Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: GibHy1uk6I6Dh0Jk0Wr1nId8dvNvdgwZJQp5LTlZdmM=
Subject key identifier: BB:9F:C5:9A:0B:68:88:72:26:AB:44:61:C7:E0:E2:56:11:4F:A6:C8
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 019D99996A779F48A632A613B9A3E46F6C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: WlS5ojL7gDl1onOWJD5o8wyANuo.roa (hash: NX+jbIhhBEnEZTj9qhHO6FgUtaMrjfCgiQz82eLbv/s=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: aFgCCQ1uVNIsPZfhN9dJfILChAMD9O297HwGwM1ylMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6a:77:9f:48:a6:32:a6:13:b9:a3:e4:6f:6c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=bb9fc59a0b68887226ab4461c7e0e256114fa6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:39:0e:69:f1:04:48:b8:9f:83:e9:c9:26:
38:24:a7:aa:1f:ed:9a:cb:8b:8c:79:d3:a7:bb:d1:
b6:31:13:1f:60:02:5f:c7:15:47:11:f4:3e:cb:4f:
f0:f6:b9:b1:47:c1:5d:15:c6:b7:15:36:d3:8d:3e:
3b:eb:cb:2a:57:af:f5:cf:f7:05:92:a2:b8:57:70:
8f:5e:82:f5:92:cd:e4:2b:6f:6a:c2:4c:73:89:99:
b5:66:d0:b3:d3:0d:13:70:4e:74:c0:55:d1:cb:66:
fa:ea:71:cd:12:9d:48:7d:18:b4:58:06:b1:b0:33:
ec:32:87:47:87:13:bb:39:2b:8f:fb:59:8a:e7:42:
f2:b1:5a:49:83:71:ac:62:2c:1b:4e:51:8a:47:11:
bd:86:fe:67:1a:f4:eb:b6:57:c7:ba:fd:a4:83:72:
1f:db:0b:23:f2:e9:96:cb:c7:60:ff:92:5e:b6:d9:
ec:6c:96:52:93:33:39:92:51:e6:04:46:d0:63:9b:
ee:15:c8:da:b0:2e:c7:59:23:8d:53:b1:30:3d:51:
c1:a9:47:2a:24:17:a6:22:e1:6d:16:54:e2:77:a3:
1a:c6:53:24:a5:d6:69:38:ec:92:96:34:ca:c4:62:
b8:4d:22:4c:ea:d3:ae:ca:52:1d:d8:d1:a1:a6:95:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:C5:9A:0B:68:88:72:26:AB:44:61:C7:E0:E2:56:11:4F:A6:C8
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bd:8a:9f:d7:cc:df:2c:7b:b1:61:f1:a5:95:1e:88:89:c3:
3e:1f:b6:ca:f1:68:a3:7e:9a:4a:ff:a1:a5:6d:a2:de:e2:08:
2e:57:be:49:0b:d2:36:de:5b:c8:56:81:80:1e:10:ea:c1:2f:
9a:ca:49:74:9c:69:2f:c7:89:4b:7a:b0:11:b3:ee:51:38:f7:
b2:96:3c:8c:c6:bb:b8:a7:0a:23:69:08:91:b7:24:0a:fc:d6:
19:d5:99:1c:84:c0:2e:57:b6:b4:8e:8d:c8:ec:78:6e:7b:68:
f6:a5:91:1b:fd:cd:55:d3:20:e6:76:01:4f:d6:8f:9a:5a:eb:
3e:3c:36:ed:64:f6:91:49:a6:c1:c6:8b:87:01:88:c8:72:30:
a6:08:b5:7c:d8:c9:da:3c:39:ef:ba:e0:09:db:b8:16:d5:dc:
46:a8:83:78:2e:d1:f5:23:e0:f8:29:c1:cc:dd:2f:64:31:19:
1e:85:79:f2:23:cb:fe:a6:60:82:39:93:4a:8a:40:d0:5c:4e:
c6:c7:52:ba:08:65:e4:93:de:dd:96:da:c9:62:87:f4:0e:4c:
ab:28:8e:37:a9:f6:bf:ca:08:d1:18:bd:f9:61:92:aa:8f:71:
7f:3b:a9:d1:b1:f6:c0:0a:a8:f3:be:f7:2a:b9:0d:9b:b4:98:
1d:0a:8a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:35 2026 by rpki-client