Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: LE9LYAYYXUYjVn8y7Na6g2rGDbsYNUVYDP/kD170fGo=
Subject key identifier: 32:02:42:06:29:71:90:A3:2D:BA:33:18:2E:B1:E9:A6:54:D1:B7:04
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 019D98BDB497F7316E55BB61B27BF9E861CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:01:02 +0000
Manifest this update: Fri 17 Apr 2026 00:01:02 +0000
Manifest next update: Sat 18 Apr 2026 00:01:02 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: e1OROEX427ZhD1f3iKGhc/PEqHUdXWIO9TyS9+9QhNY=)
2: VpxDxilNFo6QDK_norEdW_OneKc.roa (hash: eM+dyL5sYA7YmYI63S6dG6sSIhkE5TG0Z5qosr3fK1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b4:97:f7:31:6e:55:bb:61:b2:7b:f9:e8:61:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Apr 17 00:01:02 2026 GMT
Not After : Apr 18 00:01:02 2026 GMT
Subject: CN=32024206297190a32dba33182eb1e9a654d1b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:92:d7:05:27:60:ed:9e:3c:98:11:28:9a:
97:5a:c2:ce:1b:bd:d7:ec:c8:82:f9:42:71:e5:e9:
f2:e0:62:b3:80:33:58:33:bf:06:11:2f:c4:b5:ad:
c5:42:d2:6d:1e:95:c9:cd:ae:1e:88:10:9c:62:2d:
f4:08:1e:c1:aa:ce:71:c7:af:e3:ee:66:ec:f9:58:
27:86:1d:c4:dd:33:ae:f5:ac:92:17:9a:83:33:dc:
44:40:28:1c:bd:92:49:72:92:bd:dc:b3:3a:13:03:
ec:d2:10:98:01:1b:fc:0d:b5:c7:f8:be:e5:de:ef:
e7:d4:aa:e7:a6:26:cd:d6:53:6e:c3:40:43:fb:0e:
27:85:c0:ef:fa:ae:a6:87:af:fd:ae:2a:cd:da:f7:
24:9e:29:0d:49:3a:81:fa:d1:87:6e:72:c2:5e:a9:
26:d5:ae:e9:1c:4d:a6:82:2b:e8:65:6d:bc:64:0a:
21:cf:e7:61:df:01:08:90:e2:42:36:7e:ff:81:c5:
79:8a:89:a7:53:d2:de:af:85:05:7d:65:21:55:a5:
e7:b6:16:5e:a4:ce:1b:bd:52:f5:f8:b5:ab:4b:02:
5c:0d:b1:cc:70:1e:99:91:db:c7:b4:b0:09:de:b0:
d9:75:4a:13:3e:3f:5a:93:7a:5d:b8:d1:1b:55:7c:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:42:06:29:71:90:A3:2D:BA:33:18:2E:B1:E9:A6:54:D1:B7:04
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2e:ba:c0:4f:b1:6d:d9:7b:15:f0:69:22:db:4f:11:42:7b:
61:ac:0d:46:e8:00:be:cf:ad:f8:c9:b3:43:b6:6b:34:57:6a:
12:0a:03:c3:90:0f:bd:f3:7c:25:8c:aa:a7:40:4a:cf:42:98:
14:79:71:d6:39:fe:75:23:52:2a:93:67:f7:b9:d5:2f:79:94:
9c:16:fd:b0:6e:d0:04:10:6d:f0:83:d9:fb:5b:42:5f:c4:02:
5a:61:55:fd:66:e8:35:1c:42:be:00:70:73:95:12:2b:cf:5d:
6b:cc:c9:d9:6a:fd:24:fa:94:01:18:fb:ef:a1:3b:39:01:99:
37:a3:da:92:a9:21:e7:62:f9:4b:06:c7:a5:dc:78:a4:7d:17:
da:76:9e:7d:63:b4:29:ac:72:5b:dc:95:4f:68:5b:9d:98:26:
e6:d3:ff:26:7c:7d:29:a6:29:35:46:62:38:d1:f3:f5:d1:e9:
02:75:a8:26:ae:18:86:64:79:72:07:c0:63:ac:79:d8:fa:68:
88:c4:f7:7f:d7:a2:65:95:b6:08:be:34:f8:85:4f:db:6e:40:
00:a8:59:31:82:34:ed:ed:bb:f2:5c:5f:b3:fb:dc:c0:0c:74:
25:59:10:7d:bf:a4:81:ab:48:49:b1:6b:c4:e7:38:41:fb:1d:
79:cc:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:28 2026 by rpki-client