Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File: QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier: Fq0XUFZy6u6Z3yX7kXE8BD805bd86djFAW57CaulkUc=
Subject key identifier: 16:15:AF:96:A6:38:ED:B0:C0:CE:BC:AC:9A:02:25:30:BB:A1:FD:38
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019D99622794DD4B08531DFA4805054A9886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number: 18D9
Signing time: Fri 17 Apr 2026 03:00:39 +0000
Manifest this update: Fri 17 Apr 2026 03:00:39 +0000
Manifest next update: Sat 18 Apr 2026 03:00:39 +0000
Files and hashes: 1: 1Cl0aMxYJUQofTs8jhJi8Z3tcrI.roa (hash: jZVvi8ZT1AvnHScx7k4KswKgUZ3UXUEyUbpLzBDmLbE=)
2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: QumiE825fwPr/tlEpgVqTHC77fc63jPngpqUjGFaBqs=)
3: YXLIHJqG-SjnWz2mCVVJ_ezTKSs.roa (hash: Mhnp5e3BJ7gjsyOPcctRIJrsmbal4VQexixZEqreufU=)
4: oJ7mg0Skc1TPbaAf8JVEuf2GmxY.roa (hash: Kcp7e66VbgmjHJFlZwdRCM4aHhG4oTWDRzXk2Vy002s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:27:94:dd:4b:08:53:1d:fa:48:05:05:4a:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Apr 17 03:00:39 2026 GMT
Not After : Apr 18 03:00:39 2026 GMT
Subject: CN=1615af96a638edb0c0cebcac9a022530bba1fd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:e1:16:28:a4:10:f7:62:00:04:c5:10:f8:
8c:bd:f4:ae:f3:9b:12:43:ba:a9:62:d2:b3:82:aa:
43:0a:ad:c4:fe:05:29:a4:6c:08:cf:e3:e1:07:63:
69:0a:cc:23:a8:46:fd:2f:ee:c1:5c:51:be:38:0c:
82:90:b4:c3:9d:be:54:a9:c8:e8:02:fd:52:fb:e7:
88:b5:c4:21:a5:e1:5f:19:86:fb:4d:31:95:11:8c:
d3:cd:f3:04:10:e8:9c:9e:b4:d3:5e:b5:a8:9e:23:
e5:37:49:ea:b4:88:9b:9b:83:cf:d6:9a:7a:6b:65:
91:e8:c0:b4:4f:5a:d2:0f:10:8a:cc:58:5a:a5:c9:
3a:87:c0:7d:47:b1:ff:2a:b2:f1:66:f6:7e:23:27:
8e:2b:4b:38:b5:53:dd:98:fd:0c:07:42:70:97:4d:
3c:0d:53:ee:20:db:18:6c:5c:52:92:5f:b1:f7:96:
15:2c:fe:6f:4f:46:bf:d6:13:53:05:5a:6d:fe:aa:
c5:d2:c5:0e:36:33:64:71:ca:15:ee:e9:59:42:e2:
32:22:ea:91:22:4a:08:b5:26:f5:83:c4:cf:82:28:
3d:41:60:6a:4c:17:23:57:b0:72:cf:1b:4e:e9:28:
50:e2:48:07:d3:ff:2e:4d:34:61:79:3a:54:fa:6c:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:15:AF:96:A6:38:ED:B0:C0:CE:BC:AC:9A:02:25:30:BB:A1:FD:38
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cc:63:7b:27:50:c2:20:bc:3e:03:a9:fe:f4:d3:b7:0b:55:
0f:a0:3f:30:65:af:50:17:5d:2e:ea:38:b3:87:01:de:cf:1d:
61:66:32:6b:0c:b0:de:b8:1b:f1:b9:88:57:a3:1e:50:91:e1:
30:3a:6a:ad:fb:f1:68:97:79:f1:9f:87:40:c6:87:db:cf:fd:
78:77:5f:48:e8:4b:ed:0e:b2:8d:4c:37:59:50:56:d0:11:2c:
1e:45:77:a8:97:eb:12:a5:01:43:64:ab:54:08:dc:ae:f1:76:
11:b5:ad:81:95:c7:7e:9f:bb:71:55:61:d1:ee:33:45:0b:73:
c0:7c:01:a2:5f:d9:6b:31:38:60:6c:d0:00:29:57:f1:12:2a:
d0:a3:96:a2:ad:a4:9f:2f:7c:a6:77:1b:92:52:0f:8b:c7:d9:
b5:22:2c:1b:b1:3b:84:90:78:77:eb:6b:d1:cc:76:1d:1c:a2:
be:5f:b9:b1:b3:3b:2c:c7:6d:57:4d:a2:13:d1:6f:02:6b:b3:
c1:4b:a2:5a:bc:20:ad:c9:b9:34:75:63:05:5e:e7:f2:9d:3a:
ef:e1:be:b2:ab:c2:a9:b6:ca:4d:ac:be:ed:9f:45:2b:d9:af:
36:86:af:b6:9d:83:c0:94:aa:bc:fd:f3:1d:c8:22:0a:e4:ec:
b9:a7:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:51 2026 by rpki-client