Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: mntnPp/DPC0KwYFnTikfB55a7KBRGEJ2AIV+NNFe81Y=
Subject key identifier: 4E:52:48:C3:77:FA:24:CB:A7:24:DC:21:77:E5:F0:83:E9:D5:AC:79
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019E4E45B0F86A6CDADD5545A3C1E7323C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 18C3
Signing time: Fri 22 May 2026 06:00:50 +0000
Manifest this update: Fri 22 May 2026 06:00:50 +0000
Manifest next update: Sat 23 May 2026 06:00:50 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: g6R1oDX+Px/h/ZJ9zZq8bCFwq0pMVQqHMpuonuiuKk4=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:45:b0:f8:6a:6c:da:dd:55:45:a3:c1:e7:32:3c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: May 22 06:00:50 2026 GMT
Not After : May 23 06:00:50 2026 GMT
Subject: CN=4e5248c377fa24cba724dc2177e5f083e9d5ac79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:15:97:ca:e6:cb:4c:51:5e:59:1e:be:01:
78:62:85:b7:75:89:fd:4a:79:38:9a:61:72:39:5d:
12:84:94:bf:10:75:d5:de:b2:f7:bc:be:a4:28:58:
89:af:1d:b0:8a:fb:63:42:e0:93:4d:07:d2:bb:a8:
54:7a:07:8a:56:9c:f5:62:7f:4b:1d:90:50:ac:22:
ee:8a:70:e2:b7:e5:ea:45:d6:2d:3b:ef:88:07:e8:
7a:a6:28:76:75:82:39:12:fd:27:6b:93:4f:73:b6:
22:97:aa:3a:29:41:41:b3:57:af:1e:f5:5b:a1:67:
b2:1a:d5:da:b6:1a:85:52:e1:d6:43:32:72:a9:26:
ae:ce:13:d0:aa:00:b5:69:f4:07:21:f3:de:ec:87:
5f:d0:a3:9d:75:80:04:da:20:b8:ca:6f:11:14:a8:
2d:ad:d3:b9:39:24:fe:2f:1e:1d:ef:86:a5:a0:a8:
7b:16:79:17:4e:d3:5e:77:6d:56:8b:ed:21:e5:71:
15:27:88:3b:12:d2:88:09:8f:ec:9f:44:9a:ce:eb:
1a:3b:cf:43:31:40:4d:46:46:f1:0f:5f:89:15:44:
a8:bd:b7:5a:6f:6a:6e:44:e0:12:67:41:b9:9b:5d:
1c:62:48:31:2a:ac:a5:4a:1d:fa:35:07:b4:ac:ee:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:52:48:C3:77:FA:24:CB:A7:24:DC:21:77:E5:F0:83:E9:D5:AC:79
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:13:db:53:9b:8e:4c:84:2c:c9:48:f6:53:91:95:0d:f5:
0b:8a:65:82:b2:f8:13:6d:f2:42:7e:9d:91:7d:4e:7f:63:4b:
cd:f4:7c:00:5f:5c:4f:2b:aa:a7:8e:2a:ec:ca:28:2a:ab:4d:
7f:a7:4a:b7:0f:33:21:8a:f1:0f:f2:35:1f:42:10:05:6c:c5:
16:99:16:7f:d6:da:89:a4:86:f1:0f:06:d2:07:6f:c8:41:77:
75:ad:99:41:b6:1b:52:31:90:d5:1d:77:3e:3b:44:9c:d3:25:
ed:8d:10:ca:f5:59:83:9b:5b:50:88:ca:77:a4:6f:1a:12:c0:
06:6c:a0:36:a1:78:71:a4:a0:8d:0e:eb:88:ef:98:78:71:40:
33:c1:fa:fe:74:47:f6:dc:b4:b9:81:33:19:0b:14:71:99:b4:
a5:5e:1d:6c:9a:fb:76:65:24:88:2b:99:c9:1e:69:d2:49:59:
f0:2d:53:46:27:2c:76:13:3b:df:b1:cf:15:a5:14:d8:61:de:
1a:3b:c3:a7:73:6d:22:a6:56:1a:75:03:b0:72:c8:96:36:fc:
ec:a3:94:ce:13:90:14:34:21:66:25:e2:4b:0a:34:a0:55:e4:
86:60:5f:00:d7:58:2a:4b:7c:01:91:70:1e:36:7b:69:0c:41:
e2:c2:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:08:33 2026 by rpki-client