Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier: tJuOPfH4oGBrAPRNM27WrSW8HGke5F3JCzQE5FwN81Q=
Subject key identifier: B2:DA:EB:F2:87:8F:E0:4D:24:7E:ED:92:99:ED:18:4F:86:E4:82:E1
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial: 019D9B511D56F0725BA1F7B89553035DB333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number: 15AA
Signing time: Fri 17 Apr 2026 12:01:17 +0000
Manifest this update: Fri 17 Apr 2026 12:01:17 +0000
Manifest next update: Sat 18 Apr 2026 12:01:17 +0000
Files and hashes: 1: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: B0nUAXK8EHjzdSZx169CPyBLHfgbxc4bhrjZFqi/GR0=)
2: l_ruKO78QHVQe-kxScIY78h3qwo.roa (hash: jzBDUnZ8ZQyI+7hv0yjsFFpgvL3Te9Vz0AqbFGjex/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1d:56:f0:72:5b:a1:f7:b8:95:53:03:5d:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
Validity
Not Before: Apr 17 12:01:17 2026 GMT
Not After : Apr 18 12:01:17 2026 GMT
Subject: CN=b2daebf2878fe04d247eed9299ed184f86e482e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:53:ca:d7:03:ed:be:77:81:fb:a5:3d:6d:
1e:8e:c9:13:25:a0:23:6b:ed:a4:d9:22:7d:24:28:
ae:ac:71:5a:ac:a0:b1:44:78:20:c2:ab:ad:8a:1c:
db:b9:76:62:de:93:51:31:be:66:47:f5:37:9d:48:
54:38:6f:35:20:55:f7:e2:d0:ab:51:d9:e0:da:75:
95:e2:08:ba:61:da:7f:98:be:1b:6e:70:13:ee:0a:
eb:81:8e:76:81:2b:a7:40:73:9d:78:0e:37:90:f6:
75:53:ee:af:43:96:99:91:98:b0:0c:7b:70:5c:a4:
e8:25:70:7a:c4:b3:4c:2c:ed:0f:57:2b:60:73:b3:
05:4a:9d:08:35:d4:18:77:a5:74:46:ba:a3:97:bb:
df:f9:3d:b9:d4:c5:e7:24:73:7e:de:92:da:51:45:
a0:a4:e1:34:6a:c9:27:61:2c:5b:d2:16:69:32:3f:
62:b8:e6:d5:03:5a:aa:be:41:78:16:c4:ff:2f:b6:
a2:3d:2d:39:42:bc:8c:cd:3c:0c:ea:02:d4:27:42:
9b:04:f9:b9:9e:27:ea:c2:a8:2b:19:d1:66:81:9e:
ae:34:74:73:6e:69:c5:b7:e1:10:e0:1e:f2:21:99:
b4:3c:02:aa:ee:71:71:c8:b4:dc:dc:fd:06:54:11:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:EB:F2:87:8F:E0:4D:24:7E:ED:92:99:ED:18:4F:86:E4:82:E1
X509v3 Authority Key Identifier:
keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d4:35:c8:10:10:92:06:31:f6:a8:db:1c:f1:37:f8:39:3c:
da:81:4d:dd:16:1e:5c:41:d6:5a:07:a0:6b:28:a6:65:c8:36:
2a:2a:9a:93:b0:f2:7b:bd:94:62:15:3f:78:e0:2a:43:72:4b:
66:35:02:25:00:90:2c:53:51:31:c6:3e:ae:9b:2f:fc:fa:41:
fb:c6:c6:52:b9:90:e7:6d:ee:9b:38:66:d3:88:1d:16:97:f5:
1f:cd:cf:87:7c:c0:5c:68:35:f0:20:74:c5:a1:df:5d:aa:09:
8b:7c:85:3e:40:2d:ab:30:61:0d:37:12:ee:95:20:73:b5:0f:
e5:95:1d:01:a0:32:2c:b8:9b:12:2f:11:09:4a:7d:db:48:b1:
06:1c:4a:f2:71:a4:af:1c:02:79:03:a2:ee:88:86:d8:da:70:
fa:3a:cf:4c:9a:b4:09:27:06:7c:4a:2d:e5:83:3f:99:b2:ac:
81:b3:c2:6d:58:a6:b0:c9:0c:29:81:d0:0e:af:97:bb:a7:f7:
18:c5:17:3c:ac:e0:60:fe:61:33:75:35:67:3a:ec:55:2b:94:
ee:18:45:dc:2e:81:e2:e0:26:7b:49:dc:a5:85:35:13:06:3f:
cd:ec:a7:21:c1:fc:9a:0a:f0:5e:ed:7d:d5:30:e9:9a:c2:26:
16:04:ab:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUR1W8HJbofe4lVMDXbMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThiNTc3YjIyM2I1YTc2MzUxMjE5YTc0ZmRhNDQ2NzA0
ODkwZjcwHhcNMjYwNDE3MTIwMTE3WhcNMjYwNDE4MTIwMTE3WjAzMTEwLwYDVQQD
EyhiMmRhZWJmMjg3OGZlMDRkMjQ3ZWVkOTI5OWVkMTg0Zjg2ZTQ4MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs9TytcD7b53gfulPW0ejskTJaAj
a+2k2SJ9JCiurHFarKCxRHggwqutihzbuXZi3pNRMb5mR/U3nUhUOG81IFX34tCr
Udng2nWV4gi6Ydp/mL4bbnAT7grrgY52gSunQHOdeA43kPZ1U+6vQ5aZkZiwDHtw
XKToJXB6xLNMLO0PVytgc7MFSp0INdQYd6V0Rrqjl7vf+T251MXnJHN+3pLaUUWg
pOE0asknYSxb0hZpMj9iuObVA1qqvkF4FsT/L7aiPS05QryMzTwM6gLUJ0KbBPm5
nifqwqgrGdFmgZ6uNHRzbmnFt+EQ4B7yIZm0PAKq7nFxyLTc3P0GVBF/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLa6/KHj+BNJH7tkpntGE+G5ILhMB8GA1UdIwQY
MBaAFEOYtXeyI7WnY1EhmnT9pEZwSJD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMt
N2JjNDUzNDBkZDI4LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMtN2JjNDUzNDBkZDI4
LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntQ1yBAQ
kgYx9qjbHPE3+Dk82oFN3RYeXEHWWgegayimZcg2Kiqak7Dye72UYhU/eOAqQ3JL
ZjUCJQCQLFNRMcY+rpsv/PpB+8bGUrmQ523umzhm04gdFpf1H83Ph3zAXGg18CB0
xaHfXaoJi3yFPkAtqzBhDTcS7pUgc7UP5ZUdAaAyLLibEi8RCUp920ixBhxK8nGk
rxwCeQOi7oiG2Npw+jrPTJq0CScGfEot5YM/mbKsgbPCbVimsMkMKYHQDq+Xu6f3
GMUXPKzgYP5hM3U1ZzrsVSuU7hhF3C6B4uAme0ncpYU1EwY/zeynIcH8mgrwXu19
1TDpmsImFgSrOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:39 2026 by rpki-client