Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: TTnmh00nZ/+X5V5SRi9RFpf5Bnt68FY7y2uEwieMJhw=
Subject key identifier: BE:FB:3F:59:6F:07:DC:D4:40:C3:82:37:5F:B5:94:67:1D:4E:CF:2B
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019DCDF58CADF3ACD2C7F8A436D50892B8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0D0E
Signing time: Mon 27 Apr 2026 08:01:54 +0000
Manifest this update: Mon 27 Apr 2026 08:01:54 +0000
Manifest next update: Tue 28 Apr 2026 08:01:54 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: v1V+DB74RaT+2qxNQpLGP5p7slVHVz/s2qAMi4yFiXY=)
3: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (hash: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:8c:ad:f3:ac:d2:c7:f8:a4:36:d5:08:92:b8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Apr 27 08:01:54 2026 GMT
Not After : Apr 28 08:01:54 2026 GMT
Subject: CN=befb3f596f07dcd440c382375fb594671d4ecf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:3f:43:56:3b:e4:6d:65:29:ba:d0:65:ca:
21:7f:80:50:aa:69:ce:1d:dc:8b:e8:68:9d:9a:ec:
e9:d9:0b:4f:95:4f:b2:38:94:82:b7:7d:38:d8:bd:
25:e6:ee:01:9d:7b:86:61:5b:47:41:42:4b:3b:f4:
9b:f4:03:53:a8:c1:0b:d8:9e:c3:2b:a3:37:5b:46:
a8:b6:d0:03:0d:b7:ef:96:3c:15:3c:77:70:29:16:
4b:a2:90:44:e4:c9:44:aa:43:82:53:a3:ae:8b:6b:
96:b0:ad:b3:58:02:3d:0f:b3:26:21:5e:a0:0e:ba:
e4:b9:00:4c:26:c6:5d:5a:f2:9f:24:b7:e7:c0:50:
f2:1a:cd:34:bd:10:ba:39:a6:ad:fc:d0:02:b5:c7:
d4:87:19:c4:f7:7c:07:8e:9f:6f:57:cb:34:d7:11:
6c:89:74:aa:26:3c:5c:f6:57:43:60:f9:f4:e7:15:
f5:20:7b:33:4a:8f:6a:6f:b9:be:a5:29:29:da:ff:
a6:f0:b4:1d:74:e7:df:2c:f6:4d:f6:ab:1f:68:a6:
15:0b:55:3c:e4:40:aa:f9:34:70:9f:d3:2b:4d:b5:
ae:fb:58:39:05:5b:d5:41:e7:80:34:af:45:a1:01:
d2:df:da:6c:43:74:73:3f:2f:b7:31:35:63:ba:04:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FB:3F:59:6F:07:DC:D4:40:C3:82:37:5F:B5:94:67:1D:4E:CF:2B
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1a:fc:da:91:bc:f4:bb:4a:3d:31:b3:2d:67:cf:08:6d:bf:
7d:39:b4:f2:f6:c8:37:d9:86:0e:22:3a:0e:ef:30:6c:d9:7e:
a0:ec:17:43:2a:9d:47:f4:65:f4:75:ad:73:a9:64:df:12:9f:
de:9b:fe:d2:a3:9d:a6:92:35:81:9f:04:a3:e0:c1:59:d8:c0:
ad:5d:a2:3a:b5:c8:e7:0b:e7:13:77:f7:f2:8b:fc:74:3e:c2:
e6:b8:09:0b:dc:7a:c6:e0:e5:b2:05:f8:02:0e:4c:37:c1:e5:
02:94:32:9a:1b:11:e0:f1:87:24:24:da:3a:75:e2:17:af:9c:
c5:d1:48:db:99:b6:9c:d0:24:24:dc:8f:bc:88:59:e7:8b:71:
93:91:c7:f3:57:08:ac:f2:61:c2:ee:69:37:57:8f:bf:d3:47:
ab:54:ce:54:9f:e6:5e:9a:ba:d3:0b:df:03:f6:ff:bc:59:aa:
10:2e:bb:e0:0f:18:a5:90:83:23:50:de:ed:84:6c:4f:8a:d9:
44:7c:47:8c:f6:ca:b9:03:bd:ff:2e:90:c1:32:a0:df:17:bd:
c6:59:68:07:1f:eb:84:cb:63:49:a9:b1:8f:94:5c:cd:ff:67:
e7:b8:8f:07:a5:12:21:d4:5b:b4:69:f7:18:ba:f7:93:6a:67:
75:e0:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:57 2026 by rpki-client