Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: RBbyGroD+imnI98vkkiWR1MJX624/E3O5gst5q1FgME=
Subject key identifier: 63:F9:CB:02:E2:F7:39:58:80:85:B7:13:54:7A:70:4F:8F:5F:78:2C
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 019DD80B3FB61BF977C8C3429CC56D506B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 161F
Signing time: Wed 29 Apr 2026 07:01:48 +0000
Manifest this update: Wed 29 Apr 2026 07:01:48 +0000
Manifest next update: Thu 30 Apr 2026 07:01:48 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: +ej6kDfeJcKY1W4PXlsKfNoIgQVaHNKfEgADXQ6p83k=)
2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:0b:3f:b6:1b:f9:77:c8:c3:42:9c:c5:6d:50:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Apr 29 07:01:48 2026 GMT
Not After : Apr 30 07:01:48 2026 GMT
Subject: CN=63f9cb02e2f739588085b713547a704f8f5f782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:31:cd:17:42:1e:56:59:d6:98:90:0e:b0:ef:
da:5f:38:cf:24:16:a9:fa:10:31:e0:0f:05:c0:01:
91:b1:c1:03:b4:bc:83:bd:f2:97:7f:44:bb:19:c9:
c5:81:92:ea:dd:93:23:8d:2d:a4:a8:01:19:c2:0b:
2b:57:91:a1:46:f8:81:ac:29:13:e7:88:e3:65:46:
45:66:d0:2a:83:d2:79:71:39:44:46:ce:b7:4a:94:
c7:f6:ed:4d:4d:9f:2b:af:65:a4:16:29:86:3c:af:
c1:d6:04:3e:3b:43:89:be:18:08:66:5c:68:7c:5e:
4c:ba:e2:66:9f:1f:32:48:bd:d0:56:2a:1e:85:3a:
d5:89:82:8a:05:ff:62:fa:7c:5f:10:ca:3e:96:9f:
e6:1c:d9:1e:40:c4:73:6c:0b:6c:ac:3c:fa:19:a7:
c3:e8:3b:33:8d:62:66:58:bb:fc:1d:7b:a8:83:7c:
2c:9d:a2:21:2f:82:4d:e9:14:56:b7:0a:03:3f:5e:
9e:a8:0b:24:44:2b:28:56:d7:8e:d0:51:44:8f:12:
06:26:36:82:2e:fd:68:b1:0b:f9:18:d3:8c:61:42:
a5:35:b3:be:96:8d:e1:7f:8d:0b:46:cb:7a:04:44:
66:35:7b:7a:d5:2e:08:2b:71:52:5a:3b:c8:f3:b0:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F9:CB:02:E2:F7:39:58:80:85:B7:13:54:7A:70:4F:8F:5F:78:2C
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7d:2e:f5:f9:8a:a0:83:07:5c:d3:7a:93:17:e0:3e:15:eb:
e8:34:9b:27:82:df:bb:34:c3:dc:91:8f:b2:69:22:80:af:27:
cd:e8:a7:c0:03:f9:5a:02:3f:6a:e8:3d:78:a2:a4:2b:9e:28:
2a:ff:16:5c:2e:b3:c9:1f:bf:1f:a7:5d:cd:f3:41:ab:c7:53:
8c:86:c5:9d:e3:66:13:01:4a:1a:16:55:a1:95:ec:f3:4a:0c:
47:2b:87:bd:ed:51:c2:bf:c5:d2:c4:f7:61:01:5b:2f:74:ba:
88:79:98:99:4d:f0:2f:95:39:7b:64:e1:fb:22:fd:ed:83:64:
2c:38:57:c1:7c:f0:01:8e:c7:8d:53:e6:36:84:94:b0:d8:db:
b2:a6:b2:0e:56:72:90:db:8e:a2:f0:0a:03:36:92:16:f7:9b:
73:6a:40:97:fc:3b:22:cd:e6:8c:cc:50:0d:3a:7f:e0:84:46:
b6:8b:f4:13:a1:cf:9e:4c:6e:dc:2e:99:ee:d1:0a:b7:22:08:
6b:48:2f:37:c9:ec:d9:04:77:f6:c3:f6:6d:6a:47:77:93:27:
86:a0:f5:cc:3a:2b:44:46:2c:00:f8:12:87:8a:33:c5:be:f8:
26:f7:50:b1:9b:cc:25:d3:5a:ba:5a:fa:f7:38:c5:62:63:58:
e3:8f:15:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 09:35:07 2026 by rpki-client