Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: PyA7aYynLv3XKXp4Ftthi0XHKSdl/5mujh7ldx2gyuc=
Subject key identifier: 7E:6C:E9:9C:7D:33:DA:A4:36:D7:36:99:92:07:23:FC:F9:A9:7E:EB
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019D9EC015729881500317A0F94A0C1328E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 18C8
Signing time: Sat 18 Apr 2026 04:01:21 +0000
Manifest this update: Sat 18 Apr 2026 04:01:21 +0000
Manifest next update: Sun 19 Apr 2026 04:01:21 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: EfUdMOwlAUkFNdmVj+JlGRuNk8prRScjM/+RcoRfnOM=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:c0:15:72:98:81:50:03:17:a0:f9:4a:0c:13:28:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Apr 18 04:01:21 2026 GMT
Not After : Apr 19 04:01:21 2026 GMT
Subject: CN=7e6ce99c7d33daa436d73699920723fcf9a97eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:64:68:37:40:f1:48:83:b6:80:f6:aa:8a:
c6:0f:4e:a0:01:0b:ff:1b:2c:d9:bf:fb:8c:eb:1d:
9a:eb:1a:09:ef:9d:8e:25:50:ac:a3:6c:1e:af:07:
2a:62:61:62:89:0a:95:2a:5a:12:e5:41:14:8a:57:
a4:fd:a8:a4:13:93:92:0c:8e:22:ed:66:a9:13:87:
99:d0:ee:83:e6:42:dd:4c:7a:8a:d6:1a:a1:e2:0f:
d6:1f:a1:42:39:48:13:47:90:ce:11:6b:f4:fc:f0:
f1:d7:4a:73:30:97:60:1a:16:70:9c:fa:4a:e1:b1:
9a:14:27:d3:97:0b:f2:67:53:f0:1d:14:45:64:85:
a2:e6:75:c4:7e:a9:6a:52:59:8e:92:0d:65:9b:3f:
95:d0:9a:33:8c:1c:4c:69:a0:87:2d:0b:7f:c6:a2:
42:a2:5c:44:26:ab:e3:4d:23:a2:f4:fb:06:36:60:
26:42:9b:d8:70:27:3c:a9:02:5a:09:28:a9:00:a4:
1d:97:10:b6:38:ba:c4:2e:c2:7d:fd:de:9b:8d:70:
a4:2e:71:80:24:14:7a:6f:8c:21:47:ca:d1:8c:8f:
25:87:b7:4f:b0:25:57:b0:5e:ee:a5:00:d6:ba:91:
8a:2f:79:3e:f0:70:a2:fb:66:19:4b:6d:0f:e3:e4:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6C:E9:9C:7D:33:DA:A4:36:D7:36:99:92:07:23:FC:F9:A9:7E:EB
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b4:27:e2:eb:ae:e6:d2:0e:bd:70:8a:6f:f2:6a:27:1d:96:
ba:8a:d6:07:03:3c:17:c9:01:c2:95:bb:9c:ba:60:d5:c6:3b:
b0:27:a6:99:b6:a0:aa:b4:2f:3f:82:c2:bd:3f:30:72:eb:31:
06:0c:3e:6c:5d:33:b3:a5:70:66:e0:49:f1:79:9d:32:f7:25:
d6:c8:0e:19:4c:03:11:dd:5e:63:b1:c1:90:c9:fa:84:87:11:
6d:06:0f:87:c8:32:bc:0b:ad:62:0b:7d:73:3a:5e:57:0b:2e:
f0:f2:be:1a:83:90:46:e6:73:fd:02:b4:13:43:95:bc:19:03:
da:da:33:19:0a:d6:0d:8d:24:b2:71:8c:5b:3e:d1:e5:c1:4c:
c5:5e:e4:ad:ff:a2:38:81:28:20:ab:df:5f:67:3d:07:f8:b5:
9e:3a:10:9f:fc:55:ef:eb:19:d7:35:f0:b2:fd:49:41:61:f1:
6d:8a:e3:0a:25:15:83:d8:9a:28:d6:12:7f:8b:ec:09:34:9d:
da:8e:dc:ac:7d:4b:6f:c5:35:d7:e3:52:77:a6:ea:7a:1c:3d:
f9:be:d6:f4:eb:33:47:a4:73:28:3b:72:2f:19:94:19:4e:ae:
75:cb:52:36:18:55:d6:07:c5:c0:e2:ed:be:61:9e:f3:ab:61:
6f:b6:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:07:27 2026 by rpki-client