Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
File: qp8GoFvDKfAAVRK56LgYUDtKlwI.mft (raw, json)
Hash identifier: tmQGandhgPcl39eIy53A+g8XOJVwrLGj17JzGQqwxpg=
Subject key identifier: 51:3B:3B:3E:BE:28:1A:BD:00:F7:EF:D2:84:CA:D6:A9:E5:16:61:B5
Authority key identifier: AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
Certificate issuer: /CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Certificate serial: 019DCD87807BEF59D21F628BE986146D363C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 06:01:42 +0000
Manifest this update: Mon 27 Apr 2026 06:01:42 +0000
Manifest next update: Tue 28 Apr 2026 06:01:42 +0000
Files and hashes: 1: _4VYQRquhP3n7V0ZIUcFIYF3tcc.roa (hash: E+o4HFAoGMbScOOdpRNVFuEWt1wZ9tuocl+KZhVyuoo=)
2: qp8GoFvDKfAAVRK56LgYUDtKlwI.crl (hash: w29h8bt2K9gu13s3yyS65G24wVBj+CVDpZdwTBpx9aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:80:7b:ef:59:d2:1f:62:8b:e9:86:14:6d:36:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9f06a05bc329f0005512b9e8b818503b4a9702
Validity
Not Before: Apr 27 06:01:42 2026 GMT
Not After : Apr 28 06:01:42 2026 GMT
Subject: CN=513b3b3ebe281abd00f7efd284cad6a9e51661b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d9:23:ab:fc:81:c4:c1:f6:0f:72:e6:40:3a:
bf:d7:9b:25:04:05:47:f4:c5:e1:ad:48:28:5a:f4:
a9:cd:96:92:a0:bb:81:54:73:72:e9:14:92:b3:90:
a3:fe:cb:05:18:57:f4:60:d1:30:8a:8a:43:29:cf:
1a:ce:32:24:21:c5:84:91:e5:62:2d:7c:53:c5:94:
52:1e:07:82:84:0e:89:88:c5:c3:83:58:80:08:a2:
2b:af:0d:b4:8b:fd:64:85:5f:e8:1c:f1:21:ee:fb:
81:54:e6:19:02:a7:c0:08:a2:25:f5:47:cc:55:f1:
53:1b:d1:36:89:b6:17:8f:a2:3e:3e:48:cf:52:b1:
fc:9c:ab:fb:17:39:7b:1b:87:49:e0:3a:7b:e3:3e:
46:d7:85:eb:05:00:65:df:89:a7:21:34:e2:9d:21:
83:7e:47:a2:60:a0:85:b7:4c:29:11:32:90:3d:a9:
fa:c5:2f:ea:2b:2e:e9:d6:da:8f:40:ef:e9:5b:7b:
76:65:77:cb:2c:ed:62:be:91:c2:2b:cc:50:ac:e9:
2d:1c:b0:27:d1:d3:ed:f7:fd:ae:82:de:75:07:e2:
ae:01:d6:55:e8:72:07:d5:f0:d4:75:46:2e:8a:1d:
67:c1:46:bc:45:9f:29:df:9c:f2:d9:be:4f:54:c7:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:3B:3E:BE:28:1A:BD:00:F7:EF:D2:84:CA:D6:A9:E5:16:61:B5
X509v3 Authority Key Identifier:
keyid:AA:9F:06:A0:5B:C3:29:F0:00:55:12:B9:E8:B8:18:50:3B:4A:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp8GoFvDKfAAVRK56LgYUDtKlwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1cb87-d8c6-4d31-a798-4e27d88b281a/1/qp8GoFvDKfAAVRK56LgYUDtKlwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:31:05:ba:64:7e:ca:d4:cc:a0:4b:ee:1f:b6:7b:a4:78:
b8:bf:92:7f:57:01:09:a5:58:f8:d5:cd:b3:7c:1d:37:ad:07:
65:5a:84:5d:4b:89:04:9e:31:8c:b4:3c:ba:5d:b5:69:9e:e3:
38:bd:a8:f1:5a:a0:c4:bc:77:7a:1c:3e:5c:14:aa:53:ca:17:
10:b5:23:fd:76:19:9c:7c:d0:49:b8:2c:68:a7:7c:67:d9:6e:
f6:ca:cb:fe:72:f8:35:23:ba:7f:dc:f4:95:c9:61:5d:ec:a6:
43:ee:87:c8:30:0c:0a:c3:16:b6:8f:86:45:cf:cb:69:ac:cd:
dc:a1:64:7a:3b:a3:7f:97:e9:b2:3f:4a:b1:40:a6:37:76:43:
fb:b3:79:4c:52:3a:a5:dd:23:b9:dd:d8:22:fe:70:76:5a:13:
c6:52:e4:d8:b0:1d:85:43:47:52:66:2a:19:6c:3c:34:2e:a0:
7b:ad:27:83:a0:86:35:42:b7:43:65:98:23:03:d8:f6:a7:8a:
8f:a7:9f:9a:9f:38:82:7a:71:4f:72:09:6b:fc:34:c5:e5:95:
aa:44:94:29:e0:48:f5:e0:6d:0b:c0:e0:51:a8:0f:9f:5c:0a:
5e:50:19:8a:8a:55:83:79:7b:22:96:88:a9:ed:73:f7:52:b1:
31:54:c5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:35 2026 by rpki-client