Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: dhbKKZkYtnWbZFW7ATIXTj6+nUGOkdGfND+k7wUKdRg=
Subject key identifier: 2A:25:F4:8C:30:59:EB:62:99:37:7B:B6:2C:1B:D0:20:03:3E:2F:D9
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019D9D07E441A3A1646D4991E86AA7B990D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 0172
Signing time: Fri 17 Apr 2026 20:00:33 +0000
Manifest this update: Fri 17 Apr 2026 20:00:33 +0000
Manifest next update: Sat 18 Apr 2026 20:00:33 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: EPajsHci/Lwq4AKbXa6ijbxKn5L4ry3n/rMey/D9TQ0=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:e4:41:a3:a1:64:6d:49:91:e8:6a:a7:b9:90:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Apr 17 20:00:33 2026 GMT
Not After : Apr 18 20:00:33 2026 GMT
Subject: CN=2a25f48c3059eb6299377bb62c1bd020033e2fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:c3:d7:34:76:c9:0d:94:91:61:c2:75:0b:
60:64:2b:d7:3a:7f:1d:cc:47:7a:07:5c:e2:46:8f:
0d:20:92:50:de:7d:8c:fe:6a:ef:57:d0:7c:45:ba:
ba:0b:e3:01:ba:cf:5f:b7:5a:3c:26:bb:38:02:db:
70:94:0e:e8:e1:52:ac:92:5d:a7:2e:31:f9:c0:cc:
30:86:60:4b:e3:73:75:bb:49:4c:4e:2b:5d:37:1b:
17:5a:db:16:d5:29:07:cc:b3:09:14:70:99:ab:b9:
01:3d:11:be:ad:67:8e:d1:a8:2b:2c:b7:ef:eb:57:
d3:d2:d4:9d:57:a3:94:06:71:2c:93:e5:5b:f3:db:
4c:52:02:bb:72:16:41:90:ae:86:e8:24:7e:4a:e1:
1c:03:d5:4c:b3:d9:33:9d:fa:12:ab:f8:45:33:b2:
c2:d4:fb:6a:c1:3c:e9:f8:21:c8:9e:c2:56:b1:86:
4d:9e:28:c4:52:86:23:6a:28:da:71:0d:46:52:32:
d4:ce:38:ee:90:94:b9:f7:3c:47:ef:ec:09:92:1f:
59:32:df:a9:79:1a:03:61:d5:e3:07:8e:97:ab:05:
5a:44:75:65:37:2e:4e:9d:97:65:0c:6e:0d:6f:51:
4f:f8:9a:0d:aa:59:2d:8d:9d:9c:03:c9:27:a1:74:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:25:F4:8C:30:59:EB:62:99:37:7B:B6:2C:1B:D0:20:03:3E:2F:D9
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:28:8e:8e:f8:65:8a:58:18:4c:e1:13:a8:07:92:99:d2:78:
c7:cb:75:c5:0e:06:04:04:ee:33:22:6c:c8:fc:4b:a8:c4:a6:
93:c4:70:5a:5d:bc:e3:07:1d:15:5a:f9:e8:26:31:6d:42:e3:
f6:67:c0:b6:06:d2:9e:44:43:76:b4:5e:de:f5:5d:92:0e:51:
eb:c4:6d:e7:c1:9f:08:88:34:18:74:c9:a0:a7:e7:ac:01:b7:
2a:bc:a8:52:c5:6a:c6:b9:ea:6b:82:89:4d:71:42:71:64:a6:
c1:50:c4:34:e4:40:7c:f0:15:af:df:c2:d9:a5:a2:b3:75:e3:
55:7b:bd:f6:ab:67:9c:d2:f3:20:27:2d:69:cd:c5:f0:29:a0:
eb:38:9d:a8:46:30:7f:d4:01:2e:48:6b:74:b2:74:df:22:cd:
90:8a:a7:dc:c7:34:e9:b2:b0:98:0d:36:bf:27:ff:d7:24:c4:
d1:f7:8a:8c:1e:ad:d7:89:2f:ce:a4:2e:97:20:21:1b:e5:42:
06:11:01:e3:cd:d6:ae:1c:d3:60:6e:b1:d4:88:b3:51:ac:5c:
ae:cd:10:aa:2f:9f:18:c8:ec:72:6f:e7:ee:f4:67:d8:46:3f:
e2:96:83:ee:9a:26:44:81:13:7f:c8:c8:02:8b:47:ee:1d:b0:
00:f9:fa:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dB+RBo6FkbUmR6GqnuZDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDhjNDg2ZWY1NjE3MGM0MTJmMjY2MTVkMGE0MDk0YmNh
MWZiMmMwHhcNMjYwNDE3MjAwMDMzWhcNMjYwNDE4MjAwMDMzWjAzMTEwLwYDVQQD
EygyYTI1ZjQ4YzMwNTllYjYyOTkzNzdiYjYyYzFiZDAyMDAzM2UyZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuvD1zR2yQ2UkWHCdQtgZCvXOn8d
zEd6B1ziRo8NIJJQ3n2M/mrvV9B8Rbq6C+MBus9ft1o8Jrs4AttwlA7o4VKskl2n
LjH5wMwwhmBL43N1u0lMTitdNxsXWtsW1SkHzLMJFHCZq7kBPRG+rWeO0agrLLfv
61fT0tSdV6OUBnEsk+Vb89tMUgK7chZBkK6G6CR+SuEcA9VMs9kznfoSq/hFM7LC
1PtqwTzp+CHInsJWsYZNnijEUoYjaijacQ1GUjLUzjjukJS59zxH7+wJkh9ZMt+p
eRoDYdXjB46XqwVaRHVlNy5OnZdlDG4Nb1FP+JoNqlktjZ2cA8knoXQXPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCol9IwwWetimTd7tiwb0CADPi/ZMB8GA1UdIwQY
MBaAFEAIxIbvVhcMQS8mYV0KQJS8ofssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTct
ZTkyYTI1NDkxY2VkLzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTctZTkyYTI1NDkxY2Vk
LzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSiOjvhl
ilgYTOETqAeSmdJ4x8t1xQ4GBATuMyJsyPxLqMSmk8RwWl284wcdFVr56CYxbULj
9mfAtgbSnkRDdrRe3vVdkg5R68Rt58GfCIg0GHTJoKfnrAG3KryoUsVqxrnqa4KJ
TXFCcWSmwVDENORAfPAVr9/C2aWis3XjVXu99qtnnNLzICctac3F8Cmg6zidqEYw
f9QBLkhrdLJ03yLNkIqn3Mc06bKwmA02vyf/1yTE0feKjB6t14kvzqQulyAhG+VC
BhEB483WrhzTYG6x1IizUaxcrs0Qqi+fGMjscm/n7vRn2EY/4paD7pomRIETf8jI
AotH7h2wAPn6Sw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:32 2026 by rpki-client