Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: 4zjdjneaeegdvYlX/GLjYsLzyf1TGn2OzoUotgLP5+g=
Subject key identifier: 25:0C:56:83:9D:A5:FB:F3:2C:E0:42:E6:B7:4B:4B:4D:42:90:BE:39
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019DCD4F9BC3AD28EA31C9A174DE97FABEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0AA1
Signing time: Mon 27 Apr 2026 05:00:39 +0000
Manifest this update: Mon 27 Apr 2026 05:00:39 +0000
Manifest next update: Tue 28 Apr 2026 05:00:39 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: lU1g1iavHNP6wgWeJOyAvjkA7y/Ey+PJw7/436/7sMw=)
2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:9b:c3:ad:28:ea:31:c9:a1:74:de:97:fa:be:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Apr 27 05:00:39 2026 GMT
Not After : Apr 28 05:00:39 2026 GMT
Subject: CN=250c56839da5fbf32ce042e6b74b4b4d4290be39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:18:f9:85:38:7a:d6:50:51:0a:fd:7f:b7:
f7:8b:73:bd:a4:80:43:83:ea:91:78:ee:1e:04:b1:
59:e8:f0:1b:b4:e3:82:e1:48:ab:fc:3b:05:ca:59:
b2:bc:2a:e5:f7:62:93:fa:55:31:01:89:e1:3a:1e:
24:e0:ce:5e:f7:fb:3e:39:45:3b:e9:f9:29:85:6b:
5d:29:c0:bc:df:ba:4f:5f:ed:b1:f5:00:f6:2b:81:
5b:25:a6:89:ac:b4:bd:93:4a:dd:51:86:53:26:27:
f8:c3:6a:01:ff:67:cd:6b:54:8c:0c:de:29:3c:02:
1d:b6:c1:09:33:30:50:90:55:45:64:6a:b9:ea:b6:
8c:81:11:b7:0b:db:8f:9f:d7:10:05:24:f4:00:a8:
ed:be:3c:0d:78:b2:c0:96:b7:c0:8d:ad:ca:00:f4:
a3:76:28:71:23:dc:f9:b8:7b:b4:ac:01:88:29:99:
93:1e:44:28:47:67:4c:27:4a:90:02:14:4a:ce:c6:
da:c6:76:34:51:e9:fd:b5:bd:83:a7:0e:34:29:c5:
89:1e:6a:d8:af:7d:b9:4f:cf:03:16:f5:f4:b6:ba:
17:27:31:3f:7d:08:b2:28:d2:9b:70:3f:da:24:3f:
ff:d1:54:b6:49:a8:4b:36:fc:95:c4:7c:c8:85:a7:
22:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:56:83:9D:A5:FB:F3:2C:E0:42:E6:B7:4B:4B:4D:42:90:BE:39
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c3:1a:ab:29:40:a7:83:0b:e1:a3:c0:29:e9:d2:b3:a5:d8:
7b:46:50:19:cb:17:d6:3f:ba:c9:5c:16:3d:88:b3:78:3e:b7:
23:6f:5c:a7:e6:5f:71:cf:42:a9:1c:f5:e9:a5:d7:0c:f5:09:
a2:19:04:65:41:e5:5e:9a:69:62:0b:9c:c4:4c:b1:9c:79:66:
4e:d4:05:df:f8:b9:5e:fe:b2:e8:f5:70:fb:fc:77:e1:20:40:
7a:d0:65:2f:ca:51:a1:78:b3:47:78:11:9b:3d:fe:e0:50:72:
e5:e9:53:ea:66:23:4f:15:48:b4:da:54:9e:fa:92:c3:37:cd:
54:a4:4f:39:ff:c7:17:07:d6:44:b5:29:b3:bc:0d:a1:ea:04:
8c:5b:cc:74:f4:8d:0f:fb:7b:4d:35:4a:83:1a:56:c7:61:2e:
b1:7e:91:8c:02:9a:a0:13:b8:76:ec:42:91:b2:0c:81:c5:de:
32:19:dc:41:38:2c:c4:fe:c5:a5:37:b7:1e:84:f5:b2:46:f4:
73:60:22:25:4c:aa:a5:90:cc:bb:9a:e0:4d:9b:58:c9:37:37:
b6:ac:89:bc:41:90:e3:2d:dc:00:58:8d:d1:06:31:7f:44:ff:
6d:21:c9:dd:cc:ed:84:52:1e:d5:b0:e1:9d:33:ee:b3:cc:37:
82:b5:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:47:19 2026 by rpki-client