
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier: jiEdvaUA9I9XMRm5OKY9W9CxNlZCFRDcWYgDZcG8gAA=
Subject key identifier: 35:FB:74:B5:E9:2E:FD:1A:C3:3E:32:72:9A:87:1A:4E:1E:F8:82:BD
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 019DA3AF2EA8BD853952021F1A7BC46C7C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number: 18D0
Signing time: Sun 19 Apr 2026 03:01:00 +0000
Manifest this update: Sun 19 Apr 2026 03:01:00 +0000
Manifest next update: Mon 20 Apr 2026 03:01:00 +0000
Files and hashes: 1: Dxm0EoxGp2ndo74sPdVeeXzoflk.roa (hash: yNKkIjFKgCoECJezorrDtiFQ2gdUXVgat36+B1ETObs=)
2: OMxShmSN_MmgdqjB3FCH456QPyw.roa (hash: Vm7cRKSz6QpnQGwyuo2jJgMyLFID06ztzYaKVdmY098=)
3: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: G7PkP/8o2Ua+bmZjmcZnCKoC7eG3YLC75Az0erepoB4=)
4: VLAKggAmP_2e5ujcu_orpJmGymk.roa (hash: R7zarhFK+F6qeI1f2Us/zQph/cT5R9wLEpRj2LShETc=)
5: g_4YB2ktK_BZdQW2jisjb57z4v4.roa (hash: FrWnOJyYlT2BDuUH41B6UfYjVVUxab5ezAoKnJ2JP3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:2e:a8:bd:85:39:52:02:1f:1a:7b:c4:6c:7c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Apr 19 03:01:00 2026 GMT
Not After : Apr 20 03:01:00 2026 GMT
Subject: CN=35fb74b5e92efd1ac33e32729a871a4e1ef882bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:d5:73:eb:6b:2c:4a:4d:1d:88:f5:d4:02:
0f:1b:f7:e6:8f:b9:54:10:af:90:5f:1b:a1:e1:49:
a0:8e:e7:aa:f1:f4:79:82:4f:1d:e8:eb:b4:06:08:
0d:21:27:f6:09:95:48:df:7e:26:43:c2:0a:cb:46:
ef:ed:26:08:85:71:67:88:5e:47:a2:9e:27:84:25:
07:3a:13:e6:67:8c:81:b9:a3:3f:93:85:c6:06:08:
9f:e4:d1:29:db:99:8a:6a:19:8a:35:8c:c6:6d:f5:
4e:96:a6:bb:20:6a:2b:51:a4:23:d5:0f:a4:32:b9:
38:13:3f:0f:de:0d:33:60:6a:c3:a6:6a:40:c8:ac:
6a:04:88:38:9d:3b:09:80:a0:a8:a0:b9:bd:2e:11:
35:c4:2d:04:77:ca:4f:4d:51:4a:eb:48:cb:43:2f:
72:dc:01:08:70:57:a5:c5:f2:df:11:68:09:07:d4:
ed:c7:35:92:0e:bb:a0:fa:10:bc:ed:a3:90:9d:87:
88:ce:52:88:dd:78:c8:11:c8:f4:7e:af:1e:56:e2:
ad:34:54:43:6a:1b:3b:5c:d3:b5:59:77:08:5f:f9:
4b:6e:18:9f:8a:66:f8:cd:55:ee:26:c2:e4:13:4e:
95:02:b3:73:8d:51:59:60:80:96:7f:00:9a:fa:b4:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FB:74:B5:E9:2E:FD:1A:C3:3E:32:72:9A:87:1A:4E:1E:F8:82:BD
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2f:0c:84:9d:a0:09:75:f4:9f:a2:08:dd:7f:4b:b5:88:94:
02:86:5a:2c:e6:db:1f:bd:e0:76:c0:df:59:af:48:f4:25:ef:
8a:81:4d:5c:a0:3b:c9:ee:ae:52:e8:60:20:4e:0a:dd:ef:81:
0b:02:fb:b2:38:39:0c:b3:af:44:bc:6b:9c:51:d3:27:c5:b2:
94:3c:49:ba:82:2c:58:99:7f:97:c8:01:a4:3d:c6:61:0c:d8:
35:70:ac:f8:d4:33:4c:6f:10:37:a0:05:72:f7:81:59:f3:95:
52:78:16:61:41:9a:d3:22:1c:c8:4a:bb:7e:48:4e:60:af:6b:
00:0d:61:d4:cd:a0:2a:9d:ef:9f:d0:1f:9b:f2:55:c9:fc:d1:
5d:96:3e:c1:03:f7:fa:8d:e3:53:41:59:e7:46:17:34:b6:e3:
e6:0b:99:bc:a1:47:9a:3b:cf:07:a2:d6:0f:c5:2a:4d:4e:0a:
c5:67:0d:8c:a6:e4:f1:43:d6:74:12:22:b5:43:e8:f8:44:fb:
3b:cd:96:56:92:34:3b:b0:bd:0a:a9:76:33:23:80:91:f8:a4:
d8:2b:40:68:fe:0e:c4:e6:bb:9f:85:df:02:08:be:f8:12:ce:
f3:b6:59:e2:08:71:88:ba:ab:6a:61:16:f5:ba:30:28:5c:80:
a5:1c:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:35 2026 by rpki-client