1c:96:
d4:4d:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:36 2026 by rpki-client