Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: f7FKpo9Le7bOtkjWUaeR0fv5KNkfF5QJ/sGcj7tTiXU=
Subject key identifier: A6:D9:A1:2D:D6:63:E6:FE:2E:3D:85:4C:88:57:FB:4D:54:90:97:9E
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 019DA30A034B9B27C04845A76F831AA1F431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0F7D
Signing time: Sun 19 Apr 2026 00:00:35 +0000
Manifest this update: Sun 19 Apr 2026 00:00:35 +0000
Manifest next update: Mon 20 Apr 2026 00:00:35 +0000
Files and hashes: 1: eRjL7bmUuZoWQUIbq4eEp3CN-0M.roa (hash: y5sRxVzTyv3q+thLaOje2bsBoe1cBCrXQcLT//6Uj0k=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: lRtuj8c7XLTidbGnu3VfJcL9uoNDR7VuzGiKbP1S73A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:03:4b:9b:27:c0:48:45:a7:6f:83:1a:a1:f4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Apr 19 00:00:35 2026 GMT
Not After : Apr 20 00:00:35 2026 GMT
Subject: CN=a6d9a12dd663e6fe2e3d854c8857fb4d5490979e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:37:e1:9d:41:7f:d3:c1:1d:fa:b1:cf:0e:
0a:30:27:fa:de:db:eb:3a:4b:9c:f3:32:6f:a3:37:
da:cd:09:22:19:0e:68:96:59:b8:d2:db:73:ca:68:
0a:64:51:46:77:d6:f0:64:cf:84:6a:5c:b4:79:e4:
45:e7:8a:3a:3d:b4:75:7d:fd:ea:ce:68:b5:e4:a7:
48:b2:b0:5c:ea:18:63:65:d3:2f:6f:ae:d4:c7:05:
9e:ef:55:cd:d5:3c:f4:5c:6a:a8:e5:c2:e6:15:fe:
29:e5:b1:ff:56:09:83:a1:03:35:3b:50:d3:50:50:
bd:50:94:0c:d6:14:b7:e2:97:60:2c:a7:92:c8:7f:
9b:4b:61:9c:10:9f:9e:e0:de:1d:60:b5:5a:fc:d9:
34:3b:d2:2c:5c:f7:0f:9b:84:97:33:8e:80:8e:55:
7a:ae:2e:c2:bd:0e:de:b7:72:0a:cd:d7:7e:2c:20:
c6:c7:58:cc:e4:c8:32:5f:d9:2c:09:3b:ae:fb:9f:
4c:16:3a:5e:31:95:96:2c:e1:4a:9e:24:69:ca:5b:
50:57:c8:ee:f0:65:b6:ab:89:98:4f:95:9d:1a:3f:
4a:50:45:46:db:63:87:68:fc:c1:f6:e9:18:58:71:
fb:df:d2:93:a1:8a:70:66:ec:89:bc:5d:47:2d:6c:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D9:A1:2D:D6:63:E6:FE:2E:3D:85:4C:88:57:FB:4D:54:90:97:9E
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:99:e3:94:f1:65:61:c3:23:35:5a:1a:fe:0f:59:10:c6:cf:
0b:6e:39:94:ac:e8:1f:60:ad:bd:43:f3:1d:c2:02:3e:9b:24:
9e:b7:c2:89:ab:8b:76:63:49:8b:80:a4:ef:c0:f7:ee:b2:71:
57:01:3c:fd:c0:bd:7d:f7:26:54:41:51:99:1f:56:a6:43:cb:
47:51:fc:e9:e0:49:75:bd:84:a3:d5:c4:fd:b8:0c:77:87:87:
a2:20:ce:48:9d:6c:90:21:26:fd:4f:2e:a3:3e:54:a7:26:91:
bf:db:bb:22:df:75:5e:a6:0a:a6:af:f5:f0:1b:3f:45:50:5c:
a3:ed:73:01:d0:67:aa:b7:2b:41:96:a8:d6:b4:5b:cd:ce:20:
d6:ed:ac:ec:b9:4c:53:e3:75:b3:cd:8a:2d:92:d9:94:d7:eb:
5b:e7:04:10:87:42:dd:1b:86:38:31:db:78:8a:8c:b9:c5:da:
68:80:e4:13:68:4b:83:fd:46:76:13:b9:4f:34:26:16:45:18:
99:52:b1:02:13:82:2f:f4:41:af:ce:3d:1b:f6:16:a8:6c:4b:
52:9e:97:bd:4d:f1:a4:d4:06:a6:df:36:0d:24:2d:cb:d8:69:
c9:ae:1a:e3:b9:26:bd:2e:6a:81:31:f6:06:22:2e:aa:29:40:
ba:7d:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:26:20 2026 by rpki-client