Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: lM1Mv1bwlwAgEOU1kbu0fMVGTG3qeHZICo9GmO/DNQM=
Subject key identifier: B9:AC:07:04:21:FC:F5:06:6B:EF:93:03:7C:BE:3C:8D:6A:CE:25:3E
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019DECDB92966EC7A0DD0F49670D9684E865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 18F1
Signing time: Sun 03 May 2026 08:01:45 +0000
Manifest this update: Sun 03 May 2026 08:01:45 +0000
Manifest next update: Mon 04 May 2026 08:01:45 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: yVx16E6DJdIUtDu0fNIqPnQkJGdZb12edm/CBTHyDmU=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 08:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:db:92:96:6e:c7:a0:dd:0f:49:67:0d:96:84:e8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: May 3 08:01:45 2026 GMT
Not After : May 4 08:01:45 2026 GMT
Subject: CN=b9ac070421fcf5066bef93037cbe3c8d6ace253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d8:43:6c:f6:83:57:1a:6c:50:e4:50:31:30:
ef:c8:62:2b:fb:ce:c8:01:88:0a:1e:0a:ab:f8:1b:
f4:05:eb:6a:78:18:1e:10:86:c7:9f:90:c1:fb:c7:
3b:dc:49:58:ae:86:c0:43:25:96:5e:1f:f9:d7:b3:
61:9c:4d:45:64:73:5e:f1:00:e8:85:77:b0:44:18:
3e:f0:27:45:1b:ee:35:fb:e7:d0:0a:c5:14:b0:cd:
eb:ff:69:30:e7:7b:23:cd:f3:56:37:51:16:1b:42:
6c:48:e4:79:3d:47:6b:cd:18:8f:2f:e1:e7:ed:63:
43:e9:ac:66:2d:dc:ff:81:06:06:42:ec:1f:35:ea:
fe:10:07:09:4a:55:dd:98:38:d8:8e:4a:31:89:54:
f7:ad:67:67:32:4d:f6:86:d3:ce:92:2c:79:47:4a:
ce:be:ff:a7:14:7d:45:9e:4b:8e:ce:ae:89:ab:d2:
52:6a:dd:50:da:55:d3:10:87:1a:00:22:f2:2d:70:
45:d6:be:d3:5c:00:cb:59:cd:3d:da:af:f6:4e:94:
f1:b9:f4:20:30:4b:1c:a0:1f:91:69:34:d5:f9:b3:
ce:32:cb:9d:6c:1c:1e:ec:28:dd:69:27:12:91:95:
42:c0:fc:35:a7:2a:44:e6:ac:99:9a:8b:8c:5e:23:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:07:04:21:FC:F5:06:6B:EF:93:03:7C:BE:3C:8D:6A:CE:25:3E
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3f:ea:f7:33:5b:db:ba:cc:60:a8:1d:b9:21:1d:f3:67:2b:
cc:d7:97:2b:8f:83:cb:28:b8:88:f7:c6:f2:b7:ef:75:aa:94:
39:12:43:7e:b4:3b:24:b3:fc:49:ba:3e:36:e5:83:a8:ce:5a:
c5:67:9d:69:f4:74:59:de:3a:26:91:6d:3b:c9:89:65:36:a5:
e5:58:7e:3e:a9:37:14:8a:99:1c:24:63:59:f4:0d:e4:87:5d:
19:a1:e4:88:87:91:75:8f:40:a9:89:e4:be:1f:db:c3:54:d0:
14:bc:c9:82:6b:c5:c1:e2:bf:38:cb:37:52:bc:d0:a8:9d:ab:
11:a8:63:61:82:a8:2a:83:37:35:1c:7e:93:df:0d:ba:10:ee:
9e:1a:19:47:82:98:6b:2a:7b:bf:35:46:eb:36:03:47:87:57:
32:1f:0b:a0:af:e4:0f:29:c7:72:d6:91:90:7c:26:49:e1:cb:
2a:e3:3c:8f:1f:38:3b:7f:da:2c:dd:dc:e3:fa:31:1b:18:47:
fc:f9:ea:87:57:a8:8b:26:0c:75:55:02:9b:32:b4:08:93:0d:
93:a3:65:c8:f6:65:76:d9:51:f9:59:b3:da:9d:3e:e8:f1:0b:
e1:e2:59:f7:03:a0:c4:51:50:d0:5d:fb:dc:4c:09:a4:38:8a:
7c:73:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:04:32 2026 by rpki-client