Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: u5LzqrvbQlZorZk11bHp8LCMU7tQNFD8KXsmsyr9cVk=
Subject key identifier: 14:63:B7:4E:20:25:AD:C6:DF:92:A2:33:DB:AB:EB:41:A5:A3:C0:EF
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019DCDF4BC159CBB6C4A7B45DCA195080E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 1550
Signing time: Mon 27 Apr 2026 08:01:01 +0000
Manifest this update: Mon 27 Apr 2026 08:01:01 +0000
Manifest next update: Tue 28 Apr 2026 08:01:01 +0000
Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: Y4sY0n45wr4J2vVH/Q23dS+gioVhr/7Sw5hqJ24mOf8=)
2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:bc:15:9c:bb:6c:4a:7b:45:dc:a1:95:08:0e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Apr 27 08:01:01 2026 GMT
Not After : Apr 28 08:01:01 2026 GMT
Subject: CN=1463b74e2025adc6df92a233dbabeb41a5a3c0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:44:46:70:c3:e0:90:da:d9:ee:43:1b:5c:
23:e8:69:d4:e0:cd:b0:87:28:e1:44:a4:ec:e6:f6:
ba:1d:11:d7:f5:6a:71:bf:dd:b7:c9:b7:20:fa:d5:
a0:fb:45:c4:02:d8:f6:db:a5:53:b0:ae:0e:71:30:
8d:34:d4:57:c9:94:8b:48:96:1a:97:2c:95:f3:fd:
cd:fe:81:2c:3e:dd:66:83:6d:35:53:a1:3c:2a:04:
ce:ac:92:a3:df:ea:78:05:13:f9:c1:a5:7c:22:23:
e8:d6:db:4d:4a:0d:99:70:07:82:33:4e:09:23:ed:
67:4e:42:5f:9f:9d:c1:1c:0a:c1:2c:59:79:34:74:
ab:f3:45:25:18:51:be:f2:7d:d3:ad:48:6d:9a:d4:
82:da:eb:71:55:12:d6:76:5b:35:ca:8b:7f:24:1c:
e5:5e:a1:f9:09:ac:7f:a3:8a:c8:0a:1b:b0:ed:c1:
dd:04:13:78:22:1d:cd:b4:4d:2b:21:9d:9d:17:cb:
b7:b6:e5:8a:07:8c:c1:26:31:db:21:98:3c:23:3c:
27:b4:d3:0d:bc:78:0a:bc:4a:26:57:da:80:98:0a:
93:7e:dd:42:ac:f3:02:5f:b9:91:b1:e3:17:bb:65:
4a:70:3d:2b:bb:eb:78:1b:80:1e:23:b1:a2:42:7c:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:63:B7:4E:20:25:AD:C6:DF:92:A2:33:DB:AB:EB:41:A5:A3:C0:EF
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:67:c5:61:7f:1b:da:c5:07:b1:7e:68:9c:77:9f:2e:77:fc:
18:56:e6:07:7a:ca:4a:83:aa:60:4f:f8:d4:5b:3c:7a:55:96:
fa:e7:fd:7d:b2:b9:43:69:2c:2a:70:57:97:35:4d:08:bb:00:
6e:89:12:71:5f:bc:d9:60:af:bc:96:74:da:0d:63:41:c6:05:
fb:e2:c9:af:b1:a7:13:a2:c3:eb:4f:91:a0:93:f2:8f:b3:01:
6c:f9:24:1b:a4:ac:3f:9d:ee:f5:63:09:76:f4:17:a4:03:50:
b0:81:2e:53:c1:4f:cb:e1:c9:86:75:71:bf:67:7e:7d:18:22:
34:d8:9a:f0:c7:30:33:51:36:08:cc:66:52:88:2f:4e:44:81:
c7:f6:9e:0d:83:65:c7:fb:af:da:53:e5:52:43:06:33:47:f6:
a4:83:c2:63:12:a1:81:2c:16:d3:3b:7b:35:ec:80:ec:52:0a:
3c:55:48:d8:9a:07:d2:4d:b5:1e:e9:b9:e7:02:23:fc:aa:90:
06:39:1d:b4:f9:5b:c2:f0:aa:f6:db:c6:ad:62:68:ae:93:73:
6e:98:b5:79:47:c2:a6:c4:22:7c:27:04:12:13:3d:a8:54:01:
d3:9d:86:a5:24:69:eb:d5:55:83:25:59:22:e7:b7:8e:96:0b:
24:57:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:28 2026 by rpki-client