Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: y8LYN51nxYijQydIuWIDzx8AuRTP1eWHOmX24Qy0SNk=
Subject key identifier: 69:78:BE:73:C9:31:D5:9E:12:20:58:0E:6E:A4:2B:59:E5:42:1C:E8
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019DCFE35FADD9E793D08EFE3F6E2E1D34FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 15D3
Signing time: Mon 27 Apr 2026 17:01:18 +0000
Manifest this update: Mon 27 Apr 2026 17:01:18 +0000
Manifest next update: Tue 28 Apr 2026 17:01:18 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: TWv+3ZfKr/UvEbCzmcvkk8xKW/BK/wl9j0g4XUtH/ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:5f:ad:d9:e7:93:d0:8e:fe:3f:6e:2e:1d:34:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Apr 27 17:01:18 2026 GMT
Not After : Apr 28 17:01:18 2026 GMT
Subject: CN=6978be73c931d59e1220580e6ea42b59e5421ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:22:a6:ad:4e:ee:06:63:6d:5a:9f:a6:df:
1e:f1:03:01:5a:1c:8f:b8:1a:32:cc:92:03:8c:ab:
89:86:79:19:19:2b:01:9d:04:de:91:21:b5:1e:9f:
cb:c6:02:20:f9:e0:a4:4a:1a:bb:4a:a9:32:e4:4b:
05:0e:c6:a8:87:d3:f7:28:d5:c5:dc:1a:ad:d8:ed:
3e:cc:17:cb:1a:6e:39:e4:ea:a6:17:63:2d:7c:ad:
fe:d1:c0:20:2b:82:4c:01:36:87:7c:dd:6f:39:20:
41:0b:b1:ed:71:51:94:bd:b4:71:ed:94:0a:47:7a:
1b:c9:64:00:eb:29:b7:2c:88:93:03:4a:7b:bb:70:
9d:51:2d:bb:26:cc:c3:a4:5a:e4:76:4c:12:ab:84:
86:8d:0a:4e:7f:73:26:38:23:5f:8c:36:0d:cf:06:
67:47:76:5f:48:30:c8:37:c4:27:5b:68:6e:78:68:
43:aa:a3:d1:fb:07:b8:cd:9a:48:ea:0c:48:64:c8:
f7:dc:90:cf:7b:cf:4e:0f:bb:57:5a:ac:89:b7:29:
83:f3:55:21:a9:8e:c1:dc:19:e8:0e:99:0d:51:1d:
4f:59:b7:07:5c:02:0f:95:d3:0a:7d:aa:99:84:0b:
58:21:d4:45:a8:ba:a1:ee:2a:a1:3b:b0:4a:3b:42:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:BE:73:C9:31:D5:9E:12:20:58:0E:6E:A4:2B:59:E5:42:1C:E8
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:c0:b2:be:a4:7c:44:0f:55:46:58:94:00:35:3f:36:38:
c0:36:37:58:06:2a:78:a4:d2:d4:94:7a:94:0b:9a:a1:d2:f9:
aa:f3:bf:93:80:63:2d:00:41:9a:0e:a3:f2:24:90:1d:e1:bc:
f5:0a:82:1e:d2:f2:a4:c7:57:08:cb:87:2b:9d:56:e0:15:52:
89:ae:8b:f9:b0:f4:de:98:c9:3f:36:aa:70:00:f5:48:dd:05:
0f:33:bd:9f:ee:8d:bf:6b:3e:88:d4:a9:f4:4d:6c:00:a8:75:
15:7c:8c:19:5d:6f:05:9f:72:21:f6:80:a9:a6:84:a8:02:c9:
12:61:3e:ab:9c:6b:c7:31:91:c8:d1:94:11:da:86:a7:a4:46:
dd:79:56:2f:f7:13:af:2d:b6:24:20:96:7b:e2:0a:97:df:8e:
7e:29:2a:07:f6:13:2b:5c:0c:24:f6:81:36:d6:77:3a:ac:80:
c3:83:2a:1b:ba:e8:62:7c:fe:ad:4c:c7:a3:b3:06:ca:e4:a0:
ac:ad:4b:7f:4e:0e:49:19:6e:5b:96:d1:80:ee:b5:ca:c5:42:
7e:16:d0:dc:97:b4:61:16:2b:3a:da:5b:b2:d4:89:09:af:9c:
c5:10:fa:17:b2:45:ba:95:02:fe:df:08:a4:db:a7:6a:fd:9e:
16:5d:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:40:53 2026 by rpki-client