Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: QytZ7D2x+kMxSgcrdm1swPsjSOA3NnxwnZQHTAq7Gl8=
Subject key identifier: 01:87:98:74:64:07:F3:10:F3:16:97:C3:8C:33:41:97:43:44:9E:90
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 019DA89E79C2A3EE446239D5C8CA0A7A0F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0E3A
Signing time: Mon 20 Apr 2026 02:00:51 +0000
Manifest this update: Mon 20 Apr 2026 02:00:51 +0000
Manifest next update: Tue 21 Apr 2026 02:00:51 +0000
Files and hashes: 1: BOIyHGFsSVNlNKzWZCkVyw194to.roa (hash: 7xB4HBd3sOYDFNhTSlycyhqskadTjgdYr1ImpvDMRog=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: r41qMN3rNVxyKQE8IpDTz3ri1tZm9Ngc5puKNTbJMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:9e:79:c2:a3:ee:44:62:39:d5:c8:ca:0a:7a:0f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Apr 20 02:00:51 2026 GMT
Not After : Apr 21 02:00:51 2026 GMT
Subject: CN=018798746407f310f31697c38c33419743449e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:b3:3b:a6:c4:94:93:d1:35:1c:f3:1a:21:
7d:87:0e:97:d8:09:88:ce:70:6e:3b:cf:27:b9:07:
4f:f3:08:50:ea:0f:b1:63:5e:18:4e:75:7e:3c:5f:
c7:c5:63:c9:72:b5:5a:9e:97:29:c0:07:eb:8c:72:
6c:41:47:52:80:f5:d6:42:01:49:21:18:23:38:ff:
e9:56:68:73:98:89:24:ca:2a:de:22:90:b5:dc:65:
37:5a:a7:39:a3:b1:07:0e:99:4c:8b:1a:83:69:a6:
5e:95:a8:bb:18:f2:0d:62:15:9a:2f:75:72:b7:c0:
0b:0e:9b:fb:3d:39:37:9a:8f:9e:8f:87:b7:e3:ca:
38:9e:90:3b:8f:3d:ba:64:90:cd:0f:2a:3d:8c:9a:
a7:25:05:3f:1c:48:8c:40:d3:7e:1f:65:c5:8b:73:
f1:60:0f:11:6b:4b:99:cc:62:b5:54:57:f0:50:71:
71:57:d0:7c:25:4a:1c:dc:a8:d9:a1:66:ac:52:44:
39:3d:c6:5b:04:5f:99:ce:0a:64:56:67:31:ed:f5:
0b:ff:7c:c1:cc:1d:38:aa:5d:b7:83:28:c8:72:b6:
0c:fd:b5:60:08:83:b7:70:c4:df:db:d1:ff:38:b6:
26:63:e4:72:d8:fb:6f:da:35:73:dd:e5:d6:d5:25:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:87:98:74:64:07:F3:10:F3:16:97:C3:8C:33:41:97:43:44:9E:90
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:de:d5:2e:d1:83:3e:c3:3f:4f:16:2b:42:d9:8b:43:85:75:
11:6b:79:95:5c:35:90:07:03:84:2a:b4:a8:78:e7:62:d6:cf:
7d:40:ed:d7:74:41:a9:92:08:6d:ee:63:c2:77:23:7d:c7:57:
bf:ef:d4:e5:c2:f7:90:f3:de:65:1b:99:a0:74:ff:00:22:bf:
5d:30:e7:c2:6d:d3:82:8f:c1:7d:cd:0f:89:ea:d5:66:ac:b6:
19:29:e8:62:b4:cb:4a:9c:14:c2:4a:55:65:82:0e:35:2f:3b:
8c:b4:03:15:d8:a6:e5:29:65:a0:8a:21:0b:6f:9f:71:19:86:
7f:18:0f:a1:ff:6c:f5:6c:54:ae:df:7f:f7:78:8f:79:3f:bf:
d1:e1:72:f4:81:bd:6f:3e:6b:9b:e5:3f:1a:3f:1e:be:d7:c2:
55:36:4a:d3:86:98:0d:27:67:b9:ed:d9:a4:a3:58:18:27:54:
30:12:5d:e1:4c:d0:1c:ee:37:9c:6a:83:5a:96:93:fb:6d:11:
ff:56:da:dd:93:03:de:17:fd:d0:92:10:81:88:7c:d1:b0:69:
ae:4f:6b:3e:85:9f:b2:eb:6e:38:84:e3:ed:db:3c:8c:b0:69:
b3:9c:9b:b0:a2:b1:8c:4d:f7:e5:fa:c0:31:8f:5f:dd:49:ec:
e8:df:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:52:16 2026 by rpki-client