Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: ub0dixcz1b8ucVON3+U0ctJIPVDHxibDCo5e08FGomk=
Subject key identifier: 32:DE:9D:AC:0C:03:09:5B:A8:84:ED:A0:5A:21:28:3C:E2:1C:3A:E8
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 019DA48B526E3B637FDDD77AF1C510E1EA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 07:01:27 +0000
Manifest this update: Sun 19 Apr 2026 07:01:27 +0000
Manifest next update: Mon 20 Apr 2026 07:01:27 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: Qntkf3qNmc+iXji5RFtMbFdyqB7T0b8vV6lYFb3c/QU=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:52:6e:3b:63:7f:dd:d7:7a:f1:c5:10:e1:ea:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Apr 19 07:01:27 2026 GMT
Not After : Apr 20 07:01:27 2026 GMT
Subject: CN=32de9dac0c03095ba884eda05a21283ce21c3ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:8f:9f:4f:71:81:b9:4b:8c:5e:fa:0b:7e:
4b:ca:b1:af:2c:fd:b7:e8:6f:f8:92:78:db:6d:a5:
44:ab:6f:8d:19:ec:27:a7:e5:09:76:7c:1a:69:a2:
e3:6c:3d:6d:9e:0d:09:c9:f2:88:5d:c2:61:88:fc:
cc:a8:3d:26:ce:fa:88:3f:f3:34:97:98:29:11:a2:
1f:33:c0:86:82:c3:78:9e:26:6a:47:e5:db:2a:88:
4a:e3:30:dc:bd:6b:84:ec:8f:78:75:f8:cd:47:45:
b2:47:52:5a:0a:cc:88:3b:d8:fe:64:3d:ff:3b:75:
8f:d1:c3:b2:f9:e8:35:66:e9:02:54:f8:c2:02:d5:
ed:87:dd:de:60:a8:bc:56:44:80:f4:fd:28:93:b0:
aa:04:c4:30:87:4f:43:42:d8:15:00:9f:51:19:1c:
05:b2:74:e2:e4:6a:53:2a:dc:33:a7:32:9a:d6:68:
47:77:42:1b:e8:bc:05:20:d6:18:2a:fa:6e:f1:b1:
3a:5d:68:d4:f0:b8:97:5d:05:e4:c7:c2:a5:4c:04:
1c:46:d2:cc:0b:c1:22:5c:8d:24:c7:f0:46:b7:a6:
68:f3:62:b0:c5:2a:aa:e2:78:87:b7:26:f4:06:fc:
87:86:6b:a8:84:d0:ec:d2:cb:35:c5:01:63:30:b7:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DE:9D:AC:0C:03:09:5B:A8:84:ED:A0:5A:21:28:3C:E2:1C:3A:E8
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:2e:4d:4f:51:8a:5b:e1:f3:3f:0d:e4:bc:91:ec:a2:c1:
2e:10:6c:73:82:06:7e:9d:da:bb:25:da:fa:7b:ca:cd:46:f7:
f6:0a:72:50:09:30:3f:f3:8c:57:43:34:b9:ec:9a:07:af:fc:
89:9f:13:a1:f4:f2:3f:27:41:f5:98:c0:98:83:6e:97:d6:f6:
a6:dd:5c:01:da:e2:e9:c5:4a:64:b7:99:94:f4:59:72:42:23:
4c:cb:f0:f9:e0:56:90:82:6f:d3:b2:46:4b:c3:09:f1:a6:c5:
3c:f8:8d:b6:d6:88:5f:af:9d:29:63:7b:a8:ff:36:80:d8:6d:
fe:38:06:a2:3f:08:f7:b7:77:d2:eb:2d:0e:db:7c:4c:19:6e:
22:f9:31:37:a6:bd:25:04:1f:41:79:e3:37:5a:e0:c6:32:a0:
db:2e:95:6b:f0:3b:2d:3b:99:9b:86:9f:f5:60:84:f2:88:2b:
23:9f:6d:2f:c1:10:a9:fb:2f:8c:ef:38:0a:46:0f:26:79:a5:
5d:57:1f:4e:88:68:83:9b:26:a8:dd:c5:22:39:a7:8e:0e:5c:
be:41:35:46:9b:81:c3:4e:78:fb:9f:7b:68:7c:fa:1b:fd:f3:
07:a3:5d:d2:5d:c0:2c:14:20:c9:a0:be:a7:5d:e5:cd:de:38:
f3:33:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:21 2026 by rpki-client