Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: RhZS45cQsY2u3RT44eRg0RzussVrZ4fS+lkM6GiLd8c=
Subject key identifier: CE:A3:82:E1:64:E9:AC:C0:EF:4C:D1:E8:C8:C1:2A:63:A6:C9:7B:42
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 019DCED081C05FC542662A62ECA4EC8802CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 186E
Signing time: Mon 27 Apr 2026 12:01:04 +0000
Manifest this update: Mon 27 Apr 2026 12:01:04 +0000
Manifest next update: Tue 28 Apr 2026 12:01:04 +0000
Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: lqJhDXTJyIqZ6LsmmLIYPbaj/6deIZIzDgc3NZNF7Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:81:c0:5f:c5:42:66:2a:62:ec:a4:ec:88:02:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Apr 27 12:01:04 2026 GMT
Not After : Apr 28 12:01:04 2026 GMT
Subject: CN=cea382e164e9acc0ef4cd1e8c8c12a63a6c97b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:fc:fc:c8:65:a3:4d:4e:7f:63:5d:fa:0a:
4c:df:d9:42:75:48:d6:95:94:11:0a:7c:96:12:98:
b8:ca:5b:be:5c:25:7b:f5:e3:c7:cb:0e:4d:fe:b9:
9c:cc:01:a0:7b:f1:ed:3f:d1:b3:bb:fe:ad:d8:7a:
7c:92:55:1c:29:cb:9b:64:5a:77:65:2e:61:7b:fd:
64:cf:60:2c:e4:36:ef:d9:e0:eb:15:30:fb:d0:1f:
ea:0e:cc:ca:d6:84:95:2c:8d:d2:b9:de:6e:e3:8b:
05:f0:75:de:d2:db:0e:7e:89:e6:5f:4b:d2:a5:62:
59:48:20:3a:2d:4e:87:c2:85:d9:d6:36:ad:89:37:
f0:31:0e:cf:af:e6:ff:68:41:3f:c5:e6:f6:5f:e0:
2b:a7:f5:98:e1:b5:f8:0d:90:74:39:a4:ac:d7:78:
7f:3b:1c:e3:aa:cf:85:96:77:b5:1a:79:3b:65:e4:
77:7f:41:c9:49:78:53:86:48:38:f9:02:5c:31:4d:
9b:b4:25:df:c8:33:8e:29:91:17:e1:25:b7:b1:9a:
ef:be:2d:bf:19:09:e5:6b:04:09:21:e0:dc:63:dd:
38:63:cc:b1:c4:fe:65:aa:a7:b3:fb:99:a2:47:8b:
82:c3:5b:4f:4d:64:0a:51:9b:dd:2c:97:63:93:05:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A3:82:E1:64:E9:AC:C0:EF:4C:D1:E8:C8:C1:2A:63:A6:C9:7B:42
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9b:5c:3b:20:7e:60:0d:9d:50:75:87:09:1f:1c:b1:59:fc:
86:8d:b3:ce:68:eb:e2:2c:79:85:ea:6e:db:14:2b:b1:a9:74:
1e:88:d7:cb:62:4c:27:6c:20:f9:8d:54:6b:e3:12:1b:2b:6f:
75:90:53:e7:f5:cb:77:fc:0c:2e:a7:b4:c1:5c:fc:cb:83:a4:
3c:1e:48:12:d8:48:eb:19:d7:dc:70:9e:d4:b1:59:00:e5:02:
86:3c:5d:7c:c3:23:cc:84:40:88:92:ec:cc:db:2f:2d:67:93:
2f:b5:3c:30:65:5c:01:07:80:f9:16:97:4a:c6:fd:9b:99:b6:
e3:a3:3e:d1:1d:4b:f7:28:f6:9b:11:f5:39:cb:29:4c:d5:2f:
f0:93:75:99:18:b4:1b:e1:7c:d2:49:06:41:ac:ef:e4:9f:ba:
e1:15:f6:f9:d7:69:6b:09:32:33:62:98:ed:10:bd:10:21:43:
5d:09:6a:38:d5:06:9a:76:7c:be:9e:c5:0b:46:dc:0a:20:7d:
3e:28:4e:d2:97:06:63:d7:de:7e:21:2a:44:15:81:1c:2e:c7:
db:4d:73:03:ad:7d:53:a2:c6:ca:5b:d8:4a:46:27:fe:84:4a:
46:1b:20:f3:4b:84:62:3d:2d:f6:9e:7d:24:33:a7:46:e8:9d:
ae:63:cc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:33 2026 by rpki-client