Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: XVg4eWIeZuJq9ZE+G0ESAKDcavBGp3s7pwl1TH8HTXI=
Subject key identifier: A9:BA:99:0A:C2:0B:4C:07:C9:1C:31:0C:44:3E:00:E9:C8:8A:09:F2
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019DB434CB94C6878753769F4EA823D21191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 18CE
Signing time: Wed 22 Apr 2026 08:00:51 +0000
Manifest this update: Wed 22 Apr 2026 08:00:51 +0000
Manifest next update: Thu 23 Apr 2026 08:00:51 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: msgw7q9D0OpZPUzqqjJDeoRK5/htVbwYQU0T3f0pwm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:34:cb:94:c6:87:87:53:76:9f:4e:a8:23:d2:11:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Apr 22 08:00:51 2026 GMT
Not After : Apr 23 08:00:51 2026 GMT
Subject: CN=a9ba990ac20b4c07c91c310c443e00e9c88a09f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:5e:8f:f7:43:80:58:5b:2c:2d:5c:ed:5c:
56:cb:6c:99:59:61:4b:fd:45:aa:92:1e:3e:66:33:
8f:ba:f1:05:fb:03:ef:fb:1b:05:9d:d4:9b:ff:ca:
66:fa:8b:ed:18:98:1d:04:5b:91:e9:a1:9e:61:95:
5a:5c:e1:18:31:a8:3c:eb:f1:94:ed:bd:51:f9:f8:
82:2e:be:be:f3:a2:41:aa:9b:01:b7:01:41:9e:40:
36:e1:fe:2c:62:01:6d:6f:04:aa:14:52:ad:d1:55:
3b:bc:fd:5c:7a:d6:67:d7:d1:5f:62:ae:d6:91:b7:
2f:9d:68:37:c1:40:2f:ca:8f:ed:94:ab:da:cb:c5:
f5:16:57:8f:16:70:d6:c7:fd:79:ca:88:a9:39:4c:
a0:5f:5a:a2:d7:d0:5e:96:8b:b6:2f:9b:4f:24:ce:
83:11:72:bd:18:64:b5:e6:d7:9d:43:da:ac:76:7a:
de:73:76:a0:4d:41:85:bc:a6:37:ff:97:7e:81:34:
09:50:7b:6f:e2:cc:3c:6a:ed:b0:c7:6b:3b:f9:cf:
b5:c3:a2:58:da:54:7c:4b:a9:ee:ee:59:39:3c:25:
c3:c7:9b:e1:58:5a:71:db:8a:26:54:b3:cb:da:98:
7e:05:8b:1d:57:58:ff:09:0f:63:32:f2:a6:fb:54:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:99:0A:C2:0B:4C:07:C9:1C:31:0C:44:3E:00:E9:C8:8A:09:F2
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d9:2a:1c:e4:7d:8f:3b:ea:08:0a:f4:77:bd:ec:b6:1f:66:
27:43:7e:10:b7:02:94:cc:3a:36:15:ca:80:80:fe:59:62:9b:
75:fd:09:19:3c:90:2c:18:85:a7:83:51:f7:a9:d9:9f:1a:31:
84:aa:22:e0:06:9c:03:74:48:6b:3b:f9:31:58:8a:8c:11:0c:
80:71:00:c1:bc:de:ea:a5:1a:5a:6c:f5:e1:41:da:be:57:f7:
47:ed:f2:09:5d:a5:9c:10:66:29:de:30:2a:77:f5:34:28:2f:
72:64:9d:ab:e8:96:e1:17:b7:02:5d:3c:41:02:da:00:99:e1:
60:02:71:ca:1b:35:17:35:56:67:7e:a8:b7:46:6f:c7:2d:d5:
c2:c5:01:53:c4:77:52:6a:7c:88:ca:49:9e:25:39:7b:72:ee:
3e:eb:9a:38:75:3c:ab:d9:45:6e:f8:5e:fa:cb:e6:1a:9c:22:
7e:64:04:dd:91:e9:55:39:e0:42:17:d9:e9:6e:5c:40:24:a8:
a8:a4:5a:5d:43:f2:11:7b:74:fb:63:c3:ef:2e:d9:92:4e:08:
bf:85:67:81:09:e1:9a:b8:dd:4d:80:52:c0:d1:93:83:62:56:
bf:ee:ed:61:88:96:68:fc:4d:2b:02:e2:a9:1a:84:db:df:93:
5b:76:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:25:02 2026 by rpki-client