Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json)
Hash identifier: e50DT8ASAzhaNIygCEvzUaFHJ9/V2NcixtqtmijYrx4=
Subject key identifier: E0:1B:45:0D:5E:E0:14:68:CA:60:A1:38:3D:3C:75:B7:F5:36:78:65
Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579
Certificate serial: 019D99D00BCD6E402F3877B73F39912A8BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
Manifest number: 066D
Signing time: Fri 17 Apr 2026 05:00:41 +0000
Manifest this update: Fri 17 Apr 2026 05:00:41 +0000
Manifest next update: Sat 18 Apr 2026 05:00:41 +0000
Files and hashes: 1: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: FmFdZQ2TJqQGTT7HJQ3BPZcF8Bc17xRJs9enFi5DQe0=)
2: xUUV-CZdo9Ukf7sKRtxgVj_1MqU.roa (hash: jpUT41SLpbot+5R4BFOYYkdz+MS0rf+UNRgr8WOjpTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:0b:cd:6e:40:2f:38:77:b7:3f:39:91:2a:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419b379a246412810e8a8052a62a39688ca34579
Validity
Not Before: Apr 17 05:00:41 2026 GMT
Not After : Apr 18 05:00:41 2026 GMT
Subject: CN=e01b450d5ee01468ca60a1383d3c75b7f5367865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:08:1d:0f:44:eb:fa:a9:c4:2d:89:2b:a3:
26:72:c1:c5:38:df:b7:6e:e0:77:79:0f:1c:96:12:
16:46:ca:b0:79:06:59:92:b7:f2:18:f8:f5:f8:35:
46:7d:3b:c9:98:49:22:6a:c6:ee:76:b4:7e:b6:2d:
df:2d:1f:02:75:88:c2:9e:c5:e5:0e:be:cf:d1:15:
76:19:1b:7a:7e:40:70:fa:72:54:a0:75:40:aa:45:
1f:60:72:6e:1a:a1:93:72:df:87:80:6f:04:86:69:
59:25:0c:32:89:4a:61:9d:40:e2:ff:34:e0:df:d8:
e2:55:25:44:e0:9d:ee:3a:5d:4a:67:52:89:ca:bc:
87:8d:4f:16:7c:20:ed:80:8d:f6:06:6a:44:10:f2:
4c:ba:5b:dd:cd:6b:94:12:43:d9:bf:0b:6b:60:52:
19:c0:ce:07:95:d0:a7:ab:13:b6:00:78:86:22:50:
2e:5b:b4:a7:c5:70:dc:c2:bc:2a:66:d5:c9:5b:7f:
17:57:07:7d:26:67:74:2d:1e:1d:6c:86:d3:83:00:
61:54:c6:f9:f3:d9:0e:b5:c8:5b:e7:88:cf:2f:79:
ca:de:ae:d1:80:98:fc:5e:48:69:80:80:8a:08:b0:
e7:e2:44:dc:2a:c5:72:1c:e2:1f:97:f2:13:39:ef:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:45:0D:5E:E0:14:68:CA:60:A1:38:3D:3C:75:B7:F5:36:78:65
X509v3 Authority Key Identifier:
keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:84:82:03:91:ba:58:a6:eb:32:0d:c5:3e:a8:8f:04:49:09:
81:f0:7d:9c:e8:01:5c:d7:94:8e:98:87:5b:66:63:ba:3c:6f:
90:a9:4f:ce:c3:00:bd:ca:59:05:80:bf:26:62:45:78:5f:57:
e0:a9:0f:4e:de:22:68:4b:e9:c3:e5:df:0d:b2:f5:68:18:89:
c1:e8:f7:4f:81:58:76:b1:fb:e9:3b:51:d6:6a:53:7a:f1:82:
75:ea:08:5f:1c:8e:a4:c2:b5:cc:2f:cc:40:08:4c:23:1e:0e:
13:03:76:53:2c:0f:ca:50:5c:be:3f:30:96:f7:9f:ff:b7:bb:
28:3e:f5:6a:e6:07:33:b5:cf:34:86:13:c1:50:bb:3f:8a:49:
cc:0a:fc:d0:0c:b0:9c:51:de:71:42:16:01:54:ba:0a:f4:bb:
6f:79:9a:d7:a4:ef:c6:aa:03:25:17:e4:8e:7f:2d:d9:5d:85:
c8:a9:11:db:34:75:bc:29:2f:93:4e:71:88:b7:09:b7:e8:8d:
71:d3:13:30:36:ad:5e:f6:85:c7:ae:22:ed:e4:42:40:1d:b2:
31:eb:26:c3:04:f2:80:40:cb:f9:73:fb:e5:42:18:38:3d:e7:
fd:fd:19:73:65:06:d4:05:ff:c8:3b:45:92:e7:bf:05:40:58:
86:0a:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:44 2026 by rpki-client