Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: XHE0V4u4U7VEazDsf4sGzPVFgteckPpp7CWcCbNXPb8=
Subject key identifier: 4A:66:6A:0D:1A:C5:D8:88:7D:94:A9:88:A8:B8:8A:70:F1:CE:7F:4B
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019DCC064F10EB35A0DD9457A56198BFCF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 154F
Signing time: Sun 26 Apr 2026 23:00:58 +0000
Manifest this update: Sun 26 Apr 2026 23:00:58 +0000
Manifest next update: Mon 27 Apr 2026 23:00:58 +0000
Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: DfFnsb52mOIvjHSyoKLOow/ou9SYBefhUU3ioCNfHE8=)
2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:06:4f:10:eb:35:a0:dd:94:57:a5:61:98:bf:cf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Apr 26 23:00:58 2026 GMT
Not After : Apr 27 23:00:58 2026 GMT
Subject: CN=4a666a0d1ac5d8887d94a988a8b88a70f1ce7f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:0b:63:e1:ac:aa:7b:9d:9f:86:70:9f:18:
15:1c:9f:4f:45:71:44:eb:1e:90:48:70:77:e0:c4:
8a:fa:c7:5e:06:6a:50:1a:20:ca:40:72:0f:00:88:
42:d3:57:5e:e5:b3:2f:29:1c:8d:a9:40:83:e1:33:
ef:4e:f5:ed:44:f0:e8:cd:8a:71:65:5b:bc:35:27:
e7:1f:cb:ec:ff:04:51:61:6c:27:0c:8f:04:43:96:
39:e6:28:4a:a0:55:4b:58:09:fd:ea:99:55:a1:99:
8f:e7:6f:67:a3:01:0b:15:cc:52:95:f6:60:72:83:
b1:78:35:0e:93:fa:45:9c:30:b5:43:6c:1a:19:e7:
37:53:ae:64:b7:de:d8:5c:00:5d:5e:e9:04:f9:55:
74:98:01:ca:58:47:cc:62:66:b9:64:19:36:43:61:
64:1c:35:49:3c:1f:87:a2:56:b1:c2:66:11:0a:41:
8b:58:81:fc:62:bb:97:5e:f1:9f:b0:d1:62:8c:31:
a8:a5:21:7a:bf:09:c6:66:00:58:b1:5d:93:99:94:
8a:75:18:a7:df:d9:a2:56:6c:eb:d5:5a:cd:cb:f6:
ca:aa:63:3e:13:12:77:25:7d:54:32:4c:13:b4:29:
16:37:64:95:19:f7:e6:73:0a:1c:8c:36:76:c5:fa:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:6A:0D:1A:C5:D8:88:7D:94:A9:88:A8:B8:8A:70:F1:CE:7F:4B
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:16:51:56:45:b1:54:57:34:dd:55:4a:57:fd:93:b9:2b:5b:
ee:c7:6c:74:b3:e3:27:a3:ff:24:de:4f:8a:1f:b8:e7:a5:9a:
e4:6a:4e:b4:ed:76:3c:c2:29:ae:46:fc:e7:4b:9a:5e:3d:41:
2f:bb:a5:d1:10:6e:3c:28:9b:52:c3:35:a3:fa:85:cb:f7:50:
86:f9:25:c1:9c:e9:d3:58:56:89:3f:f9:10:d0:bd:d8:05:e8:
06:b1:d2:16:ba:74:53:ab:8f:46:b9:45:a8:98:84:6d:f4:04:
15:98:be:6f:4c:2f:26:e6:12:07:de:d1:8b:55:53:2d:5b:1c:
e6:41:1b:42:da:e2:e1:24:52:94:18:36:e6:78:fd:b6:8c:70:
a5:e1:cd:98:4a:03:e9:4d:00:f1:a5:ef:2b:72:38:41:a7:13:
9e:6b:59:54:8b:2f:61:ed:a7:ac:ef:d5:11:4b:54:55:4e:ef:
be:a0:36:15:8e:2d:ae:10:84:01:26:e8:ab:82:10:ae:9c:25:
7f:db:7c:4a:5f:6f:38:24:e2:4d:78:9e:ce:97:3c:6a:1e:18:
1d:7e:49:86:26:48:a6:bd:16:29:13:25:5e:9a:ee:fc:33:21:
3a:30:3b:7e:40:a2:e9:92:49:ba:db:4d:48:de:ae:3b:19:11:
15:3c:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:30 2026 by rpki-client