Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: WmVgUCEuyavtrqzBuwzfqD9dz166xZMBnNcommhbNhw=
Subject key identifier: 70:BF:AA:14:D1:2E:8C:27:B2:E8:EF:B7:16:F3:42:92:92:03:C6:A6
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 019DB021DEC2D53E561817925ACAD994237A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 18CC
Signing time: Tue 21 Apr 2026 13:01:42 +0000
Manifest this update: Tue 21 Apr 2026 13:01:42 +0000
Manifest next update: Wed 22 Apr 2026 13:01:42 +0000
Files and hashes: 1: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: CQ0wQwm+DGrpwCr/NLI1gNatyLSORzh5t91wFEQrVOY=)
2: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (hash: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs=)
3: nkIfu7bImABod5-85N1FwAXx42g.roa (hash: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc=)
4: uHGjwPoMHu2IEBccrs2elf1N18A.roa (hash: g4Yg85Lk+WZoS7yWIAuAp+ehz/I0N5gf+zz3O65XQ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:21:de:c2:d5:3e:56:18:17:92:5a:ca:d9:94:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Apr 21 13:01:42 2026 GMT
Not After : Apr 22 13:01:42 2026 GMT
Subject: CN=70bfaa14d12e8c27b2e8efb716f342929203c6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:db:7f:4a:2a:f2:98:64:f7:41:73:8f:77:
c1:79:aa:c8:3c:6b:25:58:09:1a:53:42:3a:a0:2c:
f4:07:e0:a8:0b:5d:50:2c:bd:76:81:9b:1f:ef:75:
30:73:a4:05:30:a0:11:7b:b6:5d:91:0e:c7:d6:b5:
b2:4a:83:73:07:3d:05:79:0c:1c:e7:97:fc:40:7b:
dc:20:c6:f1:8e:83:2c:31:4c:13:0c:f1:13:ce:87:
d2:86:7f:03:4a:7f:7f:58:fb:34:fc:4b:dc:cc:99:
c9:9b:e1:e6:2d:b3:b2:ba:90:4a:f6:50:0b:7b:e2:
29:9c:41:7b:38:e8:5f:0c:05:b5:36:7d:a8:75:ac:
75:3f:47:79:cd:7a:5a:fc:02:20:d4:b0:8a:e1:c3:
d0:5f:57:09:b6:b0:3c:66:95:f6:4f:f3:62:de:47:
f2:8a:47:2a:08:f4:93:70:44:44:08:40:bf:a1:97:
c1:54:c4:7d:e2:e8:1d:fe:d3:93:df:05:0c:31:bf:
18:76:23:44:a0:4e:61:0f:54:4c:6c:bc:25:06:7e:
c0:66:66:56:1c:17:45:61:69:e3:eb:ba:21:e1:73:
03:31:7f:fe:24:73:96:53:f7:8e:dc:37:ee:1e:f7:
9c:e5:26:33:5f:a7:bb:a6:be:fa:52:4c:30:8b:4d:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BF:AA:14:D1:2E:8C:27:B2:E8:EF:B7:16:F3:42:92:92:03:C6:A6
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:39:22:11:62:55:70:06:f8:34:84:55:4b:d1:41:58:3a:c1:
f2:33:cd:c1:9c:c0:e3:c2:5f:7a:7c:f1:fc:c3:3c:43:df:ca:
1e:31:fc:c2:fd:02:ec:ee:01:90:8a:9c:16:3f:31:bb:01:0d:
e5:9a:a1:2c:ae:e4:ce:ac:46:cc:2a:49:26:76:c9:14:7c:84:
e8:2c:33:aa:54:ee:c0:4b:58:97:31:67:68:33:ed:b2:91:f0:
12:4a:cc:42:65:35:c6:a2:41:a6:f2:ff:4d:ea:c8:cd:f0:a0:
33:d4:b9:20:5d:ea:62:37:f8:12:ba:16:24:cc:92:10:5c:4d:
fd:0b:ca:3c:19:be:24:25:98:61:a4:5b:fd:30:65:20:69:1a:
70:4a:17:ea:00:f7:7e:bf:de:18:2a:00:21:11:c6:1d:7b:9e:
65:1b:86:85:aa:78:d8:e6:b3:65:d3:71:e3:a7:f9:28:86:61:
10:c8:a0:96:2f:80:dc:02:7f:8f:78:b2:ee:bd:7c:de:26:54:
ed:89:21:37:ba:c3:e9:c9:dc:68:7b:1b:b5:b8:73:4d:cf:99:
6e:fe:19:f5:d4:20:61:30:40:0e:0a:43:a2:a5:6b:85:73:13:
19:bc:f9:c9:66:6a:94:0c:1b:d3:64:3f:55:47:b9:69:07:76:
01:af:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:04:02 2026 by rpki-client