Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: mX51rV9j7TpBSM1lwm643ljAffyQqyUEGnQwPDaze1A=
Subject key identifier: A3:97:4A:0F:06:E5:5D:8D:03:BE:40:C4:D0:5B:40:A6:45:D7:99:07
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 019D9D3EA1CDC857CC1E343FDC6E64B75FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 21:00:20 +0000
Manifest this update: Fri 17 Apr 2026 21:00:20 +0000
Manifest next update: Sat 18 Apr 2026 21:00:20 +0000
Files and hashes: 1: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: IOqYik7ioTV0W8gOLfaUh/swf0fsPLFLG+0ktb/aaSY=)
2: mTYFd1745jhrZ9TtN2i23HR2pUI.roa (hash: ydADvfnj2q9V4OlnDPfNddiaxsr5Yrl3BEkKtbnsrx4=)
3: nOreBNvB9sHvjaOwA-7mkOrWqLI.roa (hash: PolGTwJfcBCQ5ul8B/u+HLxsm0nGBzqvFUKDQhFP6Lk=)
4: pPjzGwxRrQB5-40BluFsbIPRays.roa (hash: sQ+RWTCTmzmCdnVJPlVfZs+TlcOrO5vdITrduRsIAW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:a1:cd:c8:57:cc:1e:34:3f:dc:6e:64:b7:5f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Apr 17 21:00:20 2026 GMT
Not After : Apr 18 21:00:20 2026 GMT
Subject: CN=a3974a0f06e55d8d03be40c4d05b40a645d79907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:32:02:ad:2f:4b:04:10:c1:f9:70:17:dd:
79:1a:ac:39:c0:d0:cf:e0:c7:6c:32:49:e5:1c:03:
e2:ab:c5:ed:10:94:63:ec:4c:20:a4:53:33:21:0a:
cf:07:5e:2f:91:93:7c:b4:c9:63:a5:db:54:1a:b7:
ee:80:b4:df:c0:71:4e:a3:8e:e2:fb:ae:c9:e5:c7:
4f:6e:14:b0:d6:7b:69:5b:89:3e:49:c8:67:d7:ed:
c9:f2:37:9e:1f:40:a0:b5:1c:5b:95:a3:cb:b9:92:
e7:78:f2:ce:cf:e7:a5:c7:0f:7e:e5:b6:21:eb:77:
16:2d:3e:23:5b:0f:32:7d:d0:a3:97:63:b5:f7:bb:
18:3b:ef:55:6f:62:57:1b:75:23:7f:f9:32:ad:82:
33:14:b2:36:95:43:95:0a:8f:23:16:15:63:d8:7a:
ca:57:68:71:27:45:44:26:e5:a6:f9:6a:0a:7e:fe:
47:de:9b:90:d4:f2:ab:2b:b0:5b:00:7d:45:8a:e6:
02:f1:7f:20:e1:fa:5d:08:31:aa:77:da:67:e6:91:
8e:84:1a:f2:fd:9c:a4:57:57:c4:a2:50:ff:20:f8:
1d:a1:da:e5:47:b9:40:71:ba:38:b4:ae:f3:46:c8:
b2:d9:b5:14:b7:a7:cb:d2:6e:e5:50:92:bc:ed:f6:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:97:4A:0F:06:E5:5D:8D:03:BE:40:C4:D0:5B:40:A6:45:D7:99:07
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:22:a1:26:bf:60:27:7a:ee:5f:58:3d:91:eb:91:63:7b:00:
91:1c:7a:e9:69:27:7b:89:07:12:95:70:a0:0b:aa:7a:ea:d1:
55:01:9d:5c:ca:24:6b:94:7b:44:87:c0:19:02:0b:07:56:0a:
77:c6:2f:eb:91:ff:e4:5b:bc:27:9e:43:f9:e8:41:78:45:99:
d4:b6:f3:ae:a6:9a:aa:cd:1a:31:f1:1c:56:fc:21:04:80:9d:
ac:5e:4b:53:7f:05:fd:31:e0:51:0e:1a:51:4e:bc:5a:4e:cd:
c2:ab:75:20:3b:2e:1a:70:c7:49:17:a5:6b:29:4b:e2:14:85:
1f:19:1d:92:80:07:52:78:35:99:e6:74:6d:4c:05:ea:a4:a2:
dd:f1:e3:57:23:21:0e:ef:ea:df:3e:db:02:5f:e5:c9:4d:cb:
e9:f3:35:5d:63:26:92:37:29:3d:7e:b3:02:ed:11:cf:40:09:
ac:7c:79:21:89:ab:23:1d:0e:00:05:a0:3a:c3:14:5d:87:30:
b7:8f:6b:67:be:e3:8a:94:11:60:42:a4:46:ee:10:ba:c8:00:
d4:ce:03:75:08:f8:7b:c2:02:bb:3f:cb:58:b3:91:be:37:ef:
95:73:9d:c9:55:1c:8e:bc:39:24:42:b2:6c:19:e1:3f:a4:2e:
e7:6e:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:07:19 2026 by rpki-client