Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: nG1kQovpfGNVMYi4xFWGuWmVw5sC2zl6xmSI8euykYw=
Subject key identifier: 2B:D4:80:15:A9:6E:A9:28:F1:D9:BE:13:06:D7:52:FD:34:51:5A:31
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 019DCD194923580FE69AA2F89D22EA1C4B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 18B7
Signing time: Mon 27 Apr 2026 04:01:19 +0000
Manifest this update: Mon 27 Apr 2026 04:01:19 +0000
Manifest next update: Tue 28 Apr 2026 04:01:19 +0000
Files and hashes: 1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=)
2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: VFtautLoaNWXPgjYhlTT0SyvTL5eNU08jty07LZVshA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:49:23:58:0f:e6:9a:a2:f8:9d:22:ea:1c:4b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Apr 27 04:01:19 2026 GMT
Not After : Apr 28 04:01:19 2026 GMT
Subject: CN=2bd48015a96ea928f1d9be1306d752fd34515a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:9e:6f:83:f1:2d:b7:fb:60:17:d4:0f:60:
99:dd:e1:af:0f:1b:d5:ad:a3:0a:a6:4d:57:64:a4:
ca:7e:26:a3:ca:4e:86:e5:fe:bd:40:b4:58:4a:7d:
20:f4:41:26:54:b3:95:7f:7e:72:93:8c:1e:52:79:
cf:55:c0:f6:e7:da:af:11:b8:46:7c:a6:23:0e:59:
8d:77:09:61:b4:fa:3c:4e:36:7f:27:da:f1:c0:5b:
9c:a3:d8:0f:6a:f7:68:82:71:5e:44:c4:bc:8e:bb:
cf:9a:12:7f:6e:eb:34:3f:1c:c0:2a:99:a0:0e:f7:
44:60:56:64:50:7f:21:db:a8:7d:c6:e8:38:aa:4c:
fb:20:6c:81:66:24:e6:35:fb:51:74:aa:31:9f:33:
13:94:84:77:e6:2a:22:a5:fd:97:99:02:1f:45:21:
83:60:bb:13:45:65:26:20:3c:51:53:52:03:5e:d6:
c1:a9:ba:d5:44:65:fd:d1:af:b4:6f:74:08:ce:ec:
93:d5:01:d1:c7:fd:a6:89:3f:cf:03:3e:56:2f:67:
1f:76:52:57:5d:a7:bd:51:a3:c3:e1:cc:8c:f3:e0:
52:9d:a7:9b:68:b4:70:8a:2f:af:3e:f7:4a:fd:00:
e0:0a:9d:16:0c:bb:af:0e:0b:2a:68:d6:20:70:f9:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D4:80:15:A9:6E:A9:28:F1:D9:BE:13:06:D7:52:FD:34:51:5A:31
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:96:ae:30:1f:c7:9a:e6:64:4b:59:b4:7c:6e:9c:fe:6b:a2:
59:fa:84:bb:f7:1e:a0:f9:76:dc:76:41:78:11:8d:36:f5:53:
a3:13:e8:6e:62:fd:b6:6c:bb:10:48:19:c7:38:44:47:a5:b4:
af:ab:8f:98:61:bb:d5:ac:11:d9:63:62:4d:c7:33:08:aa:ff:
08:1d:b5:c3:63:9f:53:03:33:8f:82:bc:3d:86:dc:6b:40:c2:
67:e6:b2:d6:b1:1b:7e:ce:58:cb:a5:8b:24:5a:96:01:44:e9:
5a:36:28:96:6f:53:a2:a1:17:52:09:06:d6:e7:6b:9d:ac:1e:
97:35:62:a4:29:8e:0a:81:4b:fd:19:5a:59:bf:d2:2b:25:f1:
d9:a8:c4:44:11:12:34:ca:da:bd:30:2b:ad:fc:2c:23:f0:b0:
d4:a5:8b:cb:aa:61:2f:58:34:27:55:e4:17:26:95:84:2c:f0:
f7:56:5f:e1:1b:65:b5:7f:0d:e1:da:bf:76:25:c6:43:b0:54:
d9:54:3c:27:83:15:f8:13:b0:f6:a4:7a:5e:23:c1:e0:65:84:
dd:bb:8e:3e:c3:c4:8f:bc:28:43:3c:0c:c3:9a:d7:50:bb:5e:
c8:38:df:6b:af:5f:59:37:d2:fa:03:82:08:a2:28:68:51:ad:
c7:a7:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:14:56 2026 by rpki-client