Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: 8I1NIed2tj5Y5m0qytMaQk1lYKXVQ/DXfFfH+g03IgA=
Subject key identifier: 60:02:62:4A:07:23:C0:11:40:E7:E7:AA:2C:38:CC:AB:2E:E7:86:C7
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 019D9A3E40AF9A22132590265E1D5E97373B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 1126
Signing time: Fri 17 Apr 2026 07:01:04 +0000
Manifest this update: Fri 17 Apr 2026 07:01:04 +0000
Manifest next update: Sat 18 Apr 2026 07:01:04 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: QD28RzvelDvUsbIpSymQZKJqsYb01w5LH2dCiTgmfwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:40:af:9a:22:13:25:90:26:5e:1d:5e:97:37:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: Apr 17 07:01:04 2026 GMT
Not After : Apr 18 07:01:04 2026 GMT
Subject: CN=6002624a0723c01140e7e7aa2c38ccab2ee786c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:97:f7:37:55:9d:c5:ef:f6:89:04:cd:c0:
d6:e0:9d:d6:58:f0:b1:1b:42:85:0a:b5:fb:22:93:
f6:68:c3:7a:b3:ba:64:12:dc:b8:47:26:ba:f9:0a:
b0:d7:95:16:7c:1c:a4:5f:6f:5a:bb:fd:4a:a4:8a:
c0:e3:38:b0:d1:66:b3:b2:ab:7a:5c:71:54:3b:c5:
69:d4:b0:82:8a:1f:94:6a:fa:e8:9f:67:0d:17:dc:
f6:c9:a9:fc:b9:e8:a6:64:da:05:de:19:e3:27:ee:
5b:fc:2e:6c:71:eb:c2:88:da:4a:b1:44:c1:78:d5:
ad:d6:72:e3:78:af:15:c7:b2:13:83:54:c7:18:0e:
30:6b:86:d7:39:78:67:fc:8d:2e:28:e8:de:5d:4c:
e0:39:0b:1f:b1:c4:51:ef:94:87:c9:0b:89:fa:7a:
2b:a9:71:9e:a7:43:57:3f:04:ab:a4:ad:7d:2b:73:
75:00:e2:18:04:9f:55:c1:58:0c:e8:4d:49:ca:59:
b7:28:8d:17:87:de:f0:29:65:ee:43:3b:e2:2c:7a:
c9:60:e8:65:bb:74:6b:80:c8:dd:21:bb:19:bf:7a:
da:5a:97:e5:6b:35:9f:00:4b:8f:cf:40:59:6a:14:
99:1c:50:d0:2e:fd:34:98:6c:4f:6e:22:74:15:7e:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:62:4A:07:23:C0:11:40:E7:E7:AA:2C:38:CC:AB:2E:E7:86:C7
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b2:4c:78:e7:f9:dc:03:cf:92:39:5c:f9:dd:a3:fe:2a:3f:
5e:5e:01:38:34:b4:88:06:50:02:00:95:0b:80:46:30:98:2f:
08:d5:06:8d:c9:36:e9:ad:7a:c6:33:ad:d7:4b:1d:1a:15:34:
2b:a2:ff:1a:03:a6:8b:eb:46:3a:b9:a0:43:72:0e:dd:21:cd:
62:bb:ef:df:9f:ed:b3:8e:9e:da:3c:fc:e6:1a:9f:dc:73:e8:
51:bb:eb:63:1f:3c:90:32:52:44:cb:65:8a:14:7d:15:46:72:
36:6c:63:86:8a:f3:a2:26:23:2b:cf:0e:42:54:2f:ae:26:9c:
c4:a6:56:16:df:ca:57:ff:79:8e:86:ac:30:bb:07:d4:4a:9e:
45:27:6d:c7:fc:9b:2d:f8:49:68:11:67:21:8f:35:e2:50:43:
df:4d:ae:07:09:d1:29:81:95:df:c9:78:80:93:9c:b8:47:cd:
40:77:8a:91:10:65:8b:aa:39:f5:5c:e0:1c:23:17:5e:db:8c:
bb:f3:c9:1d:61:7b:5f:eb:4f:15:63:28:b2:66:a2:be:f1:78:
72:c7:58:4c:e6:a6:16:93:13:10:c8:20:6e:0f:a0:f1:e1:58:
72:81:82:9b:8b:f4:2e:0e:9f:ab:b8:3f:99:fd:c2:23:91:ea:
e5:37:e4:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPkCvmiITJZAmXh1elzc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWZlMmQ1MTcwNzc3NGQyZDBjMmJmOWQxMmFkMDdhYjcy
NjQyYTIwHhcNMjYwNDE3MDcwMTA0WhcNMjYwNDE4MDcwMTA0WjAzMTEwLwYDVQQD
Eyg2MDAyNjI0YTA3MjNjMDExNDBlN2U3YWEyYzM4Y2NhYjJlZTc4NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3uX9zdVncXv9okEzcDW4J3WWPCx
G0KFCrX7IpP2aMN6s7pkEty4Rya6+Qqw15UWfBykX29au/1KpIrA4ziw0Wazsqt6
XHFUO8Vp1LCCih+Uavron2cNF9z2yan8ueimZNoF3hnjJ+5b/C5scevCiNpKsUTB
eNWt1nLjeK8Vx7ITg1THGA4wa4bXOXhn/I0uKOjeXUzgOQsfscRR75SHyQuJ+nor
qXGep0NXPwSrpK19K3N1AOIYBJ9VwVgM6E1Jylm3KI0Xh97wKWXuQzviLHrJYOhl
u3RrgMjdIbsZv3raWpflazWfAEuPz0BZahSZHFDQLv00mGxPbiJ0FX5ypQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGACYkoHI8ARQOfnqiw4zKsu54bHMB8GA1UdIwQY
MBaAFEOf4tUXB3dNLQwr+dEq0Hq3JkKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yNDA4ZTEtZTQyZi00OTE1LWE3MTUt
YTFkNmQ5MWNkZTY4LzEvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yNDA4ZTEtZTQyZi00OTE1LWE3MTUtYTFkNmQ5MWNkZTY4
LzEvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrJMeOf5
3APPkjlc+d2j/io/Xl4BODS0iAZQAgCVC4BGMJgvCNUGjck26a16xjOt10sdGhU0
K6L/GgOmi+tGOrmgQ3IO3SHNYrvv35/ts46e2jz85hqf3HPoUbvrYx88kDJSRMtl
ihR9FUZyNmxjhorzoiYjK88OQlQvriacxKZWFt/KV/95joasMLsH1EqeRSdtx/yb
LfhJaBFnIY814lBD302uBwnRKYGV38l4gJOcuEfNQHeKkRBli6o59VzgHCMXXtuM
u/PJHWF7X+tPFWMosmaivvF4csdYTOamFpMTEMggbg+g8eFYcoGCm4v0Lg6fq7g/
mf3CI5Hq5TfkLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:23 2026 by rpki-client