Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: 2yj21wARkjRQItQhaxceoEqEQpMyIff1vWh8tqsu0fc=
Subject key identifier: 41:9A:2A:12:34:FC:07:8A:E1:D2:F7:E1:F9:21:CE:96:C8:75:91:81
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 019DCF3DED67046A0BE8697605CAB3EA4BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 14:00:35 +0000
Manifest this update: Mon 27 Apr 2026 14:00:35 +0000
Manifest next update: Tue 28 Apr 2026 14:00:35 +0000
Files and hashes: 1: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (hash: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: kgfQsvYGCynspdAwAc/GvayDLiM6oxOZOUgMjxZoDa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:ed:67:04:6a:0b:e8:69:76:05:ca:b3:ea:4b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Apr 27 14:00:35 2026 GMT
Not After : Apr 28 14:00:35 2026 GMT
Subject: CN=419a2a1234fc078ae1d2f7e1f921ce96c8759181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:3a:f4:2b:ea:e7:24:c4:66:78:03:2b:9a:
d5:11:52:bc:4f:43:3a:0d:51:7a:01:fe:1d:50:cd:
4f:cc:f2:22:ab:cf:e6:be:85:fe:f1:c7:60:04:f1:
d0:10:79:01:ab:ec:72:a8:16:7b:32:af:29:a2:db:
06:98:eb:38:ea:01:0d:5f:6d:34:91:62:36:1c:6c:
23:e0:00:d9:ba:11:aa:32:b3:02:3f:66:05:88:33:
65:35:2a:1b:65:9d:d1:ef:b1:56:58:57:c0:f6:cb:
9e:d9:b7:82:e4:8b:d3:71:fb:0b:a2:63:5f:3e:01:
e1:3b:af:40:97:2c:2e:67:6f:06:bd:f5:32:f3:6e:
f7:e0:f3:54:1f:2d:27:93:b6:7c:c4:cc:b5:1e:0e:
2f:b7:1d:9f:d0:e2:1b:b0:8c:0b:21:6e:82:3b:cd:
de:98:fa:e3:71:69:f3:73:89:7d:02:52:ce:80:ff:
82:bd:9a:67:fc:5e:29:d9:88:25:a5:39:cb:95:cb:
b6:4d:5b:19:66:1f:b6:46:3a:c4:20:a5:5e:29:66:
80:8b:34:ea:71:cf:76:4c:05:80:6b:9e:a8:b1:51:
dd:73:a5:c3:55:c1:74:88:64:b8:9a:67:5c:25:2d:
21:10:0a:26:d2:27:1e:81:24:08:65:1e:4e:1c:70:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:2A:12:34:FC:07:8A:E1:D2:F7:E1:F9:21:CE:96:C8:75:91:81
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:63:95:c0:d7:25:11:cb:be:c7:66:3c:60:87:ae:6a:e6:63:
33:12:a7:15:30:ea:26:ca:b3:b3:a6:0e:f5:09:7b:64:04:81:
c9:63:64:b2:9d:64:9a:e0:28:ea:92:99:0b:de:cc:32:44:22:
c3:0c:02:d4:6e:d7:40:1b:d3:e7:21:8f:c3:4b:2a:a9:9c:28:
4a:45:16:4b:fa:2e:57:a2:be:80:89:44:20:d9:03:a8:26:9e:
8d:19:6a:eb:be:1e:f0:3f:37:fd:78:81:55:30:8c:8d:fb:c4:
d9:01:27:7c:7d:4c:53:78:38:b5:ce:d2:98:cb:fe:9e:f7:89:
85:c0:ee:e4:16:9a:85:66:2b:e4:fc:d5:d3:23:de:43:04:32:
5b:81:2e:6c:43:5e:64:ea:2b:31:90:4d:5f:4a:c5:97:7b:5a:
1c:4a:51:5b:fc:97:81:cc:19:51:63:28:da:4a:44:30:d1:14:
7d:8e:f9:60:0b:4d:04:15:8e:c5:dc:74:26:3b:fe:6c:21:e0:
43:80:e7:6e:2b:c0:1d:ff:cb:b9:d6:3f:a0:00:59:b4:4b:fa:
c2:49:70:7d:6f:64:d2:6f:c3:93:3f:e0:02:dd:f6:5b:6a:8b:
ac:ae:50:b6:57:a7:fa:ba:cc:5d:c7:5b:bc:7b:ef:9a:ef:be:
f5:a3:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:03 2026 by rpki-client