Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: N3ITUy//nQlBqU7pnRirnMVwCvveOEQyEUGfrqzBiG8=
Subject key identifier: B3:9D:C0:3F:10:D7:54:CC:D7:9A:26:14:B2:7C:F2:15:23:51:F4:74
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019DD01A5420D441757C3600F9341E372B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 180F
Signing time: Mon 27 Apr 2026 18:01:19 +0000
Manifest this update: Mon 27 Apr 2026 18:01:19 +0000
Manifest next update: Tue 28 Apr 2026 18:01:19 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: h1sXWjG1taxzAI2+ZjPaNeoOyJ4aNy9ckVGGiTaOL/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:54:20:d4:41:75:7c:36:00:f9:34:1e:37:2b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Apr 27 18:01:19 2026 GMT
Not After : Apr 28 18:01:19 2026 GMT
Subject: CN=b39dc03f10d754ccd79a2614b27cf2152351f474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:96:74:08:e8:b0:4b:47:16:43:c3:e6:67:
84:84:4e:f7:5e:e9:a2:1c:62:b2:f7:54:cd:37:9a:
55:64:72:c1:50:7c:33:8b:d4:05:bb:b9:0c:3d:77:
5b:87:29:e1:29:e8:3a:58:d2:ac:21:51:e7:42:18:
a9:d7:52:dd:87:47:bf:35:dd:96:32:73:1c:75:c9:
f5:ea:b4:19:7b:b4:6e:98:83:cb:96:eb:8d:74:47:
bd:69:50:28:af:a2:27:89:55:02:74:0c:69:81:cc:
61:f6:c1:cf:03:aa:59:f2:d2:09:c2:f0:4e:0c:6d:
10:22:c9:d1:71:20:95:e6:c3:ae:87:87:52:72:0b:
8d:f6:1b:9f:2e:20:1b:38:69:94:5f:4b:c5:f0:a6:
ef:30:cd:a9:27:6d:b0:1d:95:26:7c:90:bd:26:e7:
3e:a4:90:ce:3e:90:3c:e4:82:b0:02:10:39:63:83:
b8:b5:95:69:0f:30:59:d1:86:43:63:4b:56:cb:b1:
ed:58:ef:70:76:9d:b5:70:6e:4d:9f:c7:88:24:5b:
5d:44:99:22:73:98:d4:b4:c9:1d:3d:2b:f5:53:4b:
fd:a0:f7:47:94:5b:4c:7f:b3:0c:70:f3:25:a6:2b:
02:c5:ce:e8:b4:98:5b:98:d1:a2:fc:e1:60:a8:45:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9D:C0:3F:10:D7:54:CC:D7:9A:26:14:B2:7C:F2:15:23:51:F4:74
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b8:e0:31:d9:ec:9f:68:4b:7e:71:e1:fc:de:5c:dc:c8:12:
ba:3f:f5:8b:ab:ba:67:34:79:0c:c2:10:64:d5:29:ea:b4:ce:
bf:a9:27:9d:5c:e4:e0:0b:be:f7:94:58:ea:d9:40:21:48:aa:
42:cb:23:67:3b:4d:92:c0:b0:34:b8:60:c6:50:70:e1:32:94:
33:eb:e5:bb:18:51:98:e7:b8:94:5e:9f:32:da:6a:73:96:8a:
48:f4:83:02:45:14:38:52:1a:2a:13:23:bd:90:92:c8:cc:2d:
81:d4:c7:eb:00:1a:65:97:bf:a8:cf:f2:9f:8f:98:ca:bf:f7:
61:7d:36:ba:36:71:56:05:33:c3:70:56:70:7e:0e:39:1a:15:
d1:60:91:51:bf:b2:b8:e3:91:88:79:dd:77:b7:ee:98:8c:22:
b4:34:45:45:0f:f3:6f:bb:80:82:a7:78:5b:8d:35:c2:80:12:
62:e1:2f:cc:9a:e9:65:26:14:42:04:f3:43:62:37:8c:ae:c6:
19:7a:c5:93:5c:90:e5:57:b1:7c:f4:1b:33:30:7a:14:71:ef:
a5:7f:58:42:1f:4c:20:38:3c:56:bf:6e:26:1c:07:b1:02:e6:
3d:f7:03:5b:ac:ba:87:17:e1:f3:08:71:e1:36:ac:50:b1:02:
f3:d2:17:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:28 2026 by rpki-client