Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier: NfHgcb4bGJ7dg0+oVaRYCI/PZRdlv5pUb761NDNeIEc=
Subject key identifier: 1C:CC:C9:D7:22:6C:3F:7E:30:38:A8:02:B3:1E:14:3D:28:E5:3B:58
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 019DA3AF0BEF4EEE4BBA034AAE2C484D5C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 03:00:51 +0000
Manifest this update: Sun 19 Apr 2026 03:00:51 +0000
Manifest next update: Mon 20 Apr 2026 03:00:51 +0000
Files and hashes: 1: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: vvvt8oPjOjGYgi8CVAMwZmPPjtqdaARdFuR3JB3oTyM=)
2: vdO9ldGlhUGuhMbvEZgQi2UAL6Q.roa (hash: o/PY0zcPwn5EFiTDVfiSoj0UDONeDefYMUGFGgIeJHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:0b:ef:4e:ee:4b:ba:03:4a:ae:2c:48:4d:5c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Apr 19 03:00:51 2026 GMT
Not After : Apr 20 03:00:51 2026 GMT
Subject: CN=1cccc9d7226c3f7e3038a802b31e143d28e53b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:8d:49:d7:be:40:7a:73:bd:2a:98:9b:ba:
d0:4b:25:46:61:13:08:bb:80:4a:98:9c:1c:71:1b:
df:89:c4:05:eb:3c:9f:6a:7c:7c:ae:2b:0e:04:11:
be:82:68:b7:92:be:94:93:1b:54:33:58:63:12:be:
21:0d:50:96:ff:68:4c:81:eb:d5:81:68:52:46:af:
9b:94:57:32:f3:09:c9:77:58:b0:8a:67:d2:13:98:
36:c3:b1:7d:88:49:5e:e6:23:5a:46:c6:f4:5a:ce:
ba:92:97:2c:1e:6e:88:90:4e:a5:af:a5:b3:3b:23:
c1:d1:d8:b6:5e:98:c0:0e:39:5f:4c:40:24:02:37:
bc:c5:ce:0f:75:14:ac:96:2b:a9:4b:30:a7:0a:f3:
ce:9b:78:36:f8:3a:f2:70:9b:af:97:65:78:e1:c4:
bb:49:c3:13:5d:2d:52:9b:04:6d:6d:8e:74:c2:b4:
56:ef:93:bf:76:ca:f4:5d:8c:1f:5b:f1:57:77:7b:
2f:d6:16:63:ac:d8:90:0e:19:e8:40:15:5e:e4:dc:
0d:a4:f1:ec:cc:a0:61:aa:23:f0:17:34:83:71:e0:
cd:99:ae:06:be:16:87:2a:af:4a:c2:3f:7c:67:c5:
da:b8:3b:df:3e:b7:90:02:86:df:48:f2:3f:f7:61:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CC:C9:D7:22:6C:3F:7E:30:38:A8:02:B3:1E:14:3D:28:E5:3B:58
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:83:ba:3d:6d:d9:12:09:c3:c7:cd:dd:e5:9a:24:98:95:45:
69:30:ba:87:48:e1:61:78:fb:4a:0f:cb:91:aa:21:f6:b9:65:
ee:4e:99:72:e0:a7:21:fb:ee:f0:a3:0b:74:5d:15:ec:1f:ec:
43:09:75:5b:34:79:ec:1a:50:5c:56:68:83:0d:15:73:5d:6f:
2b:e5:f4:41:d4:67:c9:d8:58:89:57:39:fd:39:82:c7:32:43:
ac:18:29:ad:c2:e7:96:4c:24:38:ed:d0:48:61:96:ac:91:e9:
7e:e3:2d:4a:89:e1:a0:01:bc:1b:d5:42:1a:82:38:29:f4:f9:
f7:6f:fd:67:1f:3e:8f:bd:89:60:d5:36:13:5c:e8:08:fb:7a:
b8:7c:e8:60:40:25:23:25:d6:2e:7d:ed:5a:4a:d8:89:96:b0:
0c:d4:7d:42:58:13:c3:e3:aa:de:07:51:d1:70:82:b2:f7:8d:
b9:ca:9c:82:81:c6:77:a0:99:eb:af:82:93:cf:11:75:45:2d:
2e:ab:8b:d1:3f:e6:0c:31:95:5d:22:5b:8e:cd:89:1b:ef:b9:
4a:4a:63:e6:07:72:1a:1d:07:b9:cf:f6:03:90:a2:50:f5:7b:
f4:c9:00:f4:b0:2a:d2:4d:73:8b:86:89:29:8c:98:c9:44:28:
79:de:b8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:10 2026 by rpki-client