Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: NQtSr4r13CLPS1IR1gkAbvTF+aqJnu/sbw6JS6T7MiA=
Subject key identifier: 9D:B3:97:F5:3D:2B:F4:7C:D6:EB:F5:80:1D:C8:D3:1A:BB:C2:43:03
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 019D9BBEA5EC10A14DA267E67863539CF1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 0C37
Signing time: Fri 17 Apr 2026 14:00:55 +0000
Manifest this update: Fri 17 Apr 2026 14:00:55 +0000
Manifest next update: Sat 18 Apr 2026 14:00:55 +0000
Files and hashes: 1: 21R_t7vKnYEIDQebm-7zjxxy-lo.roa (hash: uGSGk5iT+FrqnBLQlW6LsLr35tMh1jia+p+sY2P//70=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: qx1C5RscUqTl0COdluANkOAZQepwb8rWrf/WN/qlvZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:a5:ec:10:a1:4d:a2:67:e6:78:63:53:9c:f1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Apr 17 14:00:55 2026 GMT
Not After : Apr 18 14:00:55 2026 GMT
Subject: CN=9db397f53d2bf47cd6ebf5801dc8d31abbc24303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:99:76:21:6b:64:db:36:b2:98:be:c0:2c:
d4:d1:f6:2f:45:01:f1:4c:45:0b:af:1e:96:a6:6d:
62:63:27:dc:d1:6d:d3:c8:b3:31:d2:c2:65:2b:bd:
6d:33:38:b1:f5:df:44:a3:4d:60:ee:57:8b:9e:12:
a1:7f:d7:c1:ea:66:ce:7e:52:1b:7a:5f:b7:93:c6:
84:1c:d1:df:1a:60:12:ce:4f:b1:75:51:97:67:6c:
1b:51:af:a9:2f:32:50:7c:d1:af:5d:0c:e4:27:a2:
94:32:58:79:8b:08:d5:e5:45:3a:17:16:fe:54:32:
2f:19:17:35:75:47:aa:fc:ea:8a:82:f8:c4:a2:39:
f7:ec:fb:10:94:9d:19:58:b1:d6:2d:46:a8:8e:58:
85:e5:22:7a:e3:61:42:a6:63:9b:8d:d4:90:70:06:
52:65:4b:67:b3:71:7d:de:ad:38:c5:fc:41:28:5b:
0b:74:10:89:68:34:a9:28:11:3f:97:b1:87:0d:15:
8a:e2:fa:c8:89:3a:67:b3:9e:eb:dd:35:6c:f7:c3:
54:94:15:8f:03:86:a9:11:52:a3:05:c5:fb:fc:86:
ae:b6:09:ab:38:60:f0:c8:c9:b1:56:95:fd:0f:4b:
79:e5:81:e5:15:14:05:51:6a:d2:ae:7c:f3:07:54:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:97:F5:3D:2B:F4:7C:D6:EB:F5:80:1D:C8:D3:1A:BB:C2:43:03
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:52:f7:e7:dd:4b:05:ed:df:3a:7b:fe:a5:01:15:3d:f9:39:
77:84:c9:7e:34:0b:3a:bf:51:a6:4c:40:08:08:8a:3d:30:f9:
c7:b4:fc:21:df:0f:d0:fc:cf:2b:60:89:cf:55:e7:6d:98:6a:
a9:e2:96:77:3e:28:64:09:ed:d6:4c:e1:2e:e3:d2:a3:49:63:
95:db:8e:ff:08:5c:1c:f2:23:ba:95:df:ed:68:1e:4d:45:66:
f3:82:ca:fc:4f:ed:7e:18:86:89:41:b1:96:47:87:14:a0:90:
22:a0:3f:4e:86:92:93:d2:de:f3:22:f3:c7:c9:23:87:cb:ee:
ba:35:7d:93:e3:b4:0e:8d:dd:c3:d9:de:03:08:d4:a1:78:dc:
ee:a9:f3:f5:4b:1b:f7:21:f8:54:ad:4f:31:62:e3:fa:9c:3a:
d2:1f:9b:f5:cb:e0:19:e9:ce:09:ec:1b:42:3c:ee:54:5f:f4:
8a:1f:ea:f3:ee:4a:05:15:16:54:af:05:f8:4f:d4:7a:29:de:
6b:9d:f0:ba:82:fc:9c:42:05:53:80:7b:9f:15:ba:19:91:4a:
e9:1c:9b:5d:05:4e:10:56:d2:9e:8a:1a:25:c6:34:7b:07:9c:
81:d3:a1:83:92:c8:77:99:88:91:47:65:62:2b:ff:19:48:0f:
a9:87:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:38 2026 by rpki-client