Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
File: qhWXLPu3b6dqmjPaeXxnM8NItP4.mft (raw, json)
Hash identifier: QvgftGJHEfEyzATn+WAEke1KTGdV/uen222vBG8tL0I=
Subject key identifier: 85:5E:E3:D7:57:29:F5:EE:3C:8D:37:5B:68:6E:EF:66:3C:CC:5B:01
Authority key identifier: AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
Certificate issuer: /CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Certificate serial: 019DA41CE488E48B53544F68E69DF177080F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
Manifest number: 59
Signing time: Sun 19 Apr 2026 05:00:50 +0000
Manifest this update: Sun 19 Apr 2026 05:00:50 +0000
Manifest next update: Mon 20 Apr 2026 05:00:50 +0000
Files and hashes: 1: jrpa6ffgl6ZLg25PBip0s0JQIn4.roa (hash: V9w3w4fEjx0PYusw02oT6lMuGBaV9qjr55iLXhK3FqQ=)
2: n33TF7CHRYuKt_cM3pOrRGh_au4.asa (hash: b1MR2hUsjJe9qzx0Hps/De/mPnNIVGi+NurVTZ29rrY=)
3: qhWXLPu3b6dqmjPaeXxnM8NItP4.crl (hash: Qh55er3QVvjai9onOgaFP3A1zZpHDKK+8iKcHI82IeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:e4:88:e4:8b:53:54:4f:68:e6:9d:f1:77:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa15972cfbb76fa76a9a33da797c6733c348b4fe
Validity
Not Before: Apr 19 05:00:50 2026 GMT
Not After : Apr 20 05:00:50 2026 GMT
Subject: CN=855ee3d75729f5ee3c8d375b686eef663ccc5b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:f3:97:ab:fe:ed:d2:47:c4:5d:e4:59:43:
eb:f5:f9:31:7b:6f:0a:a8:1d:2f:a6:96:ad:12:6b:
2b:d3:26:e1:e9:cb:0d:72:4d:fe:9a:94:88:7b:84:
b6:fe:2c:f4:97:5a:b4:97:f2:16:42:99:df:fc:37:
02:b0:83:82:8c:dc:1d:04:af:8d:33:4f:68:bb:e1:
45:22:45:5f:63:e9:df:d9:cb:2d:c7:16:bd:8c:71:
10:f4:56:e2:07:c4:20:03:1b:f4:d2:4b:82:42:33:
f7:18:dd:6b:46:c6:2d:b8:1e:d7:4e:9c:6a:29:30:
da:92:e3:99:1b:54:3e:e2:a6:88:d9:43:6f:34:c4:
9b:ec:e4:4d:9a:9a:8f:66:ab:cb:bf:d4:c0:e2:df:
e0:fd:ad:35:52:4a:c7:25:c5:0c:aa:74:c0:00:25:
a8:62:90:32:bc:67:69:ca:b9:f2:9d:31:89:0b:9f:
0d:d8:26:f6:ad:72:10:0f:23:38:a3:f1:87:bf:16:
1b:bf:57:3a:e4:6a:7c:4c:c3:ea:97:7b:a8:1b:c8:
0b:38:e1:47:99:b0:a9:d7:d3:df:13:84:a0:dc:e2:
2b:77:c3:a5:f5:24:f3:fb:d8:93:77:21:b0:7e:98:
3f:b3:03:30:2a:bb:22:87:d3:42:10:dd:c9:4a:e0:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5E:E3:D7:57:29:F5:EE:3C:8D:37:5B:68:6E:EF:66:3C:CC:5B:01
X509v3 Authority Key Identifier:
keyid:AA:15:97:2C:FB:B7:6F:A7:6A:9A:33:DA:79:7C:67:33:C3:48:B4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhWXLPu3b6dqmjPaeXxnM8NItP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a82835-123b-4532-aba6-d60d5127825d/1/qhWXLPu3b6dqmjPaeXxnM8NItP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dd:a8:11:69:d9:e2:6e:5b:3e:e5:ef:88:5d:bd:75:5e:d4:
41:d0:17:a1:35:6c:77:ac:9c:4f:d5:6e:cd:4f:54:8f:f5:f4:
92:31:a3:ce:a6:8d:79:11:37:aa:48:a0:ec:0c:ed:f5:d0:f8:
ba:fd:d2:2b:0e:65:08:c1:3c:e7:a8:1a:9c:dd:4f:23:c8:95:
1a:6d:8a:3f:f1:b5:3c:89:b9:35:5f:83:95:dd:51:61:5f:bc:
30:9a:b7:85:67:32:3b:59:20:30:7d:a7:75:59:3e:ca:ca:73:
30:09:e9:07:d9:f8:80:78:21:4b:d6:a3:9a:6e:bd:dd:34:16:
85:e8:9d:96:81:4e:39:03:d0:dc:5e:81:4f:92:f2:be:29:3e:
16:01:30:d6:90:06:12:d8:8c:b3:c4:66:c2:54:31:46:03:f1:
ad:4d:75:e5:a3:a9:f7:cc:5d:d5:f8:e6:70:c0:dc:ad:41:54:
9e:69:4c:4a:c5:76:fa:e5:12:29:3f:d5:64:07:a6:41:ec:37:
ac:e2:a2:e8:9b:45:3f:64:a9:78:09:50:ee:4e:0e:dc:92:5b:
51:9c:ab:48:7e:5d:1b:c6:08:0c:29:8f:db:12:63:51:f7:ad:
ea:dd:d2:dc:f1:3f:bb:ee:89:21:f3:aa:8b:94:e9:d1:9e:77:
1d:4c:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:36 2026 by rpki-client