Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: RI9hI7ZsjQcTqFaqnaRyWD9kowfax/Mn4SOpe9WrLic=
Subject key identifier: 36:AE:55:4D:A7:20:02:E4:35:77:0B:BC:73:00:1D:30:57:C7:84:94
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 019DA867F6838B3C18721AC089F9A7CD64AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 0955
Signing time: Mon 20 Apr 2026 01:01:18 +0000
Manifest this update: Mon 20 Apr 2026 01:01:18 +0000
Manifest next update: Tue 21 Apr 2026 01:01:18 +0000
Files and hashes: 1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: Jy76KENiAEDwLs6vqhfqIMbTw9T5mA8bo+sh9Kj+vpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:67:f6:83:8b:3c:18:72:1a:c0:89:f9:a7:cd:64:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Apr 20 01:01:18 2026 GMT
Not After : Apr 21 01:01:18 2026 GMT
Subject: CN=36ae554da72002e435770bbc73001d3057c78494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:d5:2b:cb:a9:76:80:9c:35:3f:8e:11:0f:
0b:87:bb:ec:c6:d7:c5:fc:fe:e1:6c:fb:26:b7:76:
f4:f4:19:ee:17:f7:e5:c0:7a:1a:8e:fa:ad:2e:de:
d6:b2:87:2a:b2:8e:f1:4f:f9:74:ba:10:78:15:d7:
0a:ba:8d:38:90:90:a1:09:4a:40:3a:19:6b:15:c5:
e1:cf:d2:0d:ca:9f:ab:c4:9d:20:7d:25:4d:4c:fa:
57:c7:42:c9:13:22:c0:e0:d8:41:fb:11:f6:0c:63:
ef:0f:fb:65:22:f8:27:fa:50:f4:1d:05:91:8d:5c:
38:d0:50:de:a7:b5:b9:a9:8f:c8:5e:7a:f1:ae:b3:
50:15:2f:c6:78:3f:c5:d3:20:4c:92:a7:ee:56:42:
21:eb:20:74:02:09:88:fa:47:60:90:92:a6:72:34:
08:f5:0a:7d:8f:31:c5:83:d8:ff:d7:1a:07:1c:6d:
66:04:c7:ae:f0:f5:a5:b8:c9:f9:83:d7:ab:95:7a:
8f:6f:ce:ca:9c:3c:83:c7:53:87:04:8e:00:77:23:
f5:c3:ea:52:8e:e3:52:e3:4a:01:06:a2:ad:28:cf:
d4:ea:4e:56:d5:c3:45:9a:8e:8c:38:b8:19:2e:d7:
6f:a8:ed:ce:0a:34:1d:25:c8:af:28:12:79:b5:c0:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AE:55:4D:A7:20:02:E4:35:77:0B:BC:73:00:1D:30:57:C7:84:94
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:45:a8:8e:dd:f0:b8:b3:0c:e2:f7:bc:51:23:b2:b2:5d:e9:
f9:d0:05:63:27:4d:e3:4e:6d:aa:a2:0b:f3:f4:ad:be:7e:5f:
b0:15:92:95:29:d0:34:3c:b2:b0:69:c6:ec:df:89:f6:5b:90:
e9:99:5b:b7:98:d6:17:ff:e8:64:29:15:b8:37:63:8b:4b:63:
99:5f:4c:eb:5e:d7:2d:82:12:f0:e3:54:46:e4:de:7e:49:46:
4e:aa:e1:bb:c7:b8:21:eb:29:9d:f8:86:92:e3:b5:cb:2f:fa:
93:23:31:3d:9d:69:e2:7a:33:9a:28:60:b1:4a:a1:36:d0:29:
87:7a:d6:1d:dd:d2:06:f2:07:98:8e:33:18:14:80:91:5e:ef:
d2:12:e0:56:6a:db:11:36:38:27:99:1e:19:31:df:ec:3a:8c:
de:d3:9b:8c:89:ec:ca:7d:39:c9:75:a5:31:b8:21:c2:d8:94:
39:b7:3b:e6:78:0f:fc:25:5a:d3:af:53:18:5c:c7:e1:48:30:
06:2b:cb:8c:ba:e5:6d:87:5c:e9:14:af:fb:40:5a:0b:f5:c3:
4a:d0:e4:29:35:d1:f4:84:ea:96:17:32:0f:2c:d5:00:7d:f0:
4f:77:72:97:b6:d1:a4:17:4a:26:b2:28:b0:85:51:9c:d4:a7:
6f:23:6e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:29:46 2026 by rpki-client