Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: doUlcAxs3QJqhzJu6nFuy9w4WQ+E62+6l1crpm/5afg=
Subject key identifier: 28:12:9D:6F:CF:D1:2B:34:D4:5C:AB:AF:79:05:1E:37:0D:51:F2:BD
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019DCE63287E3D6CFA703A82EB7E3F6253A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 18E5
Signing time: Mon 27 Apr 2026 10:01:38 +0000
Manifest this update: Mon 27 Apr 2026 10:01:38 +0000
Manifest next update: Tue 28 Apr 2026 10:01:38 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: KbIlsIDqRCyzXWODbmFEnO06wl9BZWeROHQNcGZVSO0=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:28:7e:3d:6c:fa:70:3a:82:eb:7e:3f:62:53:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Apr 27 10:01:38 2026 GMT
Not After : Apr 28 10:01:38 2026 GMT
Subject: CN=28129d6fcfd12b34d45cabaf79051e370d51f2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:c9:90:5d:10:8e:a8:93:f3:8f:ac:a5:1a:
dd:f8:0a:61:45:41:87:e5:50:e0:ab:53:f4:de:12:
38:4d:16:ff:3d:44:0c:e6:be:4e:fd:eb:a1:0e:5d:
dd:a4:a4:86:29:bb:72:ba:fd:04:53:8b:25:a2:67:
ec:67:55:e4:fd:a8:e0:05:5e:9d:e1:b9:57:e3:00:
09:90:70:82:db:2a:30:93:bb:81:02:03:64:21:db:
77:6d:38:87:99:d9:7c:53:00:e8:43:9c:56:58:d8:
a3:c5:ee:12:43:8e:55:31:4b:f5:7d:00:99:75:f2:
70:8f:26:89:14:5b:29:88:af:53:b8:c4:7d:54:19:
c2:da:a9:f2:be:3b:0c:72:17:bc:67:86:1f:5d:a5:
15:e1:0c:f0:a0:1b:36:1e:1d:ae:c4:f2:fe:d0:85:
12:19:82:ba:00:27:df:ae:ad:87:57:b3:c3:86:c2:
e8:79:bb:62:ca:f8:c6:bb:9b:9c:b1:33:b2:91:a8:
eb:4d:9c:1c:37:e2:6b:dc:a4:9a:74:86:22:4d:88:
92:d9:d6:ee:19:7c:21:12:ad:13:e9:40:0f:ad:80:
98:ba:73:2a:2c:67:46:b6:4d:6f:32:c4:3d:00:47:
de:05:04:bc:83:59:8a:62:07:7d:b4:d1:67:ca:da:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:9D:6F:CF:D1:2B:34:D4:5C:AB:AF:79:05:1E:37:0D:51:F2:BD
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:89:d4:70:99:9a:bc:08:b6:c4:c3:f5:c6:fc:cf:77:13:be:
74:d0:48:8d:0f:f2:00:47:e8:f6:11:60:04:fb:13:c4:6f:11:
ca:06:9c:2d:c0:be:df:6c:15:a0:4a:f8:ca:55:47:92:69:c5:
98:ba:90:d4:43:14:91:5d:01:91:77:ef:45:69:50:72:c7:0c:
aa:16:9b:e5:87:0f:95:c6:7b:9c:8e:ec:36:ef:1f:46:c5:de:
3f:c5:ba:f0:a6:f1:64:12:cc:fe:2a:d8:4f:b7:9f:0e:25:46:
ec:be:c3:11:75:3c:c1:2a:83:fb:27:04:14:a3:f4:3c:d6:81:
97:33:ae:a4:d6:3f:2e:c6:77:94:c3:eb:e0:b4:b7:da:5f:cd:
43:b5:4d:cc:dc:6b:04:13:0f:7b:78:6f:9a:6f:0f:ce:ef:a9:
fa:1a:f6:4b:29:ea:68:d1:cc:dd:ca:fc:ab:4e:c1:f0:a2:5d:
43:6d:68:23:87:a1:26:0f:e7:f0:b5:75:b9:50:9c:67:e0:f8:
6e:f0:4f:8d:52:01:40:49:40:96:0f:a6:cd:0d:89:98:82:6d:
49:76:4a:9f:0c:52:30:09:42:28:91:dd:02:5b:9d:84:35:d7:
74:79:71:5f:88:61:82:a5:e6:c4:3f:5f:16:0a:a9:cf:45:c1:
45:97:34:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYyh+PWz6cDqC634/YlOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl
M2I0NjIwHhcNMjYwNDI3MTAwMTM4WhcNMjYwNDI4MTAwMTM4WjAzMTEwLwYDVQQD
EygyODEyOWQ2ZmNmZDEyYjM0ZDQ1Y2FiYWY3OTA1MWUzNzBkNTFmMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8zJkF0QjqiT84+spRrd+AphRUGH
5VDgq1P03hI4TRb/PUQM5r5O/euhDl3dpKSGKbtyuv0EU4slomfsZ1Xk/ajgBV6d
4blX4wAJkHCC2yowk7uBAgNkIdt3bTiHmdl8UwDoQ5xWWNijxe4SQ45VMUv1fQCZ
dfJwjyaJFFspiK9TuMR9VBnC2qnyvjsMche8Z4YfXaUV4QzwoBs2Hh2uxPL+0IUS
GYK6ACffrq2HV7PDhsLoebtiyvjGu5ucsTOykajrTZwcN+Jr3KSadIYiTYiS2dbu
GXwhEq0T6UAPrYCYunMqLGdGtk1vMsQ9AEfeBQS8g1mKYgd9tNFnytoz9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgSnW/P0Ss01Fyrr3kFHjcNUfK9MB8GA1UdIwQY
MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt
MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1
LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYnUcJma
vAi2xMP1xvzPdxO+dNBIjQ/yAEfo9hFgBPsTxG8RygacLcC+32wVoEr4ylVHkmnF
mLqQ1EMUkV0BkXfvRWlQcscMqhab5YcPlcZ7nI7sNu8fRsXeP8W68KbxZBLM/irY
T7efDiVG7L7DEXU8wSqD+ycEFKP0PNaBlzOupNY/LsZ3lMPr4LS32l/NQ7VNzNxr
BBMPe3hvmm8Pzu+p+hr2SynqaNHM3cr8q07B8KJdQ21oI4ehJg/n8LV1uVCcZ+D4
bvBPjVIBQElAlg+mzQ2JmIJtSXZKnwxSMAlCKJHdAludhDXXdHlxX4hhgqXmxD9f
Fgqpz0XBRZc0zg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:38 2026 by rpki-client