Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: AY7zfG02tHB1FJd70nn105wT1auCXf3mc0G+a1pyM/4=
Subject key identifier: CE:2C:20:42:FA:31:EF:16:BA:C7:16:29:88:E3:E3:37:E3:60:DF:CD
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019D9CD10F6FF29A6F966E37B2D961A53D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 19:00:39 +0000
Manifest this update: Fri 17 Apr 2026 19:00:39 +0000
Manifest next update: Sat 18 Apr 2026 19:00:39 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: GW2vu9M14CpUbT1CvQq+ggAEktjTSfeYq9QHoYSUMgE=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:0f:6f:f2:9a:6f:96:6e:37:b2:d9:61:a5:3d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Apr 17 19:00:39 2026 GMT
Not After : Apr 18 19:00:39 2026 GMT
Subject: CN=ce2c2042fa31ef16bac7162988e3e337e360dfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:a3:69:dc:ae:60:a3:d4:1c:ff:a7:08:ea:
58:e2:55:e6:8f:5b:1b:03:00:2b:60:f5:c3:89:a5:
a1:4b:94:7a:9e:96:00:df:9a:37:56:72:5f:9e:4d:
d0:25:9f:ed:d2:de:00:56:5b:68:dd:b6:19:c4:e2:
42:ea:87:ca:5c:57:ea:31:71:d4:07:a1:af:39:9f:
27:de:5e:64:86:55:b8:4f:c0:fe:f8:ce:07:c8:83:
eb:23:d0:4e:97:fb:3a:42:01:14:2b:61:fa:55:d3:
f2:a8:66:fa:cd:b7:e4:bd:64:0f:92:f3:c6:1c:05:
8c:41:62:b6:68:ae:4c:1c:25:09:41:73:f2:08:8a:
06:9d:1a:fe:31:69:92:5f:88:a4:6b:b6:b0:bd:e3:
27:0d:95:d8:b6:08:5f:5e:3b:d1:c7:81:6f:1c:07:
07:9a:a2:9a:54:d9:a0:51:81:e2:24:c2:3e:77:2a:
56:3f:e5:c4:c1:8c:13:fe:8d:0c:99:11:4f:20:ef:
43:7a:f8:0f:c1:fd:5f:d7:27:f9:fc:1f:ca:94:3c:
ad:70:63:ef:4d:c5:97:73:30:3d:17:b8:76:d0:07:
3d:f5:4c:af:24:c0:6d:8e:e4:d7:2e:a8:35:f5:7c:
7c:ac:27:96:65:1c:9d:fb:b8:77:e1:ad:eb:7a:28:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:20:42:FA:31:EF:16:BA:C7:16:29:88:E3:E3:37:E3:60:DF:CD
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:2d:e8:b5:5f:77:2a:5d:54:a1:2a:74:32:a5:65:7b:62:e2:
46:5c:69:5b:0e:a3:1a:a8:04:35:c3:8c:2b:9d:dc:60:9a:87:
84:b9:d3:e4:00:c3:65:01:3f:bb:4f:f0:c9:48:c4:b1:51:32:
eb:14:ce:2f:b8:77:c9:b2:fb:b7:9c:28:b0:53:7d:bf:ae:91:
fb:43:f2:65:45:06:4a:95:9d:de:26:d5:ae:5e:17:cc:95:f2:
79:a5:b4:f5:3f:bc:30:73:16:71:63:2c:93:7e:a5:a4:c4:4a:
ca:2b:47:61:94:c8:1e:bc:ae:32:aa:87:b9:e8:8d:17:24:c4:
17:b5:e0:41:0b:b5:db:94:dd:70:37:e5:c1:c4:38:3c:56:e8:
24:1e:a5:3f:63:ab:e9:b7:d3:ca:b2:08:05:43:29:b8:44:18:
c7:d4:c9:b5:d4:d1:72:fe:e8:50:7c:3b:88:32:79:eb:45:ed:
43:42:7d:14:f7:22:01:10:2e:03:d8:5b:40:47:ca:ef:ea:5e:
f4:d4:57:44:b3:d2:2a:e8:f2:e3:14:94:c0:99:a0:9d:5f:a7:
7f:d0:84:54:0b:f6:f9:35:ea:38:8c:88:06:c5:62:76:64:ed:
d7:ca:fa:ac:59:31:b3:25:0d:c0:16:b8:ed:4a:7f:e3:88:95:
e8:6e:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:43 2026 by rpki-client