Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: V106bZMGrFXbTDoNYy+HbZyY8VXTtWd4w8My1J02PgA=
Subject key identifier: 5B:8D:3F:DC:05:F1:7E:6D:49:64:A8:88:F1:52:BF:66:68:49:7B:0A
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019D9DE3AEA3E2FE8CA1B621F9F681C2B5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 15CA
Signing time: Sat 18 Apr 2026 00:00:37 +0000
Manifest this update: Sat 18 Apr 2026 00:00:37 +0000
Manifest next update: Sun 19 Apr 2026 00:00:37 +0000
Files and hashes: 1: 7AZcdK-2iSMlF0mV6xbUMSO3Xnw.roa (hash: G5rGJtONXIdV22l8uGfiFrqq42pAnIm3ZbpijKWWsuw=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: bVq5YVCToaxhu9me0XqaNp5Ts0igQ2aV4BcHLq9DH4g=)
3: SED4pOneSK1Nz4GXJ8sxeamW4bA.roa (hash: rv2mx30pNaTbk2/jVNoTsekRApJk2qpOrI2G/ZbcQfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:ae:a3:e2:fe:8c:a1:b6:21:f9:f6:81:c2:b5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Apr 18 00:00:37 2026 GMT
Not After : Apr 19 00:00:37 2026 GMT
Subject: CN=5b8d3fdc05f17e6d4964a888f152bf6668497b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:0c:38:39:01:f1:8a:69:3e:9e:e6:97:f1:
5e:ae:2d:69:2f:bb:32:47:47:09:34:f0:e2:94:a3:
12:ef:8d:cb:7a:18:2f:dd:1b:4e:ee:c9:fd:df:e9:
78:f8:47:c0:39:7a:62:be:91:d5:59:f8:de:06:7d:
52:c9:80:b7:da:59:1c:28:dd:d5:03:78:18:b0:09:
da:29:e2:c8:88:78:47:3c:bd:8a:61:2f:88:1a:5c:
a7:45:de:5d:f5:35:bc:6d:fe:ca:e4:46:c0:21:7b:
1d:c8:f7:f1:34:f3:10:27:2a:4a:8c:12:18:47:50:
58:2c:1e:5e:9c:4c:b9:ad:9c:1b:e0:23:18:53:59:
ad:9c:00:ba:34:c0:f8:58:aa:c4:91:62:cb:fb:28:
f4:58:66:0a:00:af:68:9f:06:b7:8b:c0:a3:55:55:
2d:47:73:ff:a8:a4:cf:1e:a9:48:18:21:06:cb:25:
e5:fc:ba:b3:de:97:72:a2:0c:58:c0:0f:70:ed:ff:
2f:64:e9:65:dd:9a:61:c0:47:89:01:b3:c6:73:56:
77:09:5f:58:bb:e2:17:11:fa:13:a6:25:55:22:d3:
eb:e3:b1:fb:3e:55:dc:2d:4d:70:3e:b9:dc:e0:3f:
53:8c:31:cd:e1:09:aa:00:32:4d:09:8d:32:b8:14:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:3F:DC:05:F1:7E:6D:49:64:A8:88:F1:52:BF:66:68:49:7B:0A
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:60:c9:11:12:82:9a:fd:cf:3f:33:c7:46:a1:05:bd:7a:13:
54:e5:26:6a:98:98:f0:76:f2:fe:88:89:4b:ab:ff:f2:27:ae:
0a:c0:ae:a0:f8:8d:16:14:7e:1d:51:db:3f:a5:0c:ef:fa:f6:
84:88:b9:47:60:8d:3b:dd:83:e7:65:ae:2f:df:cf:32:43:ed:
9f:8e:31:6c:d5:09:63:1a:3d:cf:1c:27:8e:5f:a4:87:d5:37:
b5:fb:e4:b1:99:94:fd:55:24:18:69:6e:62:48:b3:87:b7:b4:
84:aa:95:d0:33:90:98:b8:61:ce:e4:95:07:aa:d6:11:b8:78:
ac:9b:86:ef:3e:8e:19:d5:46:6c:85:30:61:02:d9:6e:6f:4a:
35:4e:6c:94:da:e5:f5:22:d0:a4:0d:7e:cd:10:6c:c6:91:a6:
e1:cf:fb:d1:82:3d:09:cc:cf:ad:59:88:07:65:45:e4:b3:c3:
52:0e:93:3a:23:c1:68:7a:52:dd:e0:9e:73:e0:6f:ad:97:2e:
4a:f5:f2:83:e8:3e:e3:f6:40:f5:52:0f:d2:f7:32:21:43:ad:
8a:cd:fa:d7:00:b0:fb:b4:e6:f6:66:a0:a3:8e:f9:32:48:10:
84:bc:9c:0f:0d:20:99:83:bc:85:44:0a:22:2c:22:42:e3:b7:
41:b9:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:41 2026 by rpki-client