Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier: gPDG4hf9tA2hHlsFABm82SEd4EVuBlqGB6FDrNmwrNw=
Subject key identifier: 3F:E0:8B:D6:B8:49:9E:06:71:D1:9B:B8:48:C0:EF:A2:6B:DD:FF:95
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial: 019DD0BE94CA40DEBCC81CC8B14FFC923DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number: 070C
Signing time: Mon 27 Apr 2026 21:00:44 +0000
Manifest this update: Mon 27 Apr 2026 21:00:44 +0000
Manifest next update: Tue 28 Apr 2026 21:00:44 +0000
Files and hashes: 1: bLk88x2HL-2GICyBNcP5Qc7qD64.roa (hash: 4cgQdkwpHUEmwJaaIvwsSgvpblfNuKKSJZKxTdOD8Wk=)
2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: 5r9oIxX93YVIR3WVn2JqZVOegliDMKuym5g7LWS+yv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:94:ca:40:de:bc:c8:1c:c8:b1:4f:fc:92:3d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
Validity
Not Before: Apr 27 21:00:44 2026 GMT
Not After : Apr 28 21:00:44 2026 GMT
Subject: CN=3fe08bd6b8499e0671d19bb848c0efa26bddff95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:e6:83:d5:51:39:7d:55:2d:b9:8e:3b:5c:
bf:83:d0:74:0a:f1:96:18:3c:9b:55:d0:07:a6:4f:
a3:47:ba:ed:32:5a:7d:ed:86:f0:31:d8:4f:fc:2b:
09:a9:ee:27:64:26:ba:00:b3:0f:e2:77:42:27:b7:
1b:c4:ca:f5:f2:d7:40:b5:7d:bc:5f:ff:14:db:3a:
dc:32:df:c9:1c:9e:44:c3:df:15:3a:94:d5:07:1d:
eb:c7:7d:30:c7:5d:9d:04:dd:8c:49:3d:c7:a9:58:
4e:b7:4f:af:d6:cc:ae:c2:1c:45:40:d6:a1:99:04:
d7:aa:12:26:4c:53:0f:f8:e1:e7:4b:92:d0:60:82:
72:6c:74:af:8d:49:d7:d0:39:bf:e7:4a:e5:85:51:
31:c0:76:5e:cf:3c:b0:26:aa:c0:62:b0:59:d6:02:
9a:97:1c:c9:fc:71:06:9a:8f:8d:17:a6:8b:54:1e:
41:87:ed:c0:4c:a7:2d:87:b1:92:dd:35:91:8a:87:
8b:ba:03:d5:f5:34:ac:b0:b7:75:67:4a:fa:3a:f9:
36:31:a3:8a:19:af:9a:24:73:f8:19:c4:08:ef:be:
79:9a:37:0a:1a:9a:40:a2:bb:d8:09:a4:98:43:b7:
48:39:1b:65:53:ad:f2:b2:3f:d7:08:fd:3e:00:dd:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E0:8B:D6:B8:49:9E:06:71:D1:9B:B8:48:C0:EF:A2:6B:DD:FF:95
X509v3 Authority Key Identifier:
keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:29:4d:32:cf:0f:34:24:4e:29:9e:2e:cb:fe:59:ad:65:d4:
a5:cd:04:b6:5e:e0:bf:1b:e8:73:e6:78:0c:9c:5e:9d:37:ef:
63:49:ff:c9:7f:49:49:6e:c1:62:d2:06:23:86:69:10:59:ac:
d2:f7:17:86:a2:37:02:7b:5d:41:fb:e1:a4:0d:1d:48:89:93:
24:f9:f1:ec:ef:2f:e7:59:2a:e1:62:d2:29:07:8c:09:32:36:
29:33:d6:c5:e6:9e:6c:f1:09:be:80:7b:03:99:dc:c1:d6:a9:
aa:d8:d3:6d:17:18:48:09:a0:c0:a5:4f:e2:94:0f:fd:66:f3:
06:e8:80:1d:1b:ef:74:6d:94:5f:7b:12:d8:16:2a:b4:e5:92:
27:02:52:b8:00:63:96:26:2c:32:2b:49:bc:d5:78:9f:c2:d3:
d1:3e:4f:26:7b:c1:90:dd:98:69:bf:7c:75:49:0a:69:52:79:
75:76:12:0a:e0:60:4f:00:9b:f7:2b:cf:d8:25:69:56:7b:b4:
a9:9a:8c:0b:98:46:0a:6c:03:c4:2c:18:4a:eb:23:6b:cc:19:
ad:3f:a4:7e:45:5f:57:73:62:c2:84:a7:f7:19:f8:f4:e8:82:
fb:c2:52:53:2e:a9:86:b5:74:b8:7d:7d:d4:f9:05:54:9f:9c:
32:cd:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:22 2026 by rpki-client