Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
File: QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json)
Hash identifier: tSJ+xrLf75hqz9BYWwR7ACFdAlpD1zPbsFxdO75nI1M=
Subject key identifier: 6B:7C:B1:76:05:EC:1C:FA:D9:7B:B9:99:19:60:09:44:A3:5D:D4:8A
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial: 019DCC069F7B3A81A737550EACC96063EE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
Manifest number: 0B45
Signing time: Sun 26 Apr 2026 23:01:19 +0000
Manifest this update: Sun 26 Apr 2026 23:01:19 +0000
Manifest next update: Mon 27 Apr 2026 23:01:19 +0000
Files and hashes: 1: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: sgeYUGhlsZsKVjCrxzi+/5Hv+T/Xr3RYKMcf06hz028=)
2: YFsmm4apHvY6ZL8EsMyBPmZGQ-E.roa (hash: QK8FK49xDAR7s4a20/0YVNHlxDPHbZSZvfiRmsUbSrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:06:9f:7b:3a:81:a7:37:55:0e:ac:c9:60:63:ee:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Validity
Not Before: Apr 26 23:01:19 2026 GMT
Not After : Apr 27 23:01:19 2026 GMT
Subject: CN=6b7cb17605ec1cfad97bb99919600944a35dd48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:70:f6:d8:87:ca:c2:37:53:89:e9:68:52:
74:e6:dd:8e:56:c0:d9:ad:3c:a3:71:06:69:21:1c:
3b:54:5a:fd:9b:0d:92:8f:36:e3:d1:52:9d:0d:c5:
11:df:31:c8:c4:b0:5c:58:79:ff:eb:46:9a:db:5b:
1f:00:6e:99:02:3b:d8:db:53:47:1f:d5:2c:1a:f5:
07:66:bb:86:46:42:ea:ca:3b:77:0e:68:80:20:05:
7f:0d:63:74:04:04:70:c6:42:cf:36:80:2b:f0:aa:
f6:90:20:e9:ae:13:b0:29:3c:fe:24:60:c1:b0:14:
bb:f3:0f:2e:71:8f:d2:c0:64:5f:8a:40:72:d3:2c:
98:8b:c9:4d:e4:b2:ee:ff:0d:c1:a8:e9:dd:f9:70:
44:10:fe:fa:7a:0f:74:af:d4:8a:a7:21:5b:60:f4:
ec:31:9a:4b:9c:32:76:cb:ac:4d:ae:41:c5:03:52:
95:09:b3:42:09:6c:08:e3:39:97:b6:98:fe:77:37:
22:92:30:0d:dd:63:c7:01:fb:2a:20:f6:35:1f:26:
15:85:31:b4:9c:75:47:0e:00:20:4a:0b:92:83:78:
51:3e:84:1c:9b:e1:5d:9f:d8:a6:73:07:ab:4c:04:
7a:fa:a6:c3:f3:ab:09:0c:2d:db:83:2e:d1:8b:4b:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:B1:76:05:EC:1C:FA:D9:7B:B9:99:19:60:09:44:A3:5D:D4:8A
X509v3 Authority Key Identifier:
keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:66:da:ea:a2:32:46:3c:72:cb:ea:d5:b1:d1:72:a8:38:c3:
fc:f8:b4:45:5b:17:57:80:af:15:30:d4:0d:aa:78:18:b5:c7:
07:16:4b:e8:f2:d2:f3:10:7f:f4:1a:2b:0b:e5:26:0c:eb:e1:
37:bc:06:d5:e9:26:a5:38:27:09:1a:04:b1:c3:e6:6d:65:af:
0c:95:f8:31:87:ef:06:11:b4:d8:94:f4:0e:79:6a:cf:78:3c:
1e:9a:c6:c2:ee:09:72:cb:48:b5:22:23:ea:2e:ae:9a:1a:33:
53:ce:e6:a0:6d:be:ed:99:03:8b:81:a0:67:89:8c:1c:37:c1:
6a:78:67:65:15:de:82:6a:5f:b3:1b:79:2f:8d:79:8e:24:ce:
7a:d8:cc:09:aa:a0:33:25:ad:3c:de:78:1e:48:1b:29:66:46:
49:ff:5f:9e:1f:50:ac:4b:2f:2a:13:7c:5d:02:9b:bc:07:ff:
96:1f:36:ae:85:fd:6b:4e:60:bb:6c:c9:73:12:5b:bd:b6:e3:
9c:5f:3b:61:e8:30:70:9c:97:d3:f4:eb:e2:45:c6:2d:a4:f3:
05:c3:79:fe:d3:6f:40:c7:fc:46:64:5a:85:c2:15:7e:f0:9e:
5e:ea:3b:a2:61:e7:4f:57:09:26:3c:23:33:02:16:b2:ca:42:
f9:97:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:32:29 2026 by rpki-client