Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: SkJrELIwj/25mio8tu2QU3D+/UxXcbLGaImopEq+CQc=
Subject key identifier: EC:6A:D8:61:98:31:64:66:2A:DD:7D:CA:9C:6D:2C:24:6D:50:2B:54
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019DA2D33DD4349B216A3BB57EC3E4250FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0A8B
Signing time: Sat 18 Apr 2026 23:00:46 +0000
Manifest this update: Sat 18 Apr 2026 23:00:46 +0000
Manifest next update: Sun 19 Apr 2026 23:00:46 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: aI981FBZ+SkxoHImmlp2+mtbs1Kx5UWclqjaTKM8gJw=)
2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:3d:d4:34:9b:21:6a:3b:b5:7e:c3:e4:25:0f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Apr 18 23:00:46 2026 GMT
Not After : Apr 19 23:00:46 2026 GMT
Subject: CN=ec6ad861983164662add7dca9c6d2c246d502b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:14:6d:af:35:5a:cf:4f:bb:d0:7a:2e:bf:
4e:49:13:86:35:39:17:b0:29:7e:f9:89:d6:e5:3b:
a9:0b:b2:55:a3:9c:01:33:3b:ab:aa:c6:12:06:6a:
2a:93:92:10:4b:7c:87:2b:3f:59:f3:98:a0:88:3b:
2c:c8:e2:f8:8a:4d:bc:be:66:ec:44:53:47:69:f7:
74:f5:ae:39:a8:c4:d7:11:51:78:c5:96:75:f7:ea:
0b:48:63:a2:27:42:c5:db:ff:53:a0:ad:ed:44:49:
1f:2b:7f:68:fc:73:50:c4:28:6b:4e:16:ce:e9:88:
24:9d:93:dd:8c:e4:4c:f6:0a:f2:e7:a5:f9:fb:3f:
71:07:1b:21:9f:94:76:63:78:fe:d3:d4:30:f7:78:
48:df:d1:71:f9:72:1b:72:09:30:94:08:12:7a:05:
20:b8:db:82:1c:69:6b:c1:e8:d8:0f:b6:7b:1e:6c:
b8:eb:ab:6f:e4:ab:e1:9f:31:3b:45:36:53:2b:a7:
34:40:d9:00:ec:78:a1:e3:91:be:b9:96:5b:36:8a:
c4:0c:b3:10:9e:6b:91:92:5e:11:b9:0d:44:7d:cd:
da:a7:be:20:35:ad:73:55:e0:19:43:85:12:1e:ea:
41:e7:06:8f:3f:27:ff:c8:54:58:59:09:26:b4:c1:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6A:D8:61:98:31:64:66:2A:DD:7D:CA:9C:6D:2C:24:6D:50:2B:54
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:32:fe:78:9a:2b:98:ad:4f:04:96:8d:92:18:46:24:ef:28:
e7:d1:0a:74:45:8d:af:7d:00:b1:e0:5c:d9:fb:b3:15:46:8c:
c5:44:d4:15:f9:82:86:bc:d0:8b:24:93:0b:90:8e:75:94:16:
3e:ae:d5:c9:71:83:85:ad:4b:e7:d4:71:a8:7e:b5:80:19:3a:
46:50:9b:6e:22:94:8c:38:04:ea:19:af:f8:f3:dd:38:db:92:
4b:54:ef:b4:58:d3:f2:9b:c5:41:e9:f5:bc:fe:e9:76:b9:91:
0d:6b:b5:c2:ca:c9:d2:2e:48:7f:2a:01:86:78:63:c9:44:95:
be:3a:82:dd:79:88:06:7a:a9:12:ca:b8:1a:6b:de:8f:9d:a2:
7a:3b:88:05:da:0e:d7:5a:fc:a0:f0:e9:c8:74:ac:1b:51:a2:
34:67:92:75:d0:57:48:5c:c6:df:d8:68:92:08:00:85:bd:0a:
ce:31:3f:3a:09:5c:7e:e5:fa:dd:5a:a9:fc:c9:e3:60:e2:e4:
20:06:b8:90:e0:9b:85:63:58:4b:63:d5:04:d7:47:de:9d:fc:
85:61:93:4f:22:dc:c9:11:91:36:31:10:38:05:84:61:88:f6:
d3:a8:e8:9f:9b:39:d1:d6:63:a3:36:1d:87:dd:d7:ca:04:a3:
bc:58:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:52 2026 by rpki-client