Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier: O9TT+pqUTE7TKoyMcMY+pU6DKyaJ/IXvUknkHCCPfoI=
Subject key identifier: C0:AC:46:61:61:B9:AA:84:C1:74:E2:EF:75:64:D7:DD:29:33:14:07
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 019DA830CBDE7C99CF0CF727A4197DD006A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number: 18C9
Signing time: Mon 20 Apr 2026 00:01:03 +0000
Manifest this update: Mon 20 Apr 2026 00:01:03 +0000
Manifest next update: Tue 21 Apr 2026 00:01:03 +0000
Files and hashes: 1: agl7At-sGTLsDTh6fIsNcYqjRVI.roa (hash: kdWoOhR4/BvlVOKr5PU254MlzFegaJ4FGVoYgfo0kq0=)
2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: S/0L0QL7u/1bZoRN/qvKiW4Mna1EX1Exym9RnNok43U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:30:cb:de:7c:99:cf:0c:f7:27:a4:19:7d:d0:06:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: Apr 20 00:01:03 2026 GMT
Not After : Apr 21 00:01:03 2026 GMT
Subject: CN=c0ac466161b9aa84c174e2ef7564d7dd29331407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:cb:00:b7:dd:bb:7a:21:e1:b0:f0:97:61:
ad:55:e2:0c:d5:49:e0:b7:e8:4a:e8:89:9a:65:d0:
ac:df:96:45:04:61:7d:6f:72:83:77:3e:1d:5f:0c:
fe:e1:d4:5f:42:ba:20:94:8e:22:c3:53:74:06:32:
f4:e9:1f:44:8d:50:b8:01:56:13:ce:36:94:cd:22:
19:db:66:f5:fa:72:55:f9:10:a2:ce:2f:66:32:be:
26:09:21:a3:83:cc:e4:a1:2d:70:20:de:f4:fc:40:
cc:9e:67:8a:11:dc:ad:4d:43:52:d5:14:9d:4b:08:
91:88:17:2c:c4:87:43:15:55:ab:93:a4:ae:45:01:
c1:99:96:f3:49:99:66:07:e5:4c:82:84:0e:3d:dc:
82:d4:dd:e4:4c:9b:d0:fd:4c:8e:fb:23:b4:84:48:
a5:91:37:dd:40:70:e0:20:9a:47:9e:0e:0f:8f:24:
b9:21:93:6a:18:3b:2c:4b:54:4e:45:b0:3f:52:c0:
37:63:9d:85:59:02:8c:f4:d7:7d:bf:1f:48:ea:d8:
20:e1:97:7b:18:e1:3e:b6:7f:fc:35:dd:68:b4:93:
f3:0b:9d:0e:d2:c2:e7:4b:bb:d2:95:e9:28:7f:23:
ff:9d:24:f7:a9:18:0c:d0:93:2b:9e:65:aa:e0:ee:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AC:46:61:61:B9:AA:84:C1:74:E2:EF:75:64:D7:DD:29:33:14:07
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:1e:80:ad:99:3d:f8:fa:38:a8:ff:da:48:94:bd:4e:55:
da:01:1d:9b:b7:90:18:cf:54:f3:31:cc:89:14:6e:01:c6:2e:
29:6f:66:78:21:5e:1f:89:59:95:96:ad:b2:3a:d3:7e:88:cd:
91:fa:09:b2:c9:55:57:27:41:ef:0a:8f:87:d1:29:1a:a9:a8:
28:09:f7:68:16:72:e6:1f:31:4a:c6:e4:ab:df:d8:98:d0:2a:
e7:07:10:32:31:5f:3e:6a:99:34:91:21:ea:8e:cf:d8:94:17:
13:71:88:cf:5d:4f:53:8e:0e:d0:22:e4:76:08:23:40:4e:d6:
52:f5:3a:03:fd:4c:70:c6:35:f7:a7:b4:51:da:d4:51:56:8a:
7b:5f:b8:e4:39:98:6a:33:9d:e7:57:79:65:07:b1:e1:2a:6f:
1a:59:bb:73:60:bf:8f:e6:57:9e:e6:79:b7:7c:fd:c2:bb:70:
01:b0:b2:c5:b2:f8:a1:e6:b5:9b:58:69:57:74:ad:b9:43:fe:
21:0a:97:7d:32:ee:76:a7:ed:c5:0a:10:e4:fd:e5:43:fe:0f:
99:33:54:0e:fd:7c:1a:a8:ed:d4:92:ef:aa:48:cd:31:11:2c:
5b:a9:c7:06:eb:f7:42:de:b4:58:61:56:cb:22:4d:f3:1e:d0:
76:fa:59:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:55:25 2026 by rpki-client