Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: 4E/iZNU2j5jm8jkOi61Oi7SVoXsb8TBM++E6e87rUCU=
Subject key identifier: A6:D3:4D:78:3E:A4:36:71:BA:48:BD:30:52:B4:D8:E4:69:EC:55:71
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 019DCED07B46F533C07EC37B3472DC808717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 0734
Signing time: Mon 27 Apr 2026 12:01:02 +0000
Manifest this update: Mon 27 Apr 2026 12:01:02 +0000
Manifest next update: Tue 28 Apr 2026 12:01:02 +0000
Files and hashes: 1: Ayy3FQCZfsnrrkGpwiilXLbjkWM.roa (hash: esgmCzM37dMW6UxbTfw9yQ8cfp/xjD2YDV7D5NJMYIE=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: IH9XRFrcZwrw98ZJHvHmg9PAPUDoigtxKAMn+lsEhnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:7b:46:f5:33:c0:7e:c3:7b:34:72:dc:80:87:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Apr 27 12:01:02 2026 GMT
Not After : Apr 28 12:01:02 2026 GMT
Subject: CN=a6d34d783ea43671ba48bd3052b4d8e469ec5571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:d7:e3:67:8a:4b:aa:f6:65:27:f4:d7:d5:
48:25:b4:b1:bf:9a:30:b3:ff:bf:35:e3:3d:7c:a3:
09:2e:57:86:d8:fd:46:a0:8c:a7:9b:e6:22:e7:27:
c1:0b:52:e6:13:01:81:0c:8d:74:d3:f6:ec:49:f4:
d8:28:b1:b2:4f:07:1e:5a:0c:1e:29:42:fe:31:ea:
a0:01:20:09:0d:3a:f2:c6:f5:54:99:cc:ea:47:71:
e1:2d:06:48:27:e1:f4:d0:de:4b:9c:ec:5b:a1:28:
dc:74:a7:81:48:04:fd:0f:1e:04:03:f2:e0:3a:e7:
0b:dd:e9:3e:46:7a:a2:c4:6e:95:b1:b5:df:23:f5:
66:2b:78:ff:61:82:61:08:e9:04:d7:09:39:f7:21:
c0:98:b5:e1:d7:d8:4a:4b:ca:2a:a8:82:45:91:8b:
1a:29:32:3d:c4:a4:7a:54:b6:ce:3d:7c:ce:d9:c8:
3e:9b:e9:d8:2c:7c:5d:02:69:fd:8a:57:48:cc:6d:
e7:f4:07:b2:44:9f:3d:04:42:26:00:1d:b7:54:74:
b3:30:6b:41:10:5d:41:86:22:8b:4a:72:cc:3f:01:
12:c7:81:62:b9:e8:cf:89:ae:4f:d1:90:ec:5f:ca:
41:b4:d8:70:8d:e8:d7:3a:9b:ee:50:7c:b6:bd:b7:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:4D:78:3E:A4:36:71:BA:48:BD:30:52:B4:D8:E4:69:EC:55:71
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5e:fe:59:3f:b2:9e:02:bc:19:9d:43:68:93:99:12:36:8f:
90:69:27:db:ba:c8:a6:aa:b3:16:32:3e:dd:e9:47:2a:e2:6c:
0d:42:bc:02:91:5b:be:ca:cf:cc:34:eb:1f:a2:d0:54:82:34:
3c:d8:c7:70:a7:b1:7d:7b:1c:21:5b:18:e4:16:75:56:3d:69:
ae:8d:57:90:99:dc:8e:60:5e:ed:77:bf:63:f5:26:67:86:0b:
d2:2f:85:18:b7:c5:6c:20:36:cf:8d:d1:e1:70:f0:50:a9:a8:
2c:b4:8e:ae:c6:5c:43:a6:90:92:0b:eb:51:4f:f0:fa:bc:57:
92:32:41:10:0e:ea:2e:15:ff:27:d7:4e:97:37:fe:c8:f4:69:
85:82:51:cb:cc:fa:dc:1f:5e:2b:c4:db:74:b7:1d:6b:23:09:
36:81:a3:51:2c:14:b9:62:7f:98:64:76:64:e5:4e:b1:f1:15:
9a:cb:fa:7a:eb:f7:4e:6a:98:84:59:a6:9e:50:c5:44:c6:05:
eb:b2:1d:82:bc:95:4e:ae:de:41:aa:3b:5c:b2:f0:74:d4:77:
ee:78:1c:9c:91:ef:df:ff:b0:df:d5:4c:e3:63:c0:66:83:9c:
81:e7:5c:d8:ab:a7:7a:03:cf:ee:4b:2a:60:56:09:d2:cb:05:
9e:fd:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:13 2026 by rpki-client