Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: DZI6kVVgU3mYzLJDNJ0LF+DLbwG+PECAX/V+2CxICoc=
Subject key identifier: 6C:56:00:67:94:91:E8:57:32:25:ED:B6:3C:D2:23:0D:F1:CC:90:D3
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019DCD502DAAAAC8370B46BA3181BFD57767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0786
Signing time: Mon 27 Apr 2026 05:01:17 +0000
Manifest this update: Mon 27 Apr 2026 05:01:17 +0000
Manifest next update: Tue 28 Apr 2026 05:01:17 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: lgEvP84lfR3dHDc7YA3xwunQlF2HbXl7B0mfYMzRX8s=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:2d:aa:aa:c8:37:0b:46:ba:31:81:bf:d5:77:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Apr 27 05:01:17 2026 GMT
Not After : Apr 28 05:01:17 2026 GMT
Subject: CN=6c5600679491e8573225edb63cd2230df1cc90d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:51:16:0c:2a:5e:d2:8f:86:ab:41:13:0e:
87:8d:8a:28:97:70:3c:27:e1:18:62:2e:02:32:8a:
0e:9e:69:6d:94:4e:c4:89:18:ef:3b:07:7f:8f:32:
2b:47:bd:96:9e:22:75:39:00:95:af:6b:b3:f5:e0:
e5:32:87:43:52:69:71:a5:f1:d4:33:9f:f6:e9:50:
08:5e:c1:c5:13:0f:3c:33:1d:32:bd:4f:6b:e0:cc:
29:81:12:89:54:6a:75:35:62:f3:f8:c1:28:78:c5:
0e:8e:63:75:b3:fd:92:31:86:df:29:58:4d:49:71:
7f:21:90:0e:c6:9f:98:fe:94:a8:6b:1a:7b:09:c0:
ff:e2:de:b4:6c:a3:45:6e:18:1c:4c:60:8e:33:86:
e1:30:69:ea:30:53:7e:6d:f3:46:be:a9:2c:24:3c:
ca:4e:cf:56:db:d4:4f:96:4e:3a:e8:c8:5c:dd:74:
7d:4d:49:3b:41:4f:d3:61:37:78:89:91:9d:8c:0c:
a8:75:e7:64:2f:b8:1b:e6:1d:0d:e8:50:b7:87:b0:
3c:27:8e:06:f0:39:23:0d:07:ed:e4:78:a4:ff:35:
ee:e1:a8:80:fe:27:32:cd:bf:97:6c:bc:b7:73:e1:
a8:48:bc:c2:e9:94:f9:af:73:ab:46:c5:b2:8a:3f:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:00:67:94:91:E8:57:32:25:ED:B6:3C:D2:23:0D:F1:CC:90:D3
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e7:93:81:d2:a8:96:b1:93:c1:08:bc:ed:e9:d8:e6:d7:ac:
7e:43:b5:42:d7:5a:5c:aa:d3:a5:7b:19:51:0e:5d:a7:5c:6b:
f9:a1:9e:06:34:6f:ba:56:b6:52:6c:e1:a8:4a:63:34:8d:5d:
7c:ae:70:e0:30:f1:66:9f:43:a9:fd:07:ed:e8:d1:1f:5e:89:
9d:df:b6:11:22:a8:90:e4:99:44:2d:83:73:44:92:bc:4a:00:
6b:59:a0:f1:c4:8f:01:9e:ea:0c:69:30:ca:56:52:62:76:4a:
8d:77:19:a4:14:ba:13:7f:60:a4:57:68:fc:57:e5:a4:04:bb:
1a:26:51:df:64:e5:d9:16:af:97:e7:3b:04:13:dc:17:c5:6a:
8f:3a:72:bc:13:77:6a:99:61:38:ce:93:39:62:a3:21:16:31:
b5:f7:97:41:4a:67:85:93:09:d8:a5:f0:dd:42:23:8f:4f:98:
1d:5f:87:6b:be:7a:fd:2d:80:3d:48:d9:ba:53:bf:cd:14:92:
f1:ec:db:ef:cd:77:9c:98:2a:17:04:fd:79:25:11:6c:a5:2b:
8e:50:90:81:7f:91:fd:79:5f:ad:63:c4:5e:f7:fd:7d:9d:76:
e0:d3:e9:d5:3c:4d:00:e2:aa:40:20:3c:9e:e6:a4:02:5f:f0:
5f:3c:12:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:30:05 2026 by rpki-client