
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier: /aSmX0HTl2d+sTpPY5+TL+4xnJf2QWXKYYiTDkEI0hA=
Subject key identifier: 9E:F0:FE:28:70:A2:FD:A6:98:FE:DF:C8:58:C4:F8:85:2B:F7:72:88
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial: 019D97AA9A93EF65E3A934A2A2B3F6EBE3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 19:00:33 +0000
Manifest this update: Thu 16 Apr 2026 19:00:33 +0000
Manifest next update: Fri 17 Apr 2026 19:00:33 +0000
Files and hashes: 1: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: fBxBPkQvGQDE+oQ2WNsDzFJknAxU/zrPBn4OnfOZK6M=)
2: eAsQi27gOXjF_3AkuEMYU4-EJ7s.roa (hash: 0gnlaTOkuhgz//iK3cJQOoROXqgFENfW3q9eAblXZeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:9a:93:ef:65:e3:a9:34:a2:a2:b3:f6:eb:e3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Validity
Not Before: Apr 16 19:00:33 2026 GMT
Not After : Apr 17 19:00:33 2026 GMT
Subject: CN=9ef0fe2870a2fda698fedfc858c4f8852bf77288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:75:c6:d3:54:af:e2:85:b7:d4:34:f7:25:
81:1f:fc:13:ca:c7:8e:1b:41:97:29:f6:5a:16:e3:
77:36:c5:6f:e8:cc:b9:2d:86:4d:41:25:95:ae:c3:
17:aa:29:93:e0:e8:ff:2a:36:98:a3:f2:ce:f3:d9:
fd:9d:d6:79:14:7e:fb:d7:58:db:f3:aa:f9:80:5e:
24:16:7d:55:18:48:b3:7a:c5:5d:0a:fe:67:94:a8:
bf:20:c1:96:7a:03:47:df:39:18:94:1c:0d:e3:3f:
bb:f5:e4:82:03:7c:7d:b9:51:9c:ab:d5:ce:78:0a:
d1:89:9b:64:0f:c4:ae:6c:07:ab:d3:25:97:d8:09:
0c:76:2a:b9:65:94:cc:91:bd:17:06:a5:f7:20:ed:
4a:c5:7c:aa:b0:96:c0:e5:4b:b2:0b:fe:25:63:49:
de:88:9d:4b:f7:9f:15:cf:eb:75:71:c9:78:da:04:
3f:f9:3e:b2:72:aa:2f:6b:b3:2a:f2:74:37:66:4e:
06:4a:90:e3:f3:0d:e5:2a:fb:4d:39:80:b5:fb:39:
fa:77:96:b2:84:fb:2c:81:9e:ae:83:a0:46:d9:86:
31:be:5f:19:85:05:40:8f:45:1a:68:72:77:4d:10:
1d:aa:1a:12:73:02:26:80:2f:29:1f:69:e8:42:79:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:FE:28:70:A2:FD:A6:98:FE:DF:C8:58:C4:F8:85:2B:F7:72:88
X509v3 Authority Key Identifier:
keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:03:58:29:e0:60:41:c7:81:a0:e3:02:af:f5:71:d5:ea:4d:
50:26:2c:5c:cb:90:21:08:96:f4:22:7a:d4:d1:93:02:eb:42:
cc:f6:5e:a9:ca:58:e9:74:a4:9f:03:d3:92:90:f0:50:d4:2d:
97:68:a9:eb:b1:0c:d1:80:f5:37:ff:44:9d:4f:66:67:be:3c:
8d:fe:60:b3:f7:6d:a7:07:ef:3a:96:a4:43:0a:57:f3:d7:df:
66:90:c9:6a:b3:61:4d:94:9a:bf:36:4b:1e:b7:6d:96:4f:78:
be:21:db:d9:98:35:32:59:ec:f2:78:af:0d:ef:38:34:87:d3:
e2:b9:9b:50:39:87:7d:c9:ed:3d:d6:5e:70:ba:37:6e:45:c3:
4a:6a:a1:be:98:ad:4d:8f:fe:27:0e:93:48:86:eb:ef:7a:11:
97:93:59:60:d9:2a:73:3d:09:ec:8b:ab:c1:14:8d:61:08:a2:
32:6d:ec:92:d1:d5:a6:55:93:bb:18:87:1b:94:61:bc:62:88:
64:6b:c0:c0:d0:50:d2:ee:da:3b:77:83:c4:e3:42:c5:22:0b:
1e:28:17:68:6f:a1:16:08:93:d4:26:cf:f5:ae:16:7a:b1:c4:
92:55:db:a3:37:c1:b0:49:7c:ab:7f:8e:82:bc:ac:d6:be:f0:
f2:7c:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:30 2026 by rpki-client