Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: i9PmahFI7Gx/xSOYzcA7aNIla+jR70UW92nyJoScJyA=
Subject key identifier: 38:FD:7B:32:28:8A:5F:4B:75:75:8B:C6:13:D4:D7:9E:83:50:23:BB
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019D97E2583619645ED5CB955DB1E73C493C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1560
Signing time: Thu 16 Apr 2026 20:01:26 +0000
Manifest this update: Thu 16 Apr 2026 20:01:26 +0000
Manifest next update: Fri 17 Apr 2026 20:01:26 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: Bh46FZu7zA+ONBe3jOMyKOcK5BfPYAe5BQUiszTpnpU=)
2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:58:36:19:64:5e:d5:cb:95:5d:b1:e7:3c:49:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Apr 16 20:01:26 2026 GMT
Not After : Apr 17 20:01:26 2026 GMT
Subject: CN=38fd7b32288a5f4b75758bc613d4d79e835023bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:73:ad:8c:4c:5e:dc:31:eb:48:21:c0:df:
ed:05:1c:a0:6a:bb:70:24:50:51:49:3a:5c:19:0d:
ec:66:de:de:2f:1b:25:48:66:99:d1:a8:68:1e:9c:
06:2e:b3:67:53:44:6c:e5:32:f9:b4:c9:98:93:84:
2f:d4:1c:4e:92:b4:e0:d5:06:9f:b8:07:db:77:89:
3d:df:7a:7e:73:37:ac:1c:7c:ef:80:33:0c:01:8e:
1d:d1:90:2d:a2:8e:63:49:68:fe:05:9b:13:2b:40:
33:46:95:03:2b:37:2e:f4:1e:63:b4:d8:32:7a:de:
f1:f1:4b:a0:6e:5a:64:66:8d:0a:bd:00:cf:24:41:
86:44:0b:e4:b4:96:34:90:be:cc:f1:be:ed:4c:41:
64:5d:ef:47:d5:50:72:40:de:09:59:54:21:84:14:
d2:2a:49:9e:7d:9c:79:18:aa:d8:28:74:c3:69:d8:
78:af:d0:6f:7a:0c:4e:f0:88:13:85:21:ee:6d:3f:
8a:aa:f4:f5:11:18:fd:cd:f1:06:f4:bf:1a:c5:0c:
6c:ea:44:64:d7:52:97:33:ee:e8:e1:56:16:f5:60:
08:a9:e7:83:c9:42:36:0b:bf:50:35:61:d8:85:71:
d9:1c:b8:f8:89:08:08:48:06:ec:f6:3e:4e:54:8d:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FD:7B:32:28:8A:5F:4B:75:75:8B:C6:13:D4:D7:9E:83:50:23:BB
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3b:7e:19:63:0c:fd:3c:d1:ec:f9:34:93:42:1e:44:39:99:
b4:f7:18:b4:ff:a6:48:b5:d4:7c:c1:30:8a:19:50:63:5b:f4:
aa:42:83:50:4a:cb:e3:7a:8b:2b:ff:45:bb:e7:db:88:a6:f3:
90:0f:a8:46:7c:31:34:fa:bc:4e:ae:49:ad:03:4b:fb:4d:31:
5d:8e:e2:a5:4f:2f:f1:7f:57:2f:a8:2e:07:02:ae:8c:a9:24:
19:f1:45:72:44:2f:fb:9e:c0:f2:32:21:03:d6:26:ce:c9:ca:
c4:2e:24:4d:19:c3:f1:d7:44:47:8c:3e:6e:dc:59:77:d3:07:
56:7c:ab:a1:18:04:f5:2e:04:4f:7b:5b:aa:83:a9:05:85:5c:
fe:76:c5:3c:7e:c0:09:8f:49:34:94:19:d1:bc:d6:62:39:3c:
08:bf:14:b7:9d:95:58:09:83:0f:7a:ec:19:d2:db:49:c9:7b:
13:c3:ea:42:aa:d4:c6:39:f8:cd:b1:fb:5a:1a:7a:0e:43:04:
42:8c:b0:e3:bd:28:17:93:dd:ec:ff:dc:88:ac:7d:db:e1:59:
98:50:6c:c7:07:5c:e1:80:65:df:fc:55:04:f5:02:91:31:32:
a2:6c:a0:dc:56:1f:41:e2:c1:c2:aa:c3:b8:66:57:f6:65:11:
5b:bb:68:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4lg2GWRe1cuVXbHnPEk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNDk2NTg0ZTVjZjM5YjU2ODc0ZGU4ZGM3N2FhM2E2ZmY5
ZThhMWUwHhcNMjYwNDE2MjAwMTI2WhcNMjYwNDE3MjAwMTI2WjAzMTEwLwYDVQQD
EygzOGZkN2IzMjI4OGE1ZjRiNzU3NThiYzYxM2Q0ZDc5ZTgzNTAyM2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY5zrYxMXtwx60ghwN/tBRygartw
JFBRSTpcGQ3sZt7eLxslSGaZ0ahoHpwGLrNnU0Rs5TL5tMmYk4Qv1BxOkrTg1Qaf
uAfbd4k933p+czesHHzvgDMMAY4d0ZAtoo5jSWj+BZsTK0AzRpUDKzcu9B5jtNgy
et7x8UugblpkZo0KvQDPJEGGRAvktJY0kL7M8b7tTEFkXe9H1VByQN4JWVQhhBTS
KkmefZx5GKrYKHTDadh4r9BvegxO8IgThSHubT+KqvT1ERj9zfEG9L8axQxs6kRk
11KXM+7o4VYW9WAIqeeDyUI2C79QNWHYhXHZHLj4iQgISAbs9j5OVI17LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj9ezIoil9LdXWLxhPU156DUCO7MB8GA1UdIwQY
MBaAFENJZYTlzzm1aHTejcd6o6b/nooeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEt
ZTJjOTIyOGFhYzUzLzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEtZTJjOTIyOGFhYzUz
LzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTt+GWMM
/TzR7Pk0k0IeRDmZtPcYtP+mSLXUfMEwihlQY1v0qkKDUErL43qLK/9Fu+fbiKbz
kA+oRnwxNPq8Tq5JrQNL+00xXY7ipU8v8X9XL6guBwKujKkkGfFFckQv+57A8jIh
A9YmzsnKxC4kTRnD8ddER4w+btxZd9MHVnyroRgE9S4ET3tbqoOpBYVc/nbFPH7A
CY9JNJQZ0bzWYjk8CL8Ut52VWAmDD3rsGdLbScl7E8PqQqrUxjn4zbH7Whp6DkME
Qoyw470oF5Pd7P/ciKx92+FZmFBsxwdc4YBl3/xVBPUCkTEyomyg3FYfQeLBwqrD
uGZX9mURW7to1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:10:32 2026 by rpki-client