Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: 8A5mNn6Om+t39RTBtqiFUpw7/WCNvk5jyvdOV0ROBRE=
Subject key identifier: B1:D8:C2:C0:A9:B1:84:77:44:40:7E:D1:EF:46:21:C3:7B:D9:AE:62
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019DC0023D7794A4A64AB1A0FF0B594308B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 18D7
Signing time: Fri 24 Apr 2026 15:01:05 +0000
Manifest this update: Fri 24 Apr 2026 15:01:05 +0000
Manifest next update: Sat 25 Apr 2026 15:01:05 +0000
Files and hashes: 1: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
2: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: Kf82HALKJWsVXtelMvm9hnTx4GjOQoDiibNO2ILg7wY=)
3: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:02:3d:77:94:a4:a6:4a:b1:a0:ff:0b:59:43:08:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Apr 24 15:01:05 2026 GMT
Not After : Apr 25 15:01:05 2026 GMT
Subject: CN=b1d8c2c0a9b1847744407ed1ef4621c37bd9ae62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:2f:c0:17:24:c0:cc:c3:81:08:d0:22:9b:
da:2a:2f:f8:39:3a:8f:f2:4d:b3:55:64:d2:c4:72:
e2:0b:32:82:08:62:9d:a5:34:9a:8c:39:ab:37:fc:
c3:e5:fa:fa:1e:d7:2e:93:c3:be:52:da:14:28:63:
92:93:e1:0a:f3:48:a6:ba:55:39:c5:bf:47:30:08:
bb:18:14:4c:cc:70:14:c7:34:ff:44:7d:59:76:27:
ea:e6:76:4f:0d:d9:e1:7b:58:20:16:e1:30:dc:eb:
6b:44:6a:88:c0:3f:3d:54:8a:d3:66:81:ec:fa:f0:
6e:ea:5a:e5:5d:65:df:16:41:0c:05:96:14:5b:d9:
2b:d4:6d:25:57:35:9d:69:ac:03:99:50:6c:ee:52:
af:59:3a:d4:85:a2:55:a2:29:be:2d:5a:bb:89:ec:
71:ae:40:cc:89:80:2e:d0:3f:73:6d:96:22:8c:cd:
58:e9:64:3e:6b:7e:d7:08:d6:bb:a2:f8:00:42:e1:
18:3c:4a:ab:fa:4c:0c:32:e9:86:99:2a:d8:ad:7b:
26:ec:0b:ee:0c:fc:4d:77:77:c4:b8:e1:ba:69:14:
59:7f:9a:ca:a0:36:54:8b:b0:8e:64:55:c7:b1:61:
fc:26:94:50:8b:11:03:28:66:85:ad:b4:8c:88:de:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D8:C2:C0:A9:B1:84:77:44:40:7E:D1:EF:46:21:C3:7B:D9:AE:62
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6c:14:60:e3:41:d9:28:ae:b7:3d:4a:ad:3a:73:7a:73:43:
81:ed:61:89:e2:5b:f2:47:f0:fe:3d:01:8d:63:be:e5:5d:31:
53:9f:29:93:d8:08:6b:96:66:ea:7e:95:70:88:17:48:2a:7e:
7b:69:d5:57:89:05:7f:74:8c:b5:d1:d2:12:40:c0:ce:fe:81:
5f:1c:7f:d8:85:72:1a:01:86:d3:c7:16:07:b0:7c:0b:e8:a1:
cd:48:23:d5:df:7f:c8:33:09:b7:38:35:36:63:ac:01:42:b9:
a4:51:24:2b:6b:51:86:5a:1a:cd:2b:94:15:90:6e:07:6b:f3:
62:31:c4:09:85:35:b1:cb:ce:b1:57:48:8d:32:25:dc:1b:da:
36:fd:43:a5:76:12:cf:c0:e3:86:1d:f4:96:4b:f9:9c:4b:2e:
3d:59:21:cb:18:65:0c:ee:4d:fd:c2:85:a0:5f:79:2b:89:9d:
2c:f0:1b:15:8b:66:70:89:b0:b1:09:de:ce:4f:e6:98:d8:fc:
3e:94:b6:14:82:fa:3d:4e:7d:20:1b:a1:f2:76:4b:ec:1b:0b:
98:1a:03:9e:eb:f4:9e:70:e9:91:ee:58:69:32:6b:c9:36:ce:
7e:66:60:4d:a1:07:f6:45:e2:dc:21:4e:04:76:49:ea:41:dc:
42:e3:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 01:54:58 2026 by rpki-client