Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: c9LPTcKfrhkKTPdxkVNoIv882psB4zzyhxpOgW4YJoA=
Subject key identifier: 32:A6:D8:32:6C:E3:FC:F9:BE:45:EF:50:BD:CF:7E:BF:26:AA:BC:C4
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 019DCFE369899ED67AFBE681720CF106BA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 0232
Signing time: Mon 27 Apr 2026 17:01:20 +0000
Manifest this update: Mon 27 Apr 2026 17:01:20 +0000
Manifest next update: Tue 28 Apr 2026 17:01:20 +0000
Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: iV2WLCTN/FoUpxNaCo8lEx3mFt+yDm3zXMUw8xwosqg=)
3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:69:89:9e:d6:7a:fb:e6:81:72:0c:f1:06:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Apr 27 17:01:20 2026 GMT
Not After : Apr 28 17:01:20 2026 GMT
Subject: CN=32a6d8326ce3fcf9be45ef50bdcf7ebf26aabcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:92:c5:ac:13:15:6b:be:e8:c7:24:65:9a:
9d:49:87:e5:80:a4:72:87:11:a3:7d:5a:3c:fe:4f:
d3:db:3c:6e:ce:a5:3f:75:7b:d3:f7:31:e4:d4:fb:
dc:16:ad:e5:72:40:bd:6b:23:d7:10:88:c5:8d:fe:
07:4e:07:b7:78:8a:da:d6:9e:a9:a2:5d:d5:90:28:
ee:1b:b2:6f:9a:87:57:8a:05:ed:69:25:b0:a4:50:
5b:af:d7:3a:4a:35:8f:3b:05:49:da:43:72:84:4d:
34:cb:f7:19:9c:a0:2b:1a:79:f3:de:45:fc:15:09:
03:f8:30:73:d8:db:71:f2:01:4c:34:64:e8:ac:0d:
d2:de:65:8f:74:f2:af:75:a3:62:f7:7f:36:5d:7d:
c4:0d:73:67:c7:a5:b8:04:ee:57:51:1a:35:1b:56:
dd:1e:e9:79:db:f5:47:76:eb:e4:12:0a:79:82:80:
c7:5b:a1:16:c5:e0:b9:37:75:9d:af:f0:8e:55:ff:
14:dd:df:c2:35:7b:28:27:91:6e:32:6c:b2:32:f9:
fa:14:48:3e:76:9d:6d:12:27:91:e4:16:23:87:b6:
98:c4:77:17:e4:1c:31:58:c0:85:a2:cc:4d:62:e0:
92:2d:89:72:96:32:c4:a4:b3:b3:35:ca:3b:d6:f0:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:D8:32:6C:E3:FC:F9:BE:45:EF:50:BD:CF:7E:BF:26:AA:BC:C4
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:47:cd:43:8d:28:12:c5:84:70:42:da:ff:91:a5:f0:35:71:
16:98:d1:15:69:8c:be:36:25:4f:a1:c0:3c:a8:20:fd:5e:5d:
41:eb:e6:02:9f:00:f7:38:79:e4:50:f2:8c:05:7b:ee:ca:2f:
7f:b2:bf:c9:04:73:6c:31:64:4b:50:0e:c6:c4:9e:fc:45:fd:
ff:36:7d:94:a4:9e:2b:43:06:cc:cb:e1:b9:46:f4:f1:a6:52:
8f:a7:67:40:59:c5:d8:3f:e2:4c:c3:04:ad:ff:0d:1a:4f:a8:
19:7f:75:52:f4:5f:dc:32:08:59:fb:4b:ad:e8:c6:b3:64:57:
9c:4a:bc:a1:96:69:d0:39:14:cf:f4:84:82:93:c0:76:45:36:
3e:10:ea:7a:4b:9d:05:59:a6:9a:46:15:3d:d3:6b:82:61:80:
e4:53:1c:a9:df:25:be:6e:1e:ff:5e:69:38:d8:5e:d7:fc:b8:
fc:58:0c:6e:a1:85:34:6a:5b:5d:e5:d3:a6:e5:11:a8:1c:db:
82:98:2a:a0:83:f0:0e:34:15:9b:3e:c5:bc:99:5f:7a:09:9a:
80:d6:b6:39:fb:38:db:db:f8:9b:ec:eb:e9:bd:10:8d:7c:31:
44:ea:9f:c9:22:85:41:72:32:74:6a:59:91:b6:9d:1a:41:56:
17:5b:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:42:04 2026 by rpki-client