Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: 5D7Nsn5+QDlZgQyjMD7mD6MmHxaaRwZDnXM+6KOy4ec=
Subject key identifier: A9:FD:24:31:C6:CB:B7:EA:18:CF:CC:CE:A1:73:12:4F:7B:ED:37:FC
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 019D992B892E06FAD32181CD0A278FFCF3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 07A2
Signing time: Fri 17 Apr 2026 02:01:00 +0000
Manifest this update: Fri 17 Apr 2026 02:01:00 +0000
Manifest next update: Sat 18 Apr 2026 02:01:00 +0000
Files and hashes: 1: 1-sDuDT5PyDWTrrUoYprkpEdUV2I.roa (hash: eAjODYNfh7Im2wLs/xUeEWebYtl3ElP2ajyZCTGNlyc=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: txl+5Ubu/DOcpDYECJ0o2RYDjvfBuzpunYfysRhw5EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:89:2e:06:fa:d3:21:81:cd:0a:27:8f:fc:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Apr 17 02:01:00 2026 GMT
Not After : Apr 18 02:01:00 2026 GMT
Subject: CN=a9fd2431c6cbb7ea18cfcccea173124f7bed37fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:c4:be:74:df:46:63:b7:78:ce:8d:10:1e:
0d:5f:84:83:5a:d1:cd:fc:ef:3c:82:be:b5:25:67:
23:58:c2:fc:9f:c8:79:03:05:af:52:a5:e8:b1:a2:
44:6d:cb:25:25:be:20:c2:ab:3f:2f:97:7d:4c:58:
90:1a:cb:05:95:b5:2a:a3:14:47:85:03:ae:6f:e7:
60:c5:65:71:1f:5a:50:c3:42:6d:c0:80:02:f0:85:
6e:0d:70:3a:10:ec:be:77:42:8e:37:25:d1:40:53:
07:69:1a:10:51:0b:3b:c6:82:9e:5e:45:a4:1a:02:
9b:b2:5d:9c:42:97:49:68:bc:df:e7:25:42:69:e1:
1a:16:2b:64:68:34:b2:c9:c3:6b:93:3b:dd:89:b1:
57:c3:5a:ab:28:bc:12:4e:24:f7:70:20:96:47:d2:
2f:53:4e:4f:df:9c:be:80:23:fe:63:d0:c6:e7:7d:
82:a4:de:7b:e7:c4:9d:a5:16:31:0a:18:bd:43:6d:
4a:99:21:d7:b3:f1:db:4c:e6:dc:6d:79:a5:0c:c6:
fc:12:76:48:4f:d0:28:69:7a:e1:7e:ca:e6:2d:52:
9e:c6:07:7a:35:b2:4c:db:ed:b1:3e:47:a8:e7:32:
a5:8f:fd:03:44:5a:fe:72:43:66:71:09:ca:fa:23:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:24:31:C6:CB:B7:EA:18:CF:CC:CE:A1:73:12:4F:7B:ED:37:FC
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:39:31:d8:03:a1:4b:90:15:53:2e:a8:15:0f:7d:cc:4e:30:
9f:20:d4:ec:30:99:57:fe:11:8f:3b:4e:71:e7:26:94:f6:72:
20:ac:93:f6:8a:99:2b:10:7d:0b:61:73:f8:d0:f6:d0:ea:c6:
46:57:7a:8d:fd:b2:8b:df:64:aa:85:31:aa:cd:65:ff:81:65:
d3:4f:ea:fa:6c:ee:7c:94:48:ee:83:48:e3:43:47:b0:3d:4a:
52:a6:67:80:5d:de:34:80:7c:46:fc:02:b9:36:b7:f4:9c:17:
13:99:af:6b:24:d2:53:2e:50:d4:dc:a1:57:52:e7:97:d6:aa:
da:ed:cc:0e:b9:6c:e6:9b:12:d1:d9:cd:20:4b:d4:1b:6d:24:
a7:f8:91:ae:51:79:6b:5e:34:51:2c:24:8d:6f:4e:fb:c4:68:
37:81:76:5e:c8:3d:fe:3d:c4:68:2c:11:2b:2e:db:b4:06:de:
57:94:66:13:44:54:dc:89:7f:47:25:2e:78:ba:ba:a7:67:4e:
a2:5d:14:a3:38:ce:1c:84:69:72:c4:38:b0:7c:57:1b:d7:47:
25:8f:46:01:10:80:fa:4f:d6:ab:fc:e1:2d:d8:be:0c:53:91:
94:38:a7:96:64:88:8e:6b:08:0e:1f:9a:52:8b:75:63:0f:22:
43:f6:a4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:05 2026 by rpki-client