Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier: v7inkQNyT4hC6Y+4zsRLeM6dg/H8p4uqu9DuCYaNRKM=
Subject key identifier: B5:30:10:97:1D:23:6B:B9:30:7C:0D:E3:1A:61:C7:E3:C1:4B:50:FD
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial: 019DCDBDC6993F8294D532B8AB87CD247214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number: 0167
Signing time: Mon 27 Apr 2026 07:00:59 +0000
Manifest this update: Mon 27 Apr 2026 07:00:59 +0000
Manifest next update: Tue 28 Apr 2026 07:00:59 +0000
Files and hashes: 1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: hjXg60a/1WqacGYNQrOdNk6Bu6+9Lrm/QqK8uBwoJM8=)
2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:c6:99:3f:82:94:d5:32:b8:ab:87:cd:24:72:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Validity
Not Before: Apr 27 07:00:59 2026 GMT
Not After : Apr 28 07:00:59 2026 GMT
Subject: CN=b53010971d236bb9307c0de31a61c7e3c14b50fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:81:cc:9d:65:ac:03:a9:40:db:67:5c:ea:
13:6e:ff:91:98:7d:80:3f:70:e7:2f:02:fd:3c:ab:
a9:28:9e:34:3f:92:9b:e9:a6:93:d5:71:d5:23:75:
ea:2d:f5:59:d5:a5:2b:b3:f3:4d:fe:5c:f8:94:6b:
3f:74:bf:22:24:7f:9c:70:f5:80:9f:66:cb:52:6a:
73:14:d3:2b:9a:5d:a8:0d:7f:f1:89:dd:eb:77:43:
3a:51:9a:de:51:33:43:d8:34:ff:99:98:79:38:cc:
e1:08:f7:a0:78:f3:2b:e2:b4:a6:01:be:1c:5c:74:
15:2b:8d:1d:a9:84:f7:29:b9:21:0b:e3:76:b4:5f:
84:d8:c4:a3:70:c4:9c:1f:77:ba:3c:74:23:e1:f6:
6d:61:cd:8f:10:54:84:b3:e3:c7:1d:d8:fe:25:32:
b2:47:bd:20:32:e8:88:fb:a2:e9:2b:1d:42:b0:dd:
67:15:b8:ad:f3:c3:a1:3d:86:ea:d2:13:2f:71:43:
b4:bf:05:d1:40:9c:d2:38:76:b3:5a:78:53:f8:45:
c5:6d:2b:8b:88:c7:0e:83:b3:c3:45:52:dd:32:5b:
49:39:04:67:70:36:12:e5:96:15:3a:0c:d9:2d:80:
49:91:25:11:bd:4b:84:40:0b:2b:bc:6f:42:25:f9:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:30:10:97:1D:23:6B:B9:30:7C:0D:E3:1A:61:C7:E3:C1:4B:50:FD
X509v3 Authority Key Identifier:
keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:21:f3:a7:9d:50:21:96:9d:50:59:12:bb:51:8f:35:b6:0e:
29:da:2e:bc:e1:db:f6:2f:f0:b0:f1:2e:ae:47:06:3f:25:18:
9f:9e:9a:f7:48:ff:8e:47:4d:df:9b:15:0c:38:21:ba:1b:5f:
14:98:9a:ef:0d:e3:98:03:1d:86:b3:84:06:d5:8d:64:1e:ac:
e5:9a:bc:34:6f:7d:91:ca:9c:40:c6:65:d6:f1:a9:b1:19:f1:
91:c8:9f:29:55:5c:62:6a:1d:dd:9f:bf:91:dc:d2:93:69:f9:
84:bf:11:96:9e:b3:e9:0d:fc:8f:07:27:f8:07:7b:a6:60:65:
b6:ad:02:59:49:91:7b:6e:71:13:9d:47:fc:60:bd:1b:09:88:
66:84:2b:38:11:be:8c:a3:31:13:bd:f2:70:20:15:ed:1f:3f:
c3:92:c3:56:18:21:1c:b9:5d:81:97:e6:22:52:d0:e5:6b:34:
b5:d6:b0:10:fd:e2:80:83:76:ad:bc:ec:32:4b:e8:e4:26:30:
4c:24:f9:6b:b8:da:42:b2:2e:a8:9d:7a:e9:97:45:23:4f:57:
bf:91:36:98:70:fa:cd:b5:e9:67:d8:18:0a:0c:7d:f5:f3:48:
dc:d9:77:8d:e9:26:ad:a3:a9:9b:8c:2f:e0:55:62:cf:03:13:
7b:f5:39:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:06 2026 by rpki-client