Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: UO8Dnj+l87ecyiQyhqovSfUeZ6Mm7LEqIhNOHpZi9CQ=
Subject key identifier: 8C:75:DF:B2:ED:4A:ED:AD:AC:D4:1F:9F:99:87:81:25:67:3E:5A:34
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 019D9BBEE6683D393A75B55DD79B1BEBB46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 05AA
Signing time: Fri 17 Apr 2026 14:01:12 +0000
Manifest this update: Fri 17 Apr 2026 14:01:12 +0000
Manifest next update: Sat 18 Apr 2026 14:01:12 +0000
Files and hashes: 1: U7czUOTZqayV5F4Km_Oxj_WlDUo.roa (hash: WcGm9+GdN6IqYMN7rk3gbjv/CZUu9hkDi4qO4kHYeVw=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: Z46Zi+lJ4Yw+QCCSPtFsxipRMEoFxG/jtadPsauo68o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:e6:68:3d:39:3a:75:b5:5d:d7:9b:1b:eb:b4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Apr 17 14:01:12 2026 GMT
Not After : Apr 18 14:01:12 2026 GMT
Subject: CN=8c75dfb2ed4aedadacd41f9f99878125673e5a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:aa:1d:76:b6:b7:d6:a7:ec:1b:ec:d6:b3:c0:
a5:ae:d4:d1:b0:78:78:b8:6e:7d:e8:84:ae:21:d7:
b6:35:3c:28:39:ee:ed:e4:8d:8b:32:3a:85:b0:dd:
d2:5d:a2:c2:53:b9:d5:58:5d:c0:31:34:87:81:99:
a8:ce:0e:93:92:41:09:ce:88:b6:03:b1:3c:6d:69:
88:bc:0a:ca:da:5d:36:74:3d:65:fc:57:a7:83:9f:
c8:49:aa:95:11:95:99:a2:b4:0c:79:4a:df:05:9a:
20:e8:6d:d3:89:d6:ef:93:ad:97:99:09:30:e6:21:
fd:66:79:42:9d:5b:f0:84:c0:66:ec:b7:ed:46:a9:
27:6f:65:55:f9:d0:e7:8d:f6:ba:7c:e4:ac:f7:ea:
57:39:f7:97:55:4c:ee:af:c3:67:7a:be:10:5a:e9:
07:f5:0d:b3:eb:83:b2:b6:77:85:3f:ce:a4:e4:d8:
9b:e0:a3:70:79:39:d4:7d:c7:3c:ef:a3:8b:1c:87:
f6:6e:c3:ca:2f:f9:44:64:a8:60:2d:90:3a:f8:93:
af:27:7f:de:f8:d8:0a:2e:73:6c:b0:ca:a1:90:8f:
f1:fc:9b:f8:d0:90:6c:bb:f7:0a:cc:d7:59:00:cc:
ff:29:79:f2:a7:92:2b:ce:55:d3:ac:65:1a:b6:2c:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:75:DF:B2:ED:4A:ED:AD:AC:D4:1F:9F:99:87:81:25:67:3E:5A:34
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a8:c7:56:0b:b9:89:d4:7f:9d:c5:e4:94:c6:51:3b:a4:21:
13:8d:58:35:db:90:df:17:f0:90:26:0f:a6:32:77:c1:76:bf:
5e:6d:eb:89:33:0b:da:d5:f6:c2:57:fb:da:18:7c:49:d5:fa:
cb:cf:2a:9a:9e:c1:85:f0:f2:4b:35:f0:e1:a2:71:1c:3b:8a:
75:38:1f:9e:bf:44:fc:f3:33:f8:c6:3f:64:cf:bb:32:02:c0:
d4:33:e3:90:59:c5:6d:52:1a:99:fa:19:15:dd:dd:a7:75:58:
34:de:b2:d5:7e:21:9a:9d:9e:19:00:d5:32:74:23:10:11:cb:
d8:96:bc:1b:95:df:8b:1c:c6:12:90:63:d0:ba:18:36:4c:48:
b8:e3:9f:4f:2e:20:45:21:f3:b3:f7:15:78:92:ee:4f:9f:b9:
3c:1a:41:82:a9:8d:89:06:bb:23:5d:a8:85:b2:85:d2:2b:29:
ac:23:f8:d6:2f:3d:4e:b3:87:27:b1:87:69:69:be:8f:8c:7f:
99:3d:ae:ea:92:16:e9:9a:60:e7:c5:01:2f:f2:03:af:70:c0:
49:d4:bd:f7:5c:2e:47:be:f5:51:7b:32:32:74:84:72:0a:f0:
63:75:99:16:f3:72:54:7d:d8:23:3d:91:cb:b1:b2:2d:41:92:
e8:ed:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:01 2026 by rpki-client