Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: 5a2GvT7Jr01wSz1LObn6al/z/LzL+Mp98j5ErU+U5nM=
Subject key identifier: 13:02:53:DB:E1:95:32:B4:37:55:B7:1E:B8:11:31:7C:2D:09:E8:74
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 019E31BC27AEFBC3D5A4B82CE4E9C345E3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 17:01:14 +0000
Manifest this update: Sat 16 May 2026 17:01:14 +0000
Manifest next update: Sun 17 May 2026 17:01:14 +0000
Files and hashes: 1: VyKqzxZ8-5ygWJNcg4AE05d6_mE.roa (hash: eTq1Nu+al+6xzFG/LttgMYk2x81Ow2Yalg2eI2MZJbI=)
2: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: jcBUeel1PiVtpolIUDkbBrW7ydkk+eC8ZhQ9ZDu3gtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:27:ae:fb:c3:d5:a4:b8:2c:e4:e9:c3:45:e3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: May 16 17:01:14 2026 GMT
Not After : May 17 17:01:14 2026 GMT
Subject: CN=130253dbe19532b43755b71eb811317c2d09e874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:87:a5:8b:ac:45:27:86:19:cd:1b:e9:24:
7c:9b:18:e4:c9:26:84:30:96:00:d1:8b:6a:9e:82:
ba:2d:27:26:80:25:5f:a6:4c:92:6a:ad:15:d0:bf:
72:c2:9c:27:00:38:b3:52:09:2d:14:93:53:8a:84:
58:f6:90:9e:a9:7a:90:c4:0c:ae:7d:86:84:92:4d:
62:40:32:81:89:62:a9:bf:cb:e1:24:42:9a:90:7f:
34:93:f0:53:d0:c0:c7:ab:3f:ec:63:1b:5b:ad:b4:
94:2a:d0:97:e1:bc:49:f2:51:1e:f5:d4:99:0a:f8:
b2:3f:30:e9:42:75:0f:21:d1:56:cd:20:5d:79:f7:
ad:39:19:b8:47:fa:3b:ba:89:62:82:21:3a:37:95:
07:66:42:6a:93:60:5d:79:d1:ae:f3:4a:8d:68:78:
19:76:be:58:63:ea:f8:50:f4:d3:4d:30:bb:91:67:
64:ea:a3:6c:fd:14:09:66:71:7b:af:3d:f4:32:9e:
91:5d:65:b6:c1:c4:49:3d:ec:04:6d:61:8c:50:00:
4d:05:d9:0b:8b:50:95:6b:0d:d9:7f:cb:04:a3:8f:
4a:cd:53:8c:5f:0d:29:5d:44:52:a6:9d:02:8b:06:
ad:1d:f2:63:82:58:c8:8b:46:fc:65:86:e3:bd:9e:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:02:53:DB:E1:95:32:B4:37:55:B7:1E:B8:11:31:7C:2D:09:E8:74
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:c4:00:98:54:65:53:0b:e9:b6:c7:63:a8:6a:f9:63:ab:
c4:28:dc:d3:b0:99:df:05:3a:38:8b:1e:83:4f:31:8a:c1:f6:
0b:84:c0:c0:2c:08:0f:8c:4b:c7:53:4a:81:59:1b:31:f3:fd:
4f:66:63:28:21:a2:73:5a:d0:d3:9b:ff:eb:05:d0:26:3f:2c:
ae:5b:22:b5:9e:14:ef:af:3d:52:a6:b9:ae:6e:1e:e4:7c:84:
b8:0a:61:0d:8f:7d:b1:10:87:d4:23:8d:f0:75:59:fc:f7:dd:
c7:de:88:24:6e:3d:cc:08:0a:0b:55:5d:08:d5:de:fa:9a:06:
d0:86:58:dd:1f:78:f4:0d:c8:f8:19:91:8c:06:b0:b3:9f:ea:
79:d3:8a:1c:a6:fc:63:90:70:ac:08:33:83:b9:ae:bd:5d:0f:
1f:f5:fc:c3:5b:2f:40:03:cb:aa:39:a3:72:93:42:84:d3:4c:
ae:11:e7:ee:9f:61:0e:2e:65:ef:bb:2a:8c:f0:2c:20:00:8a:
8d:76:e0:ef:ee:f2:e6:72:23:99:d4:8c:ed:23:21:8a:00:85:
6b:a0:2a:04:95:c9:cd:df:90:a8:d5:82:9f:31:e4:4c:cf:ec:
93:de:52:b5:d3:66:52:46:fd:0d:a7:dd:19:23:4b:c0:41:19:
f8:fc:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:13 2026 by rpki-client