Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: pquK5N0MRjF9rtKM54uIYpqGE1hv4iaqfFkrZYCx7LM=
Subject key identifier: 7E:D3:3C:10:46:E4:CA:FE:D4:26:AE:24:7F:01:1F:00:25:16:14:1A
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 019D98BDD955765B9FBD29E7FCAAC891B684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:01:11 +0000
Manifest this update: Fri 17 Apr 2026 00:01:11 +0000
Manifest next update: Sat 18 Apr 2026 00:01:11 +0000
Files and hashes: 1: IPShWGUXlOQysmlHN59ggxp79no.roa (hash: h66cPY9mKXXd6y+2DIeK9BUX2MMAhCZtqkFLMLMhdLk=)
2: UUFYP2GnG27gknclmWjbFXee-5c.asa (hash: vtuGXz4SCbN+csRPRpu2i0eRfkh5mJ/Z4XlVSXzxMy4=)
3: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: dIfn/SoMoIPfCtBFDLq0NFFiSVLS3A8qZTD/1MYJZ4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d9:55:76:5b:9f:bd:29:e7:fc:aa:c8:91:b6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Apr 17 00:01:11 2026 GMT
Not After : Apr 18 00:01:11 2026 GMT
Subject: CN=7ed33c1046e4cafed426ae247f011f002516141a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:df:5c:4d:65:49:2b:9e:0a:93:07:3f:04:
49:03:89:2e:a1:4d:dd:bc:63:fc:eb:c4:6c:fa:9e:
c2:aa:84:c5:8f:29:46:0c:37:e0:97:d2:98:60:7b:
6f:c1:02:a6:20:9f:c3:56:ff:4d:f9:00:b3:d2:11:
01:d4:ba:97:70:c9:3e:23:49:3b:93:1d:79:8d:e7:
69:71:f4:f7:09:d1:e4:03:ab:76:ea:98:39:87:bd:
20:82:c4:b5:1f:fc:fb:70:e2:e3:27:6e:f5:2a:fb:
a5:ec:71:bb:61:94:a0:36:57:5b:ec:fb:3c:30:ea:
87:f7:19:f3:c5:2f:5b:72:06:17:b1:db:74:b5:af:
51:8e:a1:f2:66:da:e6:de:fb:fd:26:3d:6f:a0:28:
21:92:49:a3:51:db:93:f4:df:20:eb:bd:eb:a2:8a:
84:65:41:93:0d:09:f0:1e:4c:70:1d:e1:f3:7a:cb:
3d:7e:1b:6f:07:36:02:ae:e5:cf:f8:ff:ed:c5:b0:
05:14:4a:b8:1d:dd:67:f0:04:77:d4:9f:9a:a9:97:
f2:fc:8d:a4:61:bf:9e:91:bb:a4:41:ee:57:4e:e2:
26:d9:6b:58:5f:5d:d3:75:98:90:a5:06:5d:40:df:
6d:2e:a0:71:06:62:a8:5c:1e:b3:68:f8:6e:5c:d0:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D3:3C:10:46:E4:CA:FE:D4:26:AE:24:7F:01:1F:00:25:16:14:1A
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:91:21:ad:09:ae:3f:c8:7f:98:23:2b:9b:9c:88:2b:35:
8f:04:42:4e:5f:c4:58:5b:00:c0:dd:9a:10:30:f4:be:a7:c1:
02:c7:e9:35:d0:34:0f:b1:2d:2b:1d:b6:16:f8:4a:75:ee:cb:
40:3e:f5:e3:d4:9d:e4:f2:9e:a4:5b:19:2d:40:e0:42:a5:92:
3e:3a:ca:1a:69:3b:30:96:33:66:93:a9:8d:cb:87:61:c3:6a:
70:7d:06:ac:fa:2b:f0:44:cb:b3:46:35:3f:10:4d:96:91:d5:
02:39:fe:4c:8e:80:4e:74:a8:9a:6d:20:5f:23:ea:60:ef:e4:
7e:c9:27:5a:74:f7:8e:29:25:14:41:df:6b:11:a3:a1:65:44:
1b:ee:77:37:c9:92:8e:35:47:f3:fb:9e:3c:f9:a2:cb:0f:7b:
67:c0:63:f9:a8:ef:40:b1:ea:02:65:fb:45:6e:22:ae:80:1a:
01:0c:8a:f4:10:0c:bd:04:b4:c4:48:a0:c1:18:5c:bf:20:44:
d7:89:00:a5:ac:a9:9c:b5:b8:22:c5:47:d3:e8:7c:02:67:d6:
1a:4d:d4:4d:43:a1:47:45:84:f4:c4:04:bb:f6:0b:40:51:4b:
9f:b7:4e:00:25:82:2c:34:8f:4b:5b:51:e3:df:23:3a:fb:1a:
ab:46:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:45 2026 by rpki-client