Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: PjFr3g1WHnDp+qrHy+uCC3EJjUGbolyhqY9D0H3RgSE=
Subject key identifier: 25:98:1F:0E:6F:B1:AC:B9:4C:3E:5B:9A:29:92:55:22:96:39:C2:57
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 019D9D3FB3B06F96F1C231C8251530604A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 21:01:30 +0000
Manifest this update: Fri 17 Apr 2026 21:01:30 +0000
Manifest next update: Sat 18 Apr 2026 21:01:30 +0000
Files and hashes: 1: 1Gy5y0l2Z3RJbwpIdwQeXu-S_os.roa (hash: A0SPA20n6txHOLSFN/vzsdzLr5oEp33Xca7U8bJmR+A=)
2: qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa (hash: OvZ+jG+TA2c8r8TRVg+Z8VbBKScMi5fnRQ6Z1I4vZyA=)
3: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: q5hD1otgsAFxOjvOHTpcDIkvlo5yeXmTOSbin+E+Zzk=)
4: vPp50IKlFxgQgBOicGnqoqn1x7A.roa (hash: IdCf0l+lQqi5OboKhySYCzxcGPbYokM1HRRt3wwbKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:b3:b0:6f:96:f1:c2:31:c8:25:15:30:60:4a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Apr 17 21:01:30 2026 GMT
Not After : Apr 18 21:01:30 2026 GMT
Subject: CN=25981f0e6fb1acb94c3e5b9a299255229639c257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:4c:fd:bb:cd:25:82:50:33:17:0b:10:3b:
a6:e6:b4:07:ec:27:f7:77:9c:f6:ca:72:3f:7e:43:
b7:00:21:79:05:5c:0b:b7:90:fa:0b:c1:71:3e:ca:
2c:6e:bb:7d:0e:2a:24:e1:72:15:03:92:e3:b8:03:
b0:bf:cd:18:d2:a2:e2:d8:8a:fd:91:60:72:69:33:
b1:47:81:e7:a7:52:33:df:dc:92:c6:b0:fa:71:47:
75:6d:0a:ee:93:65:fc:a1:35:da:f4:3e:ca:ea:46:
84:81:58:10:72:31:3d:27:5a:8d:4f:d2:29:68:14:
85:ee:53:6d:6c:6c:ea:d0:aa:7c:7a:e0:ae:b0:e7:
9c:34:d8:3b:0a:b6:ed:6b:08:b9:a4:5d:95:d6:f8:
80:da:61:c3:61:83:ad:ad:75:fc:10:c4:a6:70:27:
ce:c7:12:6c:40:52:88:ea:9a:69:14:11:1f:2b:fa:
78:3c:bc:af:0c:1e:3f:d7:43:cd:2d:40:7c:0c:21:
e8:ad:cb:6e:07:7e:ed:27:89:e4:bd:5f:c0:a2:f5:
46:70:f6:4d:41:83:59:c9:42:d3:37:b2:6b:cc:26:
43:8c:02:18:b4:1a:0c:7d:a0:b4:9f:90:e3:54:00:
2b:cd:76:f4:f0:b8:2a:45:cc:72:5c:bd:be:7e:36:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:98:1F:0E:6F:B1:AC:B9:4C:3E:5B:9A:29:92:55:22:96:39:C2:57
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:5a:f0:4f:e8:27:ac:a5:9d:09:fe:3d:e2:ff:8c:d3:62:10:
83:23:ea:90:f9:f8:af:b6:98:b1:4f:89:ae:ec:5e:5d:7b:3e:
4c:0e:41:4a:83:a5:f6:38:67:84:74:8d:52:98:86:68:b5:5f:
3e:e4:d6:36:26:86:5e:b7:d3:80:f7:eb:54:53:be:c7:7f:0d:
4b:8b:b4:3b:25:a4:eb:a4:fe:ab:15:bc:9a:2e:f2:20:b5:8a:
0b:05:8e:fd:48:16:f6:ff:48:25:75:a2:f2:0d:f1:80:e4:02:
fa:91:90:73:43:da:a7:db:26:9d:3d:61:58:77:2c:81:67:d7:
2b:ba:ff:5f:41:9f:a3:0c:18:86:18:6b:b3:d0:91:30:ee:8a:
e1:a8:6c:1a:75:0c:1d:84:5a:8c:d8:94:42:0f:48:27:2d:f1:
32:53:a2:31:cc:a9:a3:c9:e3:d7:71:24:c4:b6:00:86:e2:cb:
4d:5f:b7:89:38:5f:a6:3b:a9:ce:b0:11:ab:d7:e4:61:72:cf:
70:8d:d0:b1:76:38:cd:bc:f4:03:9e:57:8d:9d:e4:54:71:1a:
dd:81:16:f5:f3:82:48:62:59:3b:e0:22:13:dd:ff:97:a8:88:
68:99:76:f0:89:de:79:a5:e4:96:44:01:fc:e8:ba:b6:4f:89:
4f:20:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:15 2026 by rpki-client