Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: C7w2gePGaROTx6TLq2gcwK2WYX99Liua5AoOcikY0v0=
Subject key identifier: 86:7B:D9:AD:91:5D:E2:9D:D4:3F:0A:9E:44:27:10:90:29:2D:65:74
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 019DCE2B2CEB6446E8AC4312F77691E78660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 09:00:29 +0000
Manifest this update: Mon 27 Apr 2026 09:00:29 +0000
Manifest next update: Tue 28 Apr 2026 09:00:29 +0000
Files and hashes: 1: Nx1ZmF0LLUBVNb7pg5SUQFqkEEo.roa (hash: 7h8Dusgv5GisCOAGKVB6gWNCmRgBLzLbZbpY03tENm0=)
2: jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa (hash: nFOTFG+7OrEIpqu+RBWcBN5R7HeTDegtuQdJz0N3Rss=)
3: q-cmnczAq_R4WQig-JxyBCeiu3E.roa (hash: QW62YPpx0nobzbNY1r86LME0OVZNaU0nQ5C4usrbmMM=)
4: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: 5WIMYslk0MTIzH6gpY/3GcAEVGn5Op3xa+BA28aS3ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:2c:eb:64:46:e8:ac:43:12:f7:76:91:e7:86:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Apr 27 09:00:29 2026 GMT
Not After : Apr 28 09:00:29 2026 GMT
Subject: CN=867bd9ad915de29dd43f0a9e44271090292d6574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:d9:e0:bf:57:e6:6c:16:c9:c8:77:eb:cf:
6f:3a:da:ae:91:f8:e1:1c:48:5e:49:de:4b:0a:35:
2c:2a:f2:88:f1:bc:b1:93:ac:2a:f8:d7:d5:51:07:
e6:10:1f:2a:f9:93:31:27:b0:49:16:25:de:3a:bb:
fe:60:16:8e:08:23:55:61:43:40:29:40:0c:00:1a:
69:88:1f:bf:fd:42:4c:19:26:3d:62:ab:a9:5b:2c:
8d:1a:ce:12:19:bb:b9:ee:a6:fa:88:5c:64:15:cf:
33:b8:b2:01:4f:06:33:c4:9a:82:b0:36:4b:f9:0a:
b4:0c:91:58:24:9d:4a:25:1d:c8:d4:a1:66:d0:3e:
65:53:b8:e1:dd:b1:69:6a:53:9b:d6:f2:9d:0b:23:
1c:73:c9:eb:a1:c5:62:a5:37:d5:49:7f:3b:13:05:
75:73:41:0b:ba:a7:07:fb:f4:48:76:60:aa:f5:94:
ab:7a:cc:99:4e:a0:a7:be:42:9c:dd:b8:45:7b:69:
3d:a6:08:a9:d0:d3:fb:a4:ee:c3:7a:36:39:cc:c9:
08:54:ab:06:7c:e2:15:55:8d:42:ac:22:fc:fa:4f:
f2:e1:94:85:39:8e:d3:1e:38:b6:03:3c:ad:af:aa:
78:3b:bb:73:66:a6:66:af:6b:1b:db:31:c4:0f:55:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:D9:AD:91:5D:E2:9D:D4:3F:0A:9E:44:27:10:90:29:2D:65:74
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1b:82:ab:a3:5f:f6:8c:bd:3f:29:b5:23:d1:88:23:a2:ee:
de:b1:2a:6a:35:71:80:8d:83:92:55:c6:8d:7a:02:c2:e8:2c:
38:2b:0e:cd:44:a1:fc:b4:58:4e:6e:9b:6b:3f:bb:e5:22:72:
9a:69:0e:53:1d:e2:2d:aa:ec:83:c4:9f:58:80:88:93:45:73:
4d:07:ae:cb:d3:27:bb:11:97:d7:46:a7:8a:5d:71:32:ea:b4:
d2:67:15:11:1a:f2:77:36:dc:16:43:22:2c:e7:b3:45:c2:8c:
4b:a6:52:40:1b:ac:78:dc:f5:8c:ce:49:db:47:df:0a:5b:d5:
4b:b9:6b:91:0c:20:5f:4b:c1:0b:d9:fc:b4:c2:74:60:38:36:
e5:d2:69:75:71:5a:f9:6f:73:14:be:52:97:4c:51:45:c0:1b:
be:53:8d:88:5d:a3:c6:d8:7d:66:7b:fd:0d:d8:54:5c:67:dc:
54:2d:1b:6e:8e:81:05:c2:e7:62:74:c3:2a:d6:27:78:1f:f0:
86:d8:74:4d:2c:35:7a:94:5f:15:eb:21:9a:2f:34:ee:35:13:
ec:03:b7:e9:93:5f:58:f7:64:33:4c:57:ec:3e:4e:db:08:81:
df:90:2a:e4:cb:46:a9:5f:35:2f:2a:7d:d7:fa:68:63:7a:4c:
80:59:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:14:24 2026 by rpki-client