Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: 2N5xsgqjhhXdabjl6OB6UCDsa+9xS1mHtAehk3Aqjdw=
Subject key identifier: EA:D9:08:9D:CD:A0:0F:B7:60:D0:33:C1:D1:AC:0E:D0:7E:54:B1:D8
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019D992BA4843BE31A1E82616D2BF6C50213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 02:01:07 +0000
Manifest this update: Fri 17 Apr 2026 02:01:07 +0000
Manifest next update: Sat 18 Apr 2026 02:01:07 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: gfOXl+uSEY5n93L3OHDsO+lBBm9+w/pdAaeFthwxTK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a4:84:3b:e3:1a:1e:82:61:6d:2b:f6:c5:02:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Apr 17 02:01:07 2026 GMT
Not After : Apr 18 02:01:07 2026 GMT
Subject: CN=ead9089dcda00fb760d033c1d1ac0ed07e54b1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:b8:d1:ed:af:67:23:a6:3c:51:e2:b3:53:
a6:95:4c:f9:5a:7a:fb:51:9b:f2:21:95:7d:76:66:
56:1f:55:50:eb:7b:3f:c9:bd:1f:f9:e9:f1:1f:2b:
c6:c6:16:d2:1e:c0:cd:28:d8:99:90:ed:9d:0e:e7:
e1:2c:af:64:b1:73:0b:b3:4f:a9:fc:6f:4e:c5:54:
4d:39:2e:25:37:d6:e5:12:f2:ac:39:8f:33:c1:b1:
c5:68:c1:f3:bb:90:17:fe:e2:82:1e:fb:bd:98:61:
6a:5f:a9:40:0e:eb:f1:d5:4b:19:b3:4c:26:88:d7:
d7:12:dc:d0:9f:8b:8b:d4:53:47:81:fd:aa:44:66:
bf:01:70:77:b4:3d:45:c9:0f:3a:78:9a:c9:d7:d6:
c0:8c:79:94:83:56:90:cb:84:0b:c8:2c:f9:98:ae:
f4:2b:b7:2d:22:cb:87:48:8d:ca:6c:dc:89:c0:c8:
b2:78:99:14:70:f2:1d:f7:c4:b0:52:35:4c:db:33:
46:a9:83:2d:6e:be:fd:26:99:2d:2c:a9:7b:a3:13:
75:41:0b:a5:56:10:4a:53:96:ef:90:52:98:e6:bc:
b9:fb:ea:df:cb:9e:c7:c6:e7:49:5b:8e:6d:2d:10:
1c:fb:c0:d0:92:cb:7d:af:8d:6a:44:7a:c6:c0:45:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D9:08:9D:CD:A0:0F:B7:60:D0:33:C1:D1:AC:0E:D0:7E:54:B1:D8
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:09:3a:83:93:7d:50:7a:42:b9:b8:0a:cb:b0:21:fa:7b:da:
c7:2a:fa:de:42:31:f9:d5:78:0b:83:80:05:02:ba:79:30:5d:
67:a5:a3:ee:1e:fa:ad:e6:9a:c7:ee:f9:b9:b7:66:a9:bf:1c:
d9:1c:dd:27:cf:d5:a9:26:62:37:f5:96:c7:de:5a:b7:ef:45:
56:e5:eb:67:b2:b8:ab:a6:43:0e:6c:3d:c6:56:8d:f4:15:4d:
03:59:6f:b0:b6:53:c2:39:87:42:95:d9:99:fb:13:11:15:d0:
ea:9a:99:4d:17:ef:07:a3:7c:c2:24:fd:81:20:4f:04:5e:6b:
f0:2c:a1:8c:2e:92:da:a7:6f:07:ea:c3:f1:d0:07:ee:90:88:
69:83:2e:10:f7:0f:ff:ed:55:e4:11:fc:a9:ba:bf:40:07:3a:
21:91:93:bf:5a:f8:fa:08:9f:1e:79:75:8d:ec:8e:7f:b7:8d:
70:32:0a:52:27:39:08:29:e5:8c:be:7e:b2:9b:b7:7d:90:76:
a9:6c:e8:db:fb:96:fe:fe:bf:3a:a8:e6:14:9d:f8:d0:47:09:
77:3d:84:7d:63:c0:21:4f:28:df:6a:6b:d6:76:7b:39:92:b3:
17:9d:1b:5c:53:0f:4a:d7:5c:50:b7:c8:40:d7:a4:ec:d8:18:
f7:fd:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:34 2026 by rpki-client