Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
File: qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json)
Hash identifier: b8V3rUx8KZDmi89iD3yCcWYY9zKzpFlxLYEeC6X87tg=
Subject key identifier: 36:D4:90:F9:A0:00:28:B0:EC:7B:C8:80:DB:50:C6:B8:C5:91:C9:DA
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 019D9B5146C277DC9C4E8FA05A041CE8E3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
Manifest number: 1884
Signing time: Fri 17 Apr 2026 12:01:28 +0000
Manifest this update: Fri 17 Apr 2026 12:01:28 +0000
Manifest next update: Sat 18 Apr 2026 12:01:28 +0000
Files and hashes: 1: IkjRDZvjoet-DMCFuA1SVxVn9z0.roa (hash: KDG2SPZXlzy1qLYoQcv1WkPT39XYjh45It7qEUlD6Rw=)
2: Zw6KU8Yaubyr6fTeBrasGVyasWI.roa (hash: YUUSHoIMxT31bL5DTGnNTWMiRlkifirHreIPqG9BiZo=)
3: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: n1E7Omf+o2SMfGrSme1X1p2bR11yKUAsjfXB39wGAZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:46:c2:77:dc:9c:4e:8f:a0:5a:04:1c:e8:e3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Apr 17 12:01:28 2026 GMT
Not After : Apr 18 12:01:28 2026 GMT
Subject: CN=36d490f9a00028b0ec7bc880db50c6b8c591c9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:02:44:0d:a7:f3:36:f4:73:47:10:d9:3c:
6d:47:4a:7b:bc:f0:45:db:2a:04:89:f2:30:62:1f:
9c:1f:86:8b:74:a9:20:81:1e:6e:ab:d1:1c:85:c1:
53:61:20:10:d3:e5:5c:24:f5:bd:45:45:d7:ec:70:
51:ba:9c:e8:ba:60:9e:80:cc:f2:c7:be:10:a9:f0:
d9:69:50:6e:a5:94:3e:91:3b:82:d5:90:1c:64:f0:
b9:de:09:be:ae:f5:99:2e:2e:b6:97:2f:73:16:9f:
42:47:b7:aa:b2:d4:8e:49:a1:e2:85:9c:9c:9f:49:
90:6e:ff:7c:93:34:61:70:87:22:54:d1:62:31:1f:
27:e6:02:08:bc:2a:d7:92:36:03:2c:04:4f:8e:6e:
f5:76:7f:ab:cd:9c:f5:80:17:59:c4:6d:0f:a7:fa:
bf:3c:af:88:be:8b:09:3e:38:11:df:9d:25:b7:c1:
04:69:6d:b5:e0:97:45:e5:d8:2e:69:0d:aa:d5:04:
47:19:22:83:5f:79:79:e4:e1:21:c3:dc:01:34:7d:
64:89:41:09:c6:49:9a:42:34:dd:fc:71:e4:ed:b8:
eb:a2:47:48:d2:f6:3f:ad:fb:4d:4a:19:5f:b7:49:
91:2a:55:1c:02:ea:53:6e:83:14:6e:4e:4a:7a:dc:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:90:F9:A0:00:28:B0:EC:7B:C8:80:DB:50:C6:B8:C5:91:C9:DA
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a8:cf:54:e3:fb:5a:d0:a3:72:9f:16:de:0a:ca:f5:24:2b:
17:bb:d7:e2:51:e9:37:44:c0:df:8b:13:49:be:5f:bb:1c:aa:
39:2f:1c:54:e4:d7:cc:d8:ca:10:90:d1:75:ed:99:2f:f8:41:
dd:a0:db:54:e0:3f:15:4f:1b:d5:d8:23:6a:5b:81:2b:a3:9e:
f9:75:25:31:44:bd:ce:7e:b5:cd:10:f3:af:c9:16:27:b1:6b:
90:41:bd:da:f4:c9:2d:ce:d4:13:3f:77:d0:c3:a4:62:9d:64:
fa:9e:21:6c:d1:c0:54:36:ab:d0:3d:55:11:6b:51:fc:81:89:
e0:fd:f6:39:e5:c1:83:6e:32:2a:ab:59:39:98:c5:03:c0:29:
f5:04:c0:b1:56:e3:15:d2:ed:79:8e:22:70:05:9a:2b:e8:2d:
48:cd:3e:33:20:9a:8f:4e:48:e5:c6:a8:f3:93:30:41:65:1d:
2e:8e:ab:9d:a7:10:1e:98:79:01:5c:23:4e:d7:ab:86:db:3d:
c4:8f:56:61:fe:e0:cd:a7:df:9c:db:c8:80:19:16:c9:7a:30:
6e:0d:f9:1a:60:e2:bd:fb:3f:3e:12:c7:bd:58:b2:57:6e:61:
9d:c1:71:ea:5d:c9:a4:97:a7:00:0e:51:51:8f:b6:fd:d2:27:
5a:3c:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:21 2026 by rpki-client