Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
File: QGuz4srXsQAlbhxKf1VbajjYdSY.mft (raw, json)
Hash identifier: A2FdWQTJcbEixmtodKP/Zem5uQQXbv2HRonNEglrvjM=
Subject key identifier: D6:12:07:E8:3C:E9:4F:9F:65:D6:41:3E:6F:5E:BA:A6:A7:F7:90:36
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Certificate issuer: /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial: 019D9D75D084A826408C19566E1DA6680CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
Manifest number: 85
Signing time: Fri 17 Apr 2026 22:00:36 +0000
Manifest this update: Fri 17 Apr 2026 22:00:36 +0000
Manifest next update: Sat 18 Apr 2026 22:00:36 +0000
Files and hashes: 1: QGuz4srXsQAlbhxKf1VbajjYdSY.crl (hash: UBvKEkRsBo7bxA7e76aTvMVd5vEIkCaVl/wH5XRMqg8=)
2: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (hash: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:d0:84:a8:26:40:8c:19:56:6e:1d:a6:68:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Validity
Not Before: Apr 17 22:00:36 2026 GMT
Not After : Apr 18 22:00:36 2026 GMT
Subject: CN=d61207e83ce94f9f65d6413e6f5ebaa6a7f79036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:2d:d3:f6:cb:65:eb:39:87:e4:d6:c9:e0:
c2:fd:8c:5c:a7:62:22:37:cc:3d:3f:be:47:d3:9a:
b9:7e:1e:53:69:48:11:2d:4c:6c:e6:15:7d:f7:d5:
31:3d:92:77:dc:f6:35:3d:ac:87:65:60:ec:26:fc:
6c:cd:f2:7f:84:2c:8d:4a:77:aa:61:f8:6e:0a:5c:
5a:f3:94:07:e6:ac:fd:ea:77:2c:2b:8a:fd:3e:db:
e1:05:55:1c:55:bc:04:65:02:47:66:85:de:a9:2b:
87:05:31:7d:20:d7:38:fa:a7:49:f2:3f:84:00:2b:
8f:96:68:94:e1:f0:97:50:23:e9:18:9c:0f:0e:ec:
5c:e9:2e:ba:e0:34:06:96:2f:3c:eb:c6:89:95:d7:
f3:38:81:3f:0f:09:34:79:20:34:33:d8:51:f0:0c:
f2:93:76:ce:fe:36:63:a6:e8:bc:39:74:35:4c:64:
18:4e:c3:10:63:4b:3d:c1:f5:f8:2d:12:3d:64:57:
7c:45:70:13:28:2d:f1:f9:de:9a:35:8e:74:64:28:
6e:96:9c:72:a9:46:29:03:d0:a7:25:81:58:16:bc:
eb:8a:1d:32:de:b3:c3:db:38:ad:2d:b6:a6:52:68:
f0:7d:8b:7b:67:ad:c0:bd:38:75:b5:09:62:e6:ea:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:12:07:E8:3C:E9:4F:9F:65:D6:41:3E:6F:5E:BA:A6:A7:F7:90:36
X509v3 Authority Key Identifier:
keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:00:e4:b8:91:a5:42:c7:44:e6:27:23:1c:58:0a:72:40:
e4:7b:16:6c:f7:02:82:a3:f1:9e:f8:71:b6:6b:37:e0:8f:48:
6f:10:3b:50:c1:9a:6d:d9:1f:7d:ed:41:6e:c6:44:1e:12:93:
ab:17:05:b4:58:e1:87:94:ce:87:f9:c6:56:c7:84:3b:b4:e2:
66:58:88:02:ba:c7:35:ea:ba:05:74:a1:76:b6:f8:a9:8b:99:
e2:12:2c:65:c9:52:82:32:3e:4d:50:a2:24:91:a4:d0:79:e6:
db:d1:0d:06:6e:39:8d:bd:41:e6:39:05:2c:d6:1f:27:33:ec:
04:92:d7:75:9c:41:a1:91:8d:3d:41:83:61:56:e7:2b:a2:ea:
dc:97:98:fe:e9:6c:3f:aa:1a:59:c2:c8:ff:ea:65:04:56:41:
a0:80:f0:ec:df:ff:c1:66:91:fd:fc:15:88:2d:cb:ad:c9:32:
54:0a:e3:11:69:5b:54:e4:28:65:47:b7:7e:cf:a4:a0:dc:73:
2d:49:1a:c1:77:d7:d8:c3:01:b3:f0:ff:d1:c9:f4:6b:9e:f4:
8f:6d:1c:7c:8a:f7:9c:a5:af:53:bf:2e:b0:4b:a0:57:a0:35:
ce:e7:18:f9:1b:df:9c:60:99:b0:f5:a1:25:56:60:91:1b:c3:
2a:a5:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:36:03 2026 by rpki-client