Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: +fiRrI3VpntmwJ0neDK7QswW3Q77xMSsXyvEwyc8sJQ=
Subject key identifier: D7:87:32:FA:A3:E7:1D:4B:CF:A4:15:9C:86:B2:F2:EC:C9:5D:9D:28
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 019D99991C594A49D87D399C5036894263F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:00:41 +0000
Manifest this update: Fri 17 Apr 2026 04:00:41 +0000
Manifest next update: Sat 18 Apr 2026 04:00:41 +0000
Files and hashes: 1: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: rtGGSLCdiW+Gt32NUIrHesD2KvGcmEzRJeABUF04rcQ=)
2: tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa (hash: oFn0sS2KIEC+fcfgS1boOcIBmwWzk50WRGkvZp+ryXo=)
3: wga_WdR_8QvLv6SYCAFbkFgE4IY.roa (hash: 1WShRNTFDIi2o5zhM9Z4CcfauIXDzI1Kphz/pH1YsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1c:59:4a:49:d8:7d:39:9c:50:36:89:42:63:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Apr 17 04:00:41 2026 GMT
Not After : Apr 18 04:00:41 2026 GMT
Subject: CN=d78732faa3e71d4bcfa4159c86b2f2ecc95d9d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:c5:ba:f5:66:d5:34:02:fb:d9:70:7e:56:
5c:6b:17:d7:96:0d:a5:80:48:23:62:fb:28:57:f5:
61:b0:9f:61:27:f6:31:e7:b0:ab:db:a0:6b:90:ed:
f1:02:51:d2:34:8d:88:b8:28:58:8b:46:31:c5:b7:
f1:ce:32:74:62:12:90:f1:e2:6a:01:e3:7b:4c:cd:
2c:19:20:48:2f:19:be:42:3a:05:89:29:74:6f:2c:
aa:02:9c:44:eb:6c:80:5c:cf:77:80:74:c8:95:f5:
16:03:55:d5:dc:b1:cc:e0:53:6c:98:22:54:54:cc:
f1:f6:55:0c:3e:9b:74:7b:6f:b9:9f:cc:ab:55:51:
0a:da:44:7a:44:cd:8e:2f:bc:39:d8:cc:ef:de:97:
44:49:2c:c2:be:c1:f7:19:b5:eb:a5:63:ca:aa:a9:
3e:ae:c6:52:d0:75:cd:6f:81:92:50:f3:70:dd:b5:
a9:3f:6c:fd:b7:c5:47:0e:33:9a:86:4f:42:71:d3:
a7:ed:9c:c5:9c:92:c3:75:27:21:b3:ec:40:98:c7:
a6:8d:2a:18:e3:fb:00:8e:42:c9:30:d1:8d:38:fd:
0e:f6:b3:bd:99:4b:de:1a:89:b0:48:9d:65:35:0c:
8f:cd:f7:dc:fe:5f:30:c9:32:f7:57:62:b2:fd:f4:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:87:32:FA:A3:E7:1D:4B:CF:A4:15:9C:86:B2:F2:EC:C9:5D:9D:28
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c6:03:e4:e5:98:5b:97:ce:14:6d:78:1d:70:34:96:b5:a7:
07:b8:60:a0:3d:d3:06:e0:97:17:fb:cd:0d:0c:1f:3d:4c:c9:
9d:a2:fc:08:a2:81:1d:99:3f:84:0f:e2:6a:87:fa:23:6c:bc:
73:73:a4:06:20:4a:35:6d:2b:ed:f0:af:f7:03:1b:e3:37:b9:
53:6a:5f:a8:c1:4a:52:58:ea:1a:d0:77:d0:75:b9:79:63:7f:
a1:e7:a3:dd:ee:85:6e:1e:58:36:8d:67:0f:75:f1:05:b8:81:
9c:55:f1:d8:26:d4:f7:94:bc:18:37:9b:72:9d:7a:b2:32:f7:
54:3c:91:92:44:13:99:38:f4:06:e5:3a:ca:01:db:ab:20:d2:
d3:be:c0:ad:7b:f4:1b:07:72:18:d1:25:8c:c9:57:93:46:8d:
b0:ce:16:ae:e1:8c:7b:b0:d7:79:14:28:6c:84:68:8c:f7:d5:
3b:a0:6d:7c:96:de:2f:b8:a3:1a:c4:cc:01:fe:76:93:eb:4c:
23:d8:01:f1:12:bf:40:23:bc:56:e1:44:d1:43:14:df:b9:d3:
fc:9c:f6:a3:03:4c:e0:8e:49:11:90:3d:23:b7:da:7c:a6:8b:
3d:ac:bb:d4:fd:f4:47:0a:e3:b5:eb:50:7e:b7:63:12:e4:0f:
07:b6:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:48 2026 by rpki-client