Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier: Be8yORFc7BayMVGbG6HzrsCEnY/V035/eupzXnXldVI=
Subject key identifier: EA:78:96:EE:8B:9C:27:F6:8C:76:CB:0E:32:EB:8C:62:C5:58:21:63
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial: 019DCDF53DB60BA8AC560E1C8B299718D2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number: 03F4
Signing time: Mon 27 Apr 2026 08:01:34 +0000
Manifest this update: Mon 27 Apr 2026 08:01:34 +0000
Manifest next update: Tue 28 Apr 2026 08:01:34 +0000
Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: JKyWTjF4jxrhABSoduarM7obUG1pHLVmD9DBBJ+i8DA=)
2: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (hash: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:3d:b6:0b:a8:ac:56:0e:1c:8b:29:97:18:d2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Validity
Not Before: Apr 27 08:01:34 2026 GMT
Not After : Apr 28 08:01:34 2026 GMT
Subject: CN=ea7896ee8b9c27f68c76cb0e32eb8c62c5582163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:05:60:fe:04:71:86:9e:d0:c7:8a:56:5a:
ec:8c:c2:9b:d7:f3:3b:ee:5f:3b:6a:c9:50:29:af:
ea:f2:23:0b:18:ef:b9:76:42:33:bc:01:c4:86:76:
eb:87:62:f2:ea:36:5f:66:06:3f:15:11:80:84:12:
c9:e8:07:11:f6:78:86:93:d9:53:08:d7:4c:93:05:
7f:be:5c:31:ca:4e:da:81:93:83:db:db:82:a0:6a:
6a:13:03:8f:f0:76:04:8d:1b:95:41:5b:5f:5a:c1:
0f:71:b5:17:5f:de:cd:d5:45:71:52:92:fa:b9:2e:
a9:fa:84:cb:ce:36:47:4a:93:aa:dd:59:6c:bb:0f:
fb:67:1e:1d:1e:5d:21:60:8c:fd:a0:f3:f6:e6:39:
a9:6c:c9:5f:3b:3d:b3:0f:53:29:45:10:c8:c6:0a:
09:d8:03:c9:f5:a6:d8:74:2d:b8:0b:d9:dc:8c:e1:
a8:be:c2:65:2e:1d:8f:20:2c:e4:4b:ed:75:6b:df:
d0:86:72:fc:fa:c9:08:f9:16:1f:f3:a0:4f:6a:43:
c9:d0:e1:1e:20:82:03:0e:df:97:11:26:ac:72:ed:
59:87:48:94:62:d3:d5:b0:9e:7f:f7:9c:61:03:65:
4d:29:31:00:00:af:83:cb:c3:24:25:c9:76:54:06:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:96:EE:8B:9C:27:F6:8C:76:CB:0E:32:EB:8C:62:C5:58:21:63
X509v3 Authority Key Identifier:
keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ec:ab:8d:82:71:04:f8:56:d2:17:77:6b:dd:c5:0f:de:03:
93:90:d6:ec:e6:5e:a6:6a:be:c3:40:f7:a9:de:6d:4e:1e:55:
7b:91:31:0b:72:2f:9c:f7:9e:e7:8c:db:1f:a4:b1:9f:2c:b1:
30:82:44:37:68:7f:ee:50:9b:e3:44:05:30:86:ea:83:34:59:
96:08:00:0b:84:f6:7f:c4:bc:b7:71:44:aa:e0:ff:01:0d:da:
6b:86:ee:37:2d:1d:45:c4:51:6f:28:15:ba:5a:00:66:32:3e:
f9:18:8a:4c:d6:fe:f1:40:53:3a:2b:ef:55:fb:89:1b:f7:b9:
78:36:46:ec:1d:48:52:5c:03:7b:62:cb:3b:20:3b:d2:24:84:
e5:7c:d5:bf:c5:35:74:69:6e:f1:ac:0b:f3:c0:10:a3:f0:72:
f3:df:ee:14:bd:49:58:92:f3:f2:aa:82:d1:65:f4:29:57:b8:
00:0b:01:e1:0b:2f:98:0c:6e:63:a8:62:b7:24:77:49:2c:29:
0f:90:78:bb:c3:57:ee:3d:d8:ff:22:99:40:71:24:76:56:b3:
45:ed:d2:06:46:1f:17:94:28:88:d0:87:e8:d2:b7:34:2f:b2:
0d:fa:30:c3:47:34:9f:8e:ba:e6:a1:f1:ac:87:fd:b0:0c:1d:
24:c4:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:25 2026 by rpki-client