Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: JTB4F+eilxBsRRw9HpsJ0ie5Z6cqthJFhusgGy3pkMg=
Subject key identifier: 33:1C:D3:B2:D2:87:CC:DD:49:27:41:A9:35:FE:BE:B4:C8:D7:6B:AB
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 019D9B87E4CF7B68536944FA20001527C889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 0723
Signing time: Fri 17 Apr 2026 13:01:07 +0000
Manifest this update: Fri 17 Apr 2026 13:01:07 +0000
Manifest next update: Sat 18 Apr 2026 13:01:07 +0000
Files and hashes: 1: aHdJjEV_MZGQhS1-oSIoUxNhu0w.roa (hash: V1XVv/qtFeaO0uUYLoorR9Olh/izTLbjNE3cg3DaNhc=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: niA7R5f01iHcZdnjfT+f6RIWC7ftUsORKlbQSg8kTvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:e4:cf:7b:68:53:69:44:fa:20:00:15:27:c8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Apr 17 13:01:07 2026 GMT
Not After : Apr 18 13:01:07 2026 GMT
Subject: CN=331cd3b2d287ccdd492741a935febeb4c8d76bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:01:b0:a6:e1:95:24:5c:43:59:da:37:b4:
2e:36:d4:c3:52:91:e8:85:7b:bc:ba:3a:42:37:47:
01:67:f3:68:7d:75:0a:a8:ac:a4:ad:cf:37:37:78:
d2:78:f1:d1:d4:21:8d:52:ef:a7:ee:14:d2:55:c6:
4c:d5:d1:49:70:9b:ee:c5:c1:74:b8:ff:4b:99:06:
15:0e:79:cf:81:3d:ab:7a:8b:ff:1b:92:54:66:c8:
6e:c4:4a:b1:0c:fe:07:fa:76:57:d8:61:da:6f:e8:
54:3d:84:10:34:12:62:80:7f:16:2c:b4:cc:27:64:
93:02:b9:97:ba:ca:7f:ec:06:9b:cb:51:32:b3:c5:
e0:2b:4e:be:42:9c:3c:52:c2:86:cf:24:4a:c2:b8:
b7:5a:72:09:06:01:83:f1:6a:32:0c:b3:b0:e7:52:
82:4a:23:2a:f3:ac:8c:45:87:cd:26:91:a9:fd:11:
ca:7f:5d:a3:2b:6b:0b:35:9d:52:91:e1:07:61:65:
a7:71:03:5e:d7:81:6e:f4:93:90:f8:9e:38:90:7d:
8e:45:15:b0:88:d1:78:0c:4c:e8:40:56:38:12:72:
81:84:34:3e:72:61:ff:9a:26:9f:85:d7:5e:5a:43:
a2:cd:34:0d:44:b8:20:54:54:f0:3b:9b:47:e5:ab:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1C:D3:B2:D2:87:CC:DD:49:27:41:A9:35:FE:BE:B4:C8:D7:6B:AB
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:14:17:fe:78:15:d6:04:77:8c:4f:44:ef:65:74:5e:24:9a:
36:33:97:f5:1b:4e:f5:fc:42:fa:d6:28:b0:41:06:72:52:d7:
e8:35:92:89:47:3c:b4:bf:a7:57:76:05:d1:d2:de:1d:cf:3b:
9c:53:79:99:6a:36:0a:90:19:87:61:f4:ec:ee:d2:ed:8f:cc:
c2:2f:60:42:7e:f6:d0:f8:df:93:85:1a:73:67:d4:9d:f5:07:
0a:88:4a:56:eb:a3:cb:f0:84:63:74:aa:5c:63:7c:73:f5:d7:
49:37:41:62:50:88:c5:d7:63:47:d1:b3:61:23:7c:1b:79:24:
d8:7d:1e:06:64:21:dc:d5:ec:02:b6:76:4f:7f:3b:a2:28:d2:
32:d3:98:ae:90:9f:81:cf:d0:de:45:08:21:ce:3f:c5:59:ee:
86:82:e1:23:cc:00:85:82:d0:89:d3:d6:2c:5e:b3:d3:62:80:
5a:a2:98:f6:ff:6f:45:a4:5d:03:43:75:9c:71:2b:d1:12:76:
0c:66:d4:4e:c0:06:f6:53:66:ac:dd:80:ea:51:4a:48:48:9e:
32:9e:d8:72:ca:49:e5:7f:3d:ca:50:67:b4:76:a8:7e:8b:51:
f1:07:b4:8c:8a:56:a5:2d:58:61:22:2c:3e:90:e4:e9:dd:86:
03:ce:dd:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh+TPe2hTaUT6IAAVJ8iJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZThlOWI0ZDhkYjk0NmJiMjBjY2Y1MTI3OTcwNzVjOGFm
ZDgzY2QwHhcNMjYwNDE3MTMwMTA3WhcNMjYwNDE4MTMwMTA3WjAzMTEwLwYDVQQD
EygzMzFjZDNiMmQyODdjY2RkNDkyNzQxYTkzNWZlYmViNGM4ZDc2YmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU4BsKbhlSRcQ1naN7QuNtTDUpHo
hXu8ujpCN0cBZ/NofXUKqKykrc83N3jSePHR1CGNUu+n7hTSVcZM1dFJcJvuxcF0
uP9LmQYVDnnPgT2reov/G5JUZshuxEqxDP4H+nZX2GHab+hUPYQQNBJigH8WLLTM
J2STArmXusp/7Aaby1Eys8XgK06+Qpw8UsKGzyRKwri3WnIJBgGD8WoyDLOw51KC
SiMq86yMRYfNJpGp/RHKf12jK2sLNZ1SkeEHYWWncQNe14Fu9JOQ+J44kH2ORRWw
iNF4DEzoQFY4EnKBhDQ+cmH/miafhddeWkOizTQNRLggVFTwO5tH5as+TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMc07LSh8zdSSdBqTX+vrTI12urMB8GA1UdIwQY
MBaAFKro6bTY25RrsgzPUSeXB1yK/YPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgt
Zjg5MDU2NzJlNTlkLzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgtZjg5MDU2NzJlNTlk
LzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxQX/ngV
1gR3jE9E72V0XiSaNjOX9RtO9fxC+tYosEEGclLX6DWSiUc8tL+nV3YF0dLeHc87
nFN5mWo2CpAZh2H07O7S7Y/Mwi9gQn720Pjfk4Uac2fUnfUHCohKVuujy/CEY3Sq
XGN8c/XXSTdBYlCIxddjR9GzYSN8G3kk2H0eBmQh3NXsArZ2T387oijSMtOYrpCf
gc/Q3kUIIc4/xVnuhoLhI8wAhYLQidPWLF6z02KAWqKY9v9vRaRdA0N1nHEr0RJ2
DGbUTsAG9lNmrN2A6lFKSEieMp7YcspJ5X89ylBntHaofotR8Qe0jIpWpS1YYSIs
PpDk6d2GA87dOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:37 2026 by rpki-client