Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: mbPe3DYeSUkPpKOFBSVdm3UdqXBLaeCVGXrMrB71Wh4=
Subject key identifier: EB:BD:C9:FD:FE:54:00:01:83:0D:AD:ED:02:64:23:B7:39:81:0E:F1
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019D9DADC6CE75CC57BF0CE9BFD7C2891821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0CF5
Signing time: Fri 17 Apr 2026 23:01:44 +0000
Manifest this update: Fri 17 Apr 2026 23:01:44 +0000
Manifest next update: Sat 18 Apr 2026 23:01:44 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: uBzkmjFqKmZF6tQXyzh2ncmAx0xpZQ3Ac0lLt2r3Adk=)
3: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (hash: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:c6:ce:75:cc:57:bf:0c:e9:bf:d7:c2:89:18:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Apr 17 23:01:44 2026 GMT
Not After : Apr 18 23:01:44 2026 GMT
Subject: CN=ebbdc9fdfe540001830daded026423b739810ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:6f:bb:2d:80:82:11:81:cf:6b:3a:b3:64:
70:a7:19:f4:22:b6:d4:60:d2:57:40:18:57:b5:7a:
db:9d:71:8d:c6:54:36:ee:b1:1a:c3:2c:d9:9e:f5:
aa:8a:b5:51:c2:d8:77:93:91:af:4f:bc:80:d1:53:
c6:e1:15:e4:b2:a7:99:92:8e:61:bd:c2:88:34:87:
41:cf:7e:c2:1e:4c:4f:af:d7:74:25:d7:25:c0:fb:
46:f9:e1:9d:67:bf:44:2e:83:c2:43:37:85:7a:b3:
e8:d4:8c:de:07:22:d9:0b:03:1e:6a:47:f5:f5:f4:
f6:d6:a3:55:d3:16:51:08:64:f6:4e:43:35:8a:be:
90:61:17:d8:43:74:5a:5b:39:59:75:b1:a6:af:7e:
df:a4:fc:49:1f:1a:b3:16:11:87:ca:95:36:72:e6:
b0:02:0e:c2:0d:e6:1c:b4:a9:35:f0:e0:35:e8:65:
11:a5:57:f9:91:4f:7a:85:02:9c:21:4d:9d:07:a1:
24:01:4d:ce:85:0f:52:cd:d7:64:b8:4a:9c:ad:30:
ae:09:0e:51:9c:99:4e:33:42:b4:3e:13:37:11:0c:
ad:e0:d8:b8:c5:6c:a2:aa:6d:66:01:b7:33:84:29:
37:93:51:6e:81:e1:82:1d:9b:10:1e:5f:c1:43:dd:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:C9:FD:FE:54:00:01:83:0D:AD:ED:02:64:23:B7:39:81:0E:F1
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ab:15:26:b8:eb:44:77:97:c9:4d:9c:26:93:59:28:d4:7b:
65:30:21:ab:8e:4b:af:a2:8e:b4:ac:d3:12:4a:44:bf:2a:a4:
cd:a3:3e:4c:ea:d6:00:a0:c6:1d:9d:52:23:6d:f6:d0:73:a8:
4b:2a:67:00:6a:93:fa:f2:16:9a:ab:d8:51:97:2d:9c:77:79:
d4:f6:bf:ff:d4:4f:05:2e:9b:f9:46:32:5e:73:24:83:d9:f3:
bc:29:b4:95:be:e8:f9:8b:82:ec:21:bf:88:1a:a3:67:82:87:
b7:52:cb:6b:57:94:88:be:e9:da:77:a2:a9:09:f6:c5:ae:8f:
7c:a4:52:81:45:41:a2:58:eb:38:f5:f2:80:c1:ee:dc:a9:8f:
56:a0:84:4a:b2:a6:47:0c:f6:e4:fe:2f:e8:b9:96:91:7f:7f:
53:6b:9e:99:ee:d0:4d:01:db:5f:31:92:de:81:fb:f1:fd:f7:
28:19:45:06:b9:c6:31:e1:be:4c:62:43:a5:63:8d:fc:91:22:
19:e6:46:f8:3f:d9:02:67:be:c1:88:83:d6:c4:97:f8:9b:d7:
e5:0d:41:51:e9:bc:a1:61:cb:43:ee:7b:0b:03:f7:29:e2:33:
0b:a8:11:1c:b0:4c:42:7e:86:62:fe:84:ae:89:20:17:61:c2:
ea:18:22:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:02 2026 by rpki-client