Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier: fbQU4u6pp6v2YglvI0w15LcqOp8Nft0Tdw7ll5DGypg=
Subject key identifier: 0E:F3:63:92:96:DC:24:E4:0A:E4:AD:DE:F8:6F:79:D2:3C:95:95:AA
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019DCDBE24408E6046A76B1DBB939E45140C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number: 0CC8
Signing time: Mon 27 Apr 2026 07:01:23 +0000
Manifest this update: Mon 27 Apr 2026 07:01:23 +0000
Manifest next update: Tue 28 Apr 2026 07:01:23 +0000
Files and hashes: 1: CzW4u1rrcKCYl0G03vqU8cBXz94.roa (hash: /yz/XIWJQxzaieHj+TVvT11gZyxGejhib5PYK9y3aXc=)
2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: kCrCVwwP8PZX/WeylXD4clLW/CI/onXcDebsJG6ib8s=)
3: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:24:40:8e:60:46:a7:6b:1d:bb:93:9e:45:14:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Apr 27 07:01:23 2026 GMT
Not After : Apr 28 07:01:23 2026 GMT
Subject: CN=0ef3639296dc24e40ae4addef86f79d23c9595aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:83:e2:d7:80:05:88:0f:05:db:20:c0:a0:
9e:1c:c8:52:51:51:c8:42:c5:5d:ff:40:e0:d1:54:
b4:dd:ea:87:52:75:1b:7b:44:93:07:de:4e:7e:52:
f9:67:20:93:27:8b:43:b5:bc:d9:b3:e0:51:d0:26:
7d:21:50:e3:98:38:ec:70:ff:dd:cd:70:ae:53:b7:
46:5c:bf:26:4b:9a:99:18:65:c7:e5:74:dc:7a:2c:
e6:8a:fc:55:88:9f:c7:27:71:2d:96:9f:40:7c:10:
99:fe:de:59:fd:22:a2:74:f7:c6:37:d9:d2:29:5e:
0d:65:c6:a2:28:ec:f5:28:a9:e5:39:95:0d:2f:48:
92:8c:0d:23:cf:39:4a:9b:32:cc:e8:c4:6f:77:ce:
bc:5d:ef:6c:e3:04:90:86:99:d9:b2:ab:4b:35:30:
89:89:ce:3f:ed:61:ab:d8:68:ab:7b:66:76:c6:ff:
f7:be:dd:0b:4f:67:55:e4:dd:76:84:1b:4a:b0:d4:
d0:b5:83:f9:37:50:5b:78:d6:86:48:53:cc:ff:81:
59:53:58:f5:87:21:95:89:4a:4c:da:f4:54:91:cb:
ef:95:43:33:da:fb:f1:0e:e7:d1:d7:a1:75:ec:b3:
c8:4e:d1:9c:83:d6:85:3e:aa:9f:4f:24:b1:e7:a6:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F3:63:92:96:DC:24:E4:0A:E4:AD:DE:F8:6F:79:D2:3C:95:95:AA
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fd:3a:fa:48:a1:fc:b5:b6:71:4b:a0:84:84:95:86:c9:80:
4b:af:66:1b:7c:01:a5:e9:e1:97:af:ea:51:1f:b1:b3:df:2c:
c1:3b:d5:6e:dd:32:db:e2:f7:85:fc:e4:cb:41:56:ce:e8:56:
72:88:87:2c:2d:7c:0b:76:c5:4f:48:a5:e8:e0:fd:68:11:a4:
ae:5c:fc:96:2f:6f:9b:b8:8f:c5:08:06:17:2d:62:5d:78:81:
89:a4:e1:89:fa:21:c0:f3:4d:1c:67:78:ac:65:41:9b:fb:92:
4e:a7:fe:b3:d7:48:66:f6:64:35:f1:fb:35:13:3f:de:40:57:
68:f0:a8:49:28:2c:6e:ff:27:c8:89:3a:63:af:6b:62:aa:cb:
39:e4:c7:a0:4a:f5:dd:72:35:43:28:27:1e:d7:02:fc:65:dd:
d0:91:b4:c5:3d:8d:0f:4f:27:8f:da:c4:e3:80:5f:ac:a8:07:
8c:78:64:0d:65:bc:cc:36:0e:dc:ee:23:2d:7b:d5:95:e2:e0:
44:a4:59:51:32:8b:67:bc:f8:89:09:60:e3:7b:3f:f3:23:a5:
06:27:af:01:dc:87:91:ce:a8:ac:35:15:f7:26:b9:71:01:bc:
37:6d:43:7f:9b:13:fb:43:94:5e:c0:0e:7e:0d:9e:58:fe:9e:
ad:75:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:58 2026 by rpki-client