Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier: A4cEQjtGAnh/PC9mBzdgDaQe5DbVJYfgXDH+ev1GGv8=
Subject key identifier: 80:78:E8:57:A9:E5:C3:23:68:4C:1A:A8:61:85:D8:A0:89:61:DB:CB
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 019D984FF03957AAA5BC56AAF5E5D02E9EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:01:08 +0000
Manifest this update: Thu 16 Apr 2026 22:01:08 +0000
Manifest next update: Fri 17 Apr 2026 22:01:08 +0000
Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: DLtLKI3LhZcIs6POv9Xcb6/ivwwa5K6XxClEv9ftJ5U=)
2: 25O7M2UWZLtjZfht3TvmhhoKUbU.roa (hash: aHZMolfVFoYqPERvCPULtiENfnmx30XYIbMKIT0hRPE=)
3: DdN7vkJnOB--YPWssHLoFQourZw.roa (hash: 4Xwtg1/EpdhFY06tPduHwk9/msCJ+le6Q0TbeFIOaTA=)
4: ik9bQHA3wdhcXWdy4pApX4ViEtA.roa (hash: YUhchzwns71ZrkZmZzkm82sDpa46jMSA30HHNbNFaao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f0:39:57:aa:a5:bc:56:aa:f5:e5:d0:2e:9e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: Apr 16 22:01:08 2026 GMT
Not After : Apr 17 22:01:08 2026 GMT
Subject: CN=8078e857a9e5c323684c1aa86185d8a08961dbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:7a:a8:5b:35:5c:31:b0:a9:cd:74:df:51:
e6:4a:dc:52:ab:ed:74:3f:0e:17:c0:d5:71:b0:8a:
27:aa:48:db:f7:58:e0:50:09:19:37:3c:a9:68:1c:
8e:0e:e5:69:46:62:e3:0e:a7:b8:e3:fd:d0:af:71:
52:55:70:15:11:f5:4d:b1:bc:68:71:3d:45:16:a1:
4b:ae:75:d9:95:b0:ec:c2:c3:33:b3:8d:87:3b:e5:
bb:81:bc:af:05:bd:24:c3:9d:13:f7:fc:6d:03:a0:
ca:02:58:b4:10:04:f1:32:36:64:20:cf:7a:91:b0:
64:eb:27:d6:5c:41:e2:6b:ca:06:4d:8a:ba:9f:4f:
04:0d:c5:11:1a:7d:c4:e7:6d:26:f1:d7:62:4f:60:
c4:a2:95:f9:b4:fc:6f:fa:87:3d:5c:a5:87:77:78:
1d:00:5f:fb:9c:40:29:ff:2b:79:8a:03:0b:86:5c:
6b:73:e2:81:d8:13:79:f2:b7:2d:fc:e3:81:38:45:
e4:a4:b0:27:93:38:b7:83:74:ac:09:63:f2:f7:8d:
ed:89:13:b8:7f:2d:0b:aa:bf:ac:ad:d2:54:a4:6f:
d1:36:6c:67:58:92:32:f3:d5:14:e9:43:2d:bf:7c:
6b:b8:a4:f3:f6:ad:e8:2b:fe:6e:39:53:fe:ee:61:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:78:E8:57:A9:E5:C3:23:68:4C:1A:A8:61:85:D8:A0:89:61:DB:CB
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:96:bd:d4:62:61:28:13:a3:e4:78:8d:cc:ba:34:02:49:75:
28:08:b4:5d:16:16:ab:ed:71:4f:79:61:c4:81:3a:98:d7:2e:
20:7c:4b:2b:c6:59:89:e8:ad:fe:e6:4b:b2:39:b3:39:12:7c:
63:1d:49:02:8e:9b:e5:7e:10:f2:0a:01:f6:44:92:f9:9f:6e:
be:77:22:44:90:ac:dd:0e:1f:35:65:9d:77:64:c6:ca:68:99:
34:d5:ec:95:e6:26:2d:d1:ce:10:f6:60:9c:5e:0c:a0:3d:30:
47:72:e5:dd:fe:19:20:dc:4c:49:9a:a8:ab:86:d7:37:35:cc:
e9:f0:28:2d:b1:92:bb:2f:b9:ce:5a:ed:ff:c9:a4:93:3f:a4:
7e:f0:ff:23:e6:cb:4d:d2:ed:95:80:a1:48:99:d7:d8:5f:a3:
d9:62:78:ba:b3:5f:e5:ac:b7:43:2f:45:97:5f:24:ea:7a:c0:
eb:94:bc:13:9e:3a:81:53:5b:43:aa:2e:6a:2d:38:5c:f1:23:
49:96:6c:5f:80:79:04:09:74:1e:51:ea:51:19:1c:1b:24:7c:
c7:65:69:09:5d:b7:59:e6:1a:fa:f2:7f:d2:1e:e9:b8:23:0e:
ed:1d:cb:bf:53:5b:1c:24:70:39:2c:3a:65:be:8b:e0:3a:67:
e6:b4:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:32 2026 by rpki-client