Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: z5i+VkUkJAw1eHu9Y8e3zgWXHR9oiot4nMN1o2xLKIM=
Subject key identifier: 4D:7D:BE:87:95:D6:2E:27:F9:75:E1:C5:23:F0:E4:F6:DE:EF:A6:BF
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 019D99D0719247BF2F012E3DC8F3EEEEE2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 054C
Signing time: Fri 17 Apr 2026 05:01:07 +0000
Manifest this update: Fri 17 Apr 2026 05:01:07 +0000
Manifest next update: Sat 18 Apr 2026 05:01:07 +0000
Files and hashes: 1: A06G0jKoVHkOoVsdJmlcMjUtuYg.roa (hash: /ucUBoWCtbDVXH8l3LkIjvANk7l2kl8IZAXTo8qEuVA=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: LhdjiZ9ObFMHmKN2gVGXL4uYpK97/XOArjqRBlK6aE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:71:92:47:bf:2f:01:2e:3d:c8:f3:ee:ee:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Apr 17 05:01:07 2026 GMT
Not After : Apr 18 05:01:07 2026 GMT
Subject: CN=4d7dbe8795d62e27f975e1c523f0e4f6deefa6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:a9:02:5a:ea:da:76:b6:4b:79:01:d1:e5:
06:ca:78:f0:5b:ee:2f:70:32:e6:3d:85:54:94:fd:
95:1f:ea:fd:ce:67:31:51:8b:ab:c8:87:b1:d0:f4:
3c:8d:2f:64:53:55:6f:c9:75:03:ef:17:0a:f0:a0:
a7:36:5e:78:d3:75:67:bb:c0:2c:dc:66:d6:da:24:
2f:65:83:cb:66:e0:5f:ea:dc:ad:de:19:8b:31:5e:
b8:fb:f5:fe:08:c9:6e:a3:93:c9:61:11:19:09:9b:
90:80:04:75:d3:49:b9:28:8d:ba:db:e1:8b:71:a8:
9e:14:4c:df:ac:4c:94:43:f4:7d:9d:18:e2:65:e0:
a6:3f:7d:73:be:da:45:48:80:17:3f:29:ee:24:fd:
9a:2a:85:2c:37:75:25:01:75:80:a2:3b:4a:7d:a5:
d9:4d:3c:8e:67:b3:03:5c:7f:28:c0:11:b1:52:f8:
a4:d0:fb:55:b1:99:e9:9a:2c:5f:60:e0:e3:cf:c0:
e4:f3:8d:0f:07:3f:2f:d2:6c:fd:a0:62:85:28:0c:
dd:4d:12:a8:9a:f5:0d:f0:2a:a8:d9:86:cd:cf:9a:
23:ee:e9:9d:c2:44:cf:37:65:f8:a3:6f:b6:ee:f4:
50:88:01:e2:63:05:3b:4e:40:9c:ea:16:a6:07:15:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7D:BE:87:95:D6:2E:27:F9:75:E1:C5:23:F0:E4:F6:DE:EF:A6:BF
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:14:80:a7:b7:a3:4d:3c:1b:9a:47:78:29:a9:51:d1:c1:63:
4f:56:cf:81:5f:4f:97:71:dd:dc:18:03:52:e6:a9:8b:20:b2:
13:cd:67:c9:ea:89:bb:dd:88:7e:8b:0d:ac:6b:85:79:56:7a:
9f:6d:b7:92:26:a7:a3:f0:29:0c:ae:8e:f4:18:ca:70:2b:5d:
bf:bd:ff:32:92:0b:b1:ac:5e:4a:38:00:7d:48:73:4c:ae:93:
1b:d6:18:a3:4d:2d:8f:a7:0b:fb:63:34:5c:96:cb:6a:f8:32:
06:c5:f2:2f:75:44:fe:7a:e2:c6:14:2d:d5:c8:39:63:f4:5d:
1e:52:fd:fd:9f:d7:c9:81:e2:90:bf:3a:bf:53:f5:ed:69:e1:
c4:d9:f3:2b:33:6a:26:2f:e3:ac:bd:61:e2:c1:e4:c7:fb:80:
ef:33:3c:0f:24:ff:8d:53:b7:ff:6c:86:38:19:9d:47:f4:79:
9d:07:71:db:f6:ac:33:2a:22:43:ab:0d:74:5d:5e:42:98:af:
d9:d6:a4:30:8c:ea:83:10:34:73:70:53:07:f2:7b:d3:bf:5d:
2f:27:51:17:f6:c5:4d:b7:f0:32:fc:fc:79:cd:3a:ff:21:f8:
6c:8a:1e:d8:2f:bc:fa:e0:a4:e4:35:a0:ee:a7:de:4b:28:47:
e2:b7:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:32 2026 by rpki-client