Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier: q1+kLQtRz6fjBP6Zu1UcMTbFqUVJSAdBi9zYCA9kM/0=
Subject key identifier: 1F:4F:AF:7A:BA:7D:6D:F2:6C:FC:67:1B:A5:87:49:0D:C7:65:AB:03
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 019DAAFABF7D94A81A821139784EB74F92AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number: 0A78
Signing time: Mon 20 Apr 2026 13:00:52 +0000
Manifest this update: Mon 20 Apr 2026 13:00:52 +0000
Manifest next update: Tue 21 Apr 2026 13:00:52 +0000
Files and hashes: 1: 1M-oRRQHQN7WzAJ9drZIYs_Ib5w.roa (hash: NTj3YD9SP7WkKzIuO7OWJNyQJyk6W1qPJFmHH+wxA0s=)
2: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: UGmP91uBM7r9d43M7MHcwWiOUPQp1PmFnPCnsb+2tlo=)
3: iwD6fP31_W6vGOoxTT3gqLJk_fA.roa (hash: Ome1S1/zjD0FqoPD1PIvZmNPsQ9h6oMkpIMHg8bHlAs=)
4: wSoD-Yyuw9oe0PzcTbDZo2JGCUk.roa (hash: Jy2GHX21npd0zGLUhRjI0tTL90Zy1A+Gk3cU0DE8+Os=)
5: yb0ajEg9z1jtc-eQZB_4deWv04s.roa (hash: JbsHaJRAdxnzkcLyQJbT2pfp0LO9DsZ4+5HMZ4E0Gmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:fa:bf:7d:94:a8:1a:82:11:39:78:4e:b7:4f:92:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Apr 20 13:00:52 2026 GMT
Not After : Apr 21 13:00:52 2026 GMT
Subject: CN=1f4faf7aba7d6df26cfc671ba587490dc765ab03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:8f:6b:b4:d0:22:8b:37:7d:a2:e3:63:a2:
59:ae:9d:be:03:9d:3f:fd:3c:6f:a2:5d:57:39:1a:
63:d1:1c:56:56:e6:44:5e:1b:93:de:07:d3:bd:20:
e3:15:2c:42:41:18:c1:09:11:1b:cf:13:37:c5:39:
f8:87:96:2d:f5:f4:24:5c:0e:a7:af:f9:2a:02:c3:
af:48:12:3b:3c:3f:ac:fe:bf:b1:af:c2:73:ca:90:
cf:11:21:cf:da:b7:42:a2:a5:c4:33:3b:8f:8a:45:
5a:76:e3:20:69:38:f4:eb:96:85:10:7c:48:36:cd:
e2:dc:12:64:ec:9e:7c:55:7b:b1:8f:c4:ab:33:63:
28:8d:1d:d6:a4:6a:ea:27:93:ca:7b:f2:99:25:6d:
5f:35:f2:36:d2:10:17:f2:ef:98:d9:a7:be:62:b3:
87:f6:ed:81:fb:13:79:fa:08:a3:65:03:b7:e3:8a:
c6:dc:19:a0:8d:c6:73:6e:b4:90:a3:51:48:d8:94:
98:8f:fa:6d:88:f3:7a:08:78:6a:31:e0:32:06:03:
d9:ba:79:b1:da:b0:eb:3d:80:e0:7f:a0:2c:25:b5:
a6:af:f4:8e:54:34:cf:5e:3b:7f:c2:26:c5:f3:e3:
94:36:b4:8e:a0:70:ed:e4:66:72:7c:fe:65:4d:9e:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4F:AF:7A:BA:7D:6D:F2:6C:FC:67:1B:A5:87:49:0D:C7:65:AB:03
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f8:91:b8:e9:a3:07:9b:c5:85:dc:79:5f:4d:04:ec:52:09:
d7:32:66:97:22:e1:69:72:3b:81:77:0e:ec:13:13:80:b5:2a:
b3:d4:99:98:27:9f:a8:13:de:3b:d0:85:e5:63:56:1a:b3:9e:
56:4b:d5:f4:0b:ea:6e:4b:5d:0d:a5:a1:11:cc:5a:aa:79:61:
88:4f:f4:c2:9f:19:69:42:c6:b6:ce:0f:17:df:53:97:2c:dc:
c1:8d:9f:98:b5:a9:b1:ba:49:49:d8:8a:d0:13:61:9d:f3:6a:
05:a3:69:b4:f6:18:dd:1d:44:f3:c1:41:c4:cd:6a:ac:8d:cd:
54:77:a3:ab:aa:0b:bb:16:95:16:58:4c:80:54:9b:ad:7f:8a:
a3:bb:0e:16:a1:4a:e5:88:c5:17:9b:25:a3:83:40:dd:86:b8:
a4:7e:12:1b:9f:cd:d7:d5:17:eb:8f:16:1a:e8:95:8b:6a:4e:
1b:eb:4c:e5:a9:5f:a3:f6:b2:38:08:f2:d1:5e:91:43:4e:ca:
3f:82:70:4d:52:28:4d:69:c6:c6:27:3f:71:61:92:c5:87:e6:
b8:5a:50:a5:bc:5a:7e:c5:60:8a:b6:ac:a6:aa:c9:03:dd:92:
46:14:a6:01:2b:2f:f3:1e:e1:28:2d:44:6e:c8:61:24:82:af:
38:4b:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 15:56:43 2026 by rpki-client