Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: T1/DcPOOOVbB95m6SSQhBn+PRVAFAgCArz99ENqWbnE=
Subject key identifier: 85:6A:13:95:B8:4F:6B:56:11:98:58:3B:48:34:22:3D:B2:0F:51:8B
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 019D9A3E3F4A486B12B54AB29806A7029AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 04AD
Signing time: Fri 17 Apr 2026 07:01:03 +0000
Manifest this update: Fri 17 Apr 2026 07:01:03 +0000
Manifest next update: Sat 18 Apr 2026 07:01:03 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: nOtoHbjd05R+wFrPSNfW/Wb8k9PgF9fzJqSz0KKoXYo=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:3f:4a:48:6b:12:b5:4a:b2:98:06:a7:02:9a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Apr 17 07:01:03 2026 GMT
Not After : Apr 18 07:01:03 2026 GMT
Subject: CN=856a1395b84f6b561198583b4834223db20f518b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:f3:de:80:98:81:c0:24:f0:99:2e:71:51:
3f:f7:01:e1:3d:c3:2e:c6:a5:4c:68:2a:a6:35:b2:
8b:40:6f:fa:1c:03:02:cf:b3:a1:56:dc:c1:82:c5:
bb:f4:ab:4e:61:71:17:0e:e1:b4:e7:43:34:fa:67:
1b:19:36:94:70:59:68:35:0f:a0:25:38:bb:c7:79:
f4:12:2d:8e:70:a3:33:7f:73:ef:e9:86:dc:b2:ea:
ef:1f:54:27:ca:f0:21:30:71:29:1c:de:b4:8f:ea:
94:b4:28:9c:93:8b:f9:8c:7c:7b:8d:e8:f7:d8:1b:
64:97:e8:73:74:a7:39:34:2a:11:73:43:71:d3:39:
b0:98:f7:d5:b5:4e:df:1d:bb:9d:a1:15:d6:f2:70:
f4:ac:72:78:b2:0b:e0:fc:8b:e4:85:75:33:4f:77:
29:d9:f6:2a:56:f6:01:12:40:f1:03:45:57:a1:ae:
b9:94:dd:76:7e:2a:48:05:ba:b1:7b:a3:22:10:c3:
23:02:1d:57:aa:69:1c:ab:c1:87:e2:f0:de:4d:92:
4f:cf:72:ed:37:a0:aa:be:39:43:b1:70:28:64:f7:
d2:36:32:69:58:b9:a8:2a:d8:29:cc:fb:0b:4d:05:
84:74:5d:63:c1:56:21:1f:5b:ef:31:f2:5d:9a:1c:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:13:95:B8:4F:6B:56:11:98:58:3B:48:34:22:3D:B2:0F:51:8B
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:41:95:ac:4d:f5:7a:ea:a3:9d:37:38:bc:e5:72:32:00:81:
d2:4c:d6:ff:29:0b:e0:73:78:44:80:2e:26:5b:5b:bc:97:79:
ab:69:ad:af:67:0d:f4:61:f1:5e:bd:84:b3:90:0c:0c:37:e0:
79:f6:e8:70:d5:03:2d:7c:a5:db:e2:cc:7b:af:7f:ab:64:56:
cf:05:b4:23:6e:81:89:18:39:e6:39:21:00:b3:0b:96:01:cc:
34:8b:4e:24:01:90:e8:e7:58:b2:ba:f5:9f:d0:7b:7a:c7:1f:
8f:8d:ab:25:d6:b6:a8:e1:77:6b:8f:c1:64:fb:0f:ef:6d:04:
78:bf:78:05:55:55:50:d4:34:cf:48:62:a7:a3:41:61:57:42:
9e:ff:a6:ad:18:d3:15:b0:69:da:70:ed:3d:47:57:36:d1:fb:
eb:f4:3e:20:fd:35:8d:5d:12:c8:5c:6f:04:4f:20:28:e0:c5:
2f:03:3c:0d:82:d2:34:c7:3b:80:03:a1:f5:d0:b6:e1:05:0c:
22:63:5c:b5:06:bc:45:94:10:96:fe:c0:5e:b7:d7:d0:46:01:
66:27:5e:97:aa:b1:54:0b:ba:bd:7e:86:46:54:47:63:88:22:
45:4a:67:c8:c3:85:7d:5a:c1:58:25:cc:5a:87:8c:0d:5f:60:
7c:14:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:11 2026 by rpki-client