Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: mE9+10MzaULhyQA2QFq+WMFMCqVmnKaJhWdJEHWc25g=
Subject key identifier: 10:46:57:CC:6C:8E:B3:6F:89:2B:14:98:C0:B6:2E:18:3D:10:BD:CA
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 019D9AAC2FD7BBA678D84A63649B560B5F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:01:08 +0000
Manifest this update: Fri 17 Apr 2026 09:01:08 +0000
Manifest next update: Sat 18 Apr 2026 09:01:08 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: 02/QQziT1qciDkymDd+obU3SaKdgLDb0npl+TXdvaeo=)
2: VpxDxilNFo6QDK_norEdW_OneKc.roa (hash: eM+dyL5sYA7YmYI63S6dG6sSIhkE5TG0Z5qosr3fK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2f:d7:bb:a6:78:d8:4a:63:64:9b:56:0b:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Apr 17 09:01:08 2026 GMT
Not After : Apr 18 09:01:08 2026 GMT
Subject: CN=104657cc6c8eb36f892b1498c0b62e183d10bdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:79:0e:a8:b2:51:39:b7:9a:3e:33:c5:5b:
a6:1f:08:75:f1:f7:e0:d4:c6:6f:1d:32:ae:83:89:
6d:e1:18:e2:1c:93:3e:70:0f:b9:cd:e5:8e:2c:7f:
53:47:3b:9e:ef:cc:34:fa:4d:16:01:d0:13:57:c3:
54:44:4f:76:0b:a7:c2:00:05:99:17:5a:a3:5a:0f:
03:38:d1:e1:77:d2:b7:63:5d:c9:8c:51:fe:3b:a5:
49:58:6b:c9:02:5f:8a:89:a9:a2:77:22:0f:f4:e5:
dd:b1:cf:86:72:8a:c4:b3:93:ad:b6:4e:1f:52:ea:
3b:39:07:dd:74:76:ec:03:b6:d8:b0:21:39:5f:4f:
22:62:f9:68:ef:9f:13:13:d0:41:3a:34:7e:b9:9f:
f9:2a:6a:65:c1:b3:37:d4:5d:d0:57:be:a7:f0:c0:
ac:b8:ed:de:1b:bb:35:c9:3e:70:73:53:ab:07:ce:
be:4b:2a:f3:e5:77:39:db:4a:91:35:55:b4:d4:d0:
36:58:8b:33:0b:58:c6:c3:60:8d:5f:64:04:05:f2:
e8:3f:b0:ef:4a:32:65:a6:86:b9:6d:a5:fa:a1:ad:
24:79:2c:b1:51:04:14:b0:3b:c2:11:8d:0a:54:22:
af:88:31:98:b4:29:dc:31:4b:2a:5e:30:c0:ed:0e:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:46:57:CC:6C:8E:B3:6F:89:2B:14:98:C0:B6:2E:18:3D:10:BD:CA
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f7:e8:5b:2d:9e:61:50:b9:08:7c:02:59:6e:d0:df:e0:0b:
8e:38:28:1d:d4:89:16:01:63:63:4a:08:df:22:84:73:df:21:
d5:df:33:69:7f:51:60:bf:08:17:2c:1d:55:aa:48:2d:20:24:
13:66:cc:3a:82:b3:d8:f3:0b:cb:48:c5:c5:92:b3:0f:7f:37:
a8:39:19:3b:18:86:7a:25:5b:12:ce:63:b6:23:df:66:83:9c:
c1:42:05:55:77:2e:36:f1:90:58:61:b9:9f:c3:c3:b4:71:26:
00:2a:f3:d4:41:d9:54:25:b5:d0:79:1b:eb:47:26:22:65:90:
84:76:5b:11:84:3c:79:0d:3e:1a:a1:3e:ae:c9:10:59:25:3e:
51:a4:25:79:6c:79:85:05:fe:d0:fe:33:1c:15:a2:ef:bc:93:
2b:c0:59:b4:bb:c4:ae:51:c1:bf:1f:06:35:17:3d:79:18:90:
e3:ea:da:0e:27:95:b2:e8:51:01:24:f5:89:5c:4c:fe:6d:27:
51:49:55:82:ac:7f:d3:bc:2b:ad:08:49:74:93:71:64:88:0c:
f6:62:e7:bb:28:34:bd:c9:3d:bb:42:43:b7:9c:43:96:f4:bc:
54:67:4b:94:12:20:cf:43:37:c7:08:8b:52:d7:89:2c:56:e6:
1c:30:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:00 2026 by rpki-client