Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: ZhOJ79Ks0QsjxKigAF7Z49bz5PNSuraFqhgj2OVVnSI=
Subject key identifier: 55:B9:AB:B9:F9:2A:CF:13:17:CB:2D:84:B6:0A:9D:8B:70:4B:90:81
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 019D99D0827157EE13522EA5F2D8473D605D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0DA5
Signing time: Fri 17 Apr 2026 05:01:12 +0000
Manifest this update: Fri 17 Apr 2026 05:01:12 +0000
Manifest next update: Sat 18 Apr 2026 05:01:12 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: kRAuAEnRnhMDKogKHz2B0snA3pGQbe2/y6DGt3F0rwM=)
2: r8_Pkht5LvuIUKkXxWRZPNhds_A.roa (hash: NBzWUBYoQAPM9L8l3h0b1Ywu4V34+t30OZWBM39xvCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:82:71:57:ee:13:52:2e:a5:f2:d8:47:3d:60:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Apr 17 05:01:12 2026 GMT
Not After : Apr 18 05:01:12 2026 GMT
Subject: CN=55b9abb9f92acf1317cb2d84b60a9d8b704b9081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:f6:ca:58:e0:56:ac:d4:06:53:11:e7:2f:
4f:75:a2:bf:b3:42:ed:00:ab:fb:5b:cd:42:16:0d:
3a:ce:01:f8:13:d0:c1:08:78:ac:02:33:91:30:65:
f6:9f:59:63:7e:cc:ec:56:cb:be:01:a8:63:e6:d4:
ba:1c:06:eb:d9:fa:38:b5:7d:5c:34:cf:87:07:bf:
2d:d9:3b:d7:ba:32:95:3c:5d:49:05:db:6d:c2:6f:
db:e0:0c:d6:ae:ce:9b:64:20:5d:85:73:dd:5a:a0:
8c:f8:5b:48:c0:02:1e:dd:42:bf:a3:5e:d9:8a:3e:
e7:b4:23:70:b1:9f:58:19:1d:c3:11:1a:9b:c9:80:
2f:0e:3b:ca:94:8b:d6:1c:ff:62:42:ee:45:5e:bd:
48:30:61:57:01:4a:f2:3f:0f:99:79:3e:a6:e8:c0:
9e:92:a8:9c:cd:6d:6a:42:ef:b2:ce:2e:d0:5b:80:
da:13:54:72:39:96:a8:87:6a:f2:29:80:b3:27:a6:
3b:51:bd:b5:b9:89:f4:7c:cc:31:3b:7e:f8:2e:40:
ae:92:32:1d:01:72:9b:77:24:e1:b8:e9:91:84:4e:
80:35:86:55:e0:11:f0:5f:4a:96:4c:21:2c:9f:ee:
cc:80:62:5f:82:47:a7:8d:5d:f1:88:53:3c:68:3a:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:AB:B9:F9:2A:CF:13:17:CB:2D:84:B6:0A:9D:8B:70:4B:90:81
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d8:4a:e4:dd:f0:9b:f0:38:e4:16:12:69:c5:66:b8:cc:ba:
f1:8c:df:b7:f2:d3:71:5a:c3:8f:69:6e:51:db:08:d9:fd:8d:
18:48:cc:80:3f:6f:0d:c3:18:4a:e7:e8:24:61:03:16:12:46:
98:7c:2c:0a:11:ae:1d:bd:b9:40:ca:da:b2:17:80:c4:d5:7f:
b0:79:2c:7f:0e:88:8f:55:dd:de:e2:17:3b:e2:14:61:05:ac:
1a:47:28:46:0e:41:0e:03:cf:6f:0c:de:1d:dd:a7:11:d4:02:
d9:e6:14:d4:af:c5:6c:f3:9d:09:5e:e9:8a:76:ba:8b:29:e5:
dc:c0:27:6e:39:5d:2e:c8:4b:0a:6f:0b:46:e8:7f:f2:08:9b:
95:19:60:da:b5:dd:0f:7e:c4:11:fe:c9:8a:e6:31:82:52:16:
71:a3:b6:b9:3e:c8:17:96:b9:69:ab:5f:ff:fd:20:25:bb:be:
78:d4:76:fb:f6:53:7a:68:c5:f0:d2:9f:71:63:c7:bf:2c:10:
69:58:fa:8d:c0:81:82:5c:1a:94:a6:5b:7b:3b:77:96:f7:bb:
08:65:f5:ba:79:4f:44:5f:b5:3c:0e:80:2e:ea:22:e8:b6:b5:
80:12:96:59:07:bf:78:c1:29:d7:c6:ce:8d:a7:eb:fc:92:3d:
40:3b:fd:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0IJxV+4TUi6l8thHPWBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDFjOTM5ZWE5NWEyMWYzYjc0MjkwMWRmZTA1ZjI2YTU3
Nzc1ODEwHhcNMjYwNDE3MDUwMTEyWhcNMjYwNDE4MDUwMTEyWjAzMTEwLwYDVQQD
Eyg1NWI5YWJiOWY5MmFjZjEzMTdjYjJkODRiNjBhOWQ4YjcwNGI5MDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzj2yljgVqzUBlMR5y9PdaK/s0Lt
AKv7W81CFg06zgH4E9DBCHisAjORMGX2n1ljfszsVsu+Aahj5tS6HAbr2fo4tX1c
NM+HB78t2TvXujKVPF1JBdttwm/b4AzWrs6bZCBdhXPdWqCM+FtIwAIe3UK/o17Z
ij7ntCNwsZ9YGR3DERqbyYAvDjvKlIvWHP9iQu5FXr1IMGFXAUryPw+ZeT6m6MCe
kqiczW1qQu+yzi7QW4DaE1RyOZaoh2ryKYCzJ6Y7Ub21uYn0fMwxO374LkCukjId
AXKbdyThuOmRhE6ANYZV4BHwX0qWTCEsn+7MgGJfgkenjV3xiFM8aDrCcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW5q7n5Ks8TF8sthLYKnYtwS5CBMB8GA1UdIwQY
MBaAFKpByTnqlaIfO3QpAd/gXyald3WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2Et
NjA3Y2EwMjViOTRmLzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2EtNjA3Y2EwMjViOTRm
LzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNhK5N3w
m/A45BYSacVmuMy68Yzft/LTcVrDj2luUdsI2f2NGEjMgD9vDcMYSufoJGEDFhJG
mHwsChGuHb25QMrasheAxNV/sHksfw6Ij1Xd3uIXO+IUYQWsGkcoRg5BDgPPbwze
Hd2nEdQC2eYU1K/FbPOdCV7pina6iynl3MAnbjldLshLCm8LRuh/8giblRlg2rXd
D37EEf7JiuYxglIWcaO2uT7IF5a5aatf//0gJbu+eNR2+/ZTemjF8NKfcWPHvywQ
aVj6jcCBglwalKZbezt3lve7CGX1unlPRF+1PA6ALuoi6La1gBKWWQe/eMEp18bO
jafr/JI9QDv9Cg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:11 2026 by rpki-client