Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: qlhi2+OyLlTw7TogpecIX5uFbcs6BieiqzeKTONVWGc=
Subject key identifier: A6:96:DD:02:DE:E7:B6:92:AC:7D:C4:DE:54:14:B9:79:D7:38:BC:0E
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019DDCC3738311B2A9B6F8A028A15FCD3317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 025B
Signing time: Thu 30 Apr 2026 05:01:29 +0000
Manifest this update: Thu 30 Apr 2026 05:01:29 +0000
Manifest next update: Fri 01 May 2026 05:01:29 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: MNgKHq2djlmCj6WoGWh6QRYweEjrELJT9HkBtQbVABA=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:73:83:11:b2:a9:b6:f8:a0:28:a1:5f:cd:33:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Apr 30 05:01:29 2026 GMT
Not After : May 1 05:01:29 2026 GMT
Subject: CN=a696dd02dee7b692ac7dc4de5414b979d738bc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:a7:dc:8d:19:a7:fc:a5:c8:12:e8:eb:fb:
74:ba:3d:67:93:ee:29:54:4a:a1:9f:8e:72:23:9f:
6a:46:5c:60:96:79:29:a5:68:c0:3b:0c:64:54:ea:
af:2d:7a:90:d6:91:c1:89:f8:91:2a:54:70:47:a0:
8c:68:8b:05:76:76:d3:2a:88:62:da:af:d9:0b:4a:
dc:77:16:05:47:c1:b6:40:76:e6:51:de:fe:3f:82:
3b:45:1c:6c:f2:f6:8d:c5:d5:8a:2b:26:63:37:09:
55:b6:1a:54:20:ba:b4:06:d0:a5:1d:f3:6a:01:a7:
d7:41:b2:07:f3:f4:ee:63:82:72:22:52:cd:05:20:
36:07:33:a2:04:75:37:55:ea:34:2f:b4:af:c2:04:
36:97:16:22:7f:ca:e5:ee:e2:44:36:31:b6:1e:6e:
03:3e:33:af:7c:2a:e7:42:99:ee:bd:f2:24:90:0b:
da:ab:ea:5e:33:5a:25:d5:55:47:78:1c:c6:8b:3a:
00:8b:d2:74:b6:f5:03:3b:2c:e6:6b:7c:30:0f:55:
85:84:fc:5c:d2:79:f8:ce:88:8c:10:92:f5:f5:8f:
53:ee:b8:ce:ca:74:13:dd:5c:0d:42:03:1b:1e:7a:
4e:14:d5:8e:39:3a:b7:1f:60:3f:b6:df:61:78:cd:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:DD:02:DE:E7:B6:92:AC:7D:C4:DE:54:14:B9:79:D7:38:BC:0E
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0b:7e:e0:ff:eb:f6:e7:fa:06:ab:78:f2:7f:73:d9:85:2f:
03:65:3d:c1:f3:37:4f:b1:8c:b4:de:64:10:09:56:ab:2d:76:
65:0c:e3:92:bd:b3:6d:5d:08:3b:d5:49:7f:f0:f4:09:ba:57:
2b:b1:23:79:5b:4e:a2:e4:e6:1c:be:db:47:22:2c:c9:a5:07:
d6:ed:80:69:c3:fa:2c:31:5f:78:01:80:0c:15:95:ce:23:23:
4d:f3:2a:d0:bd:47:cb:63:0e:cf:0f:e3:f8:e9:d3:6f:e8:35:
d5:8c:ae:96:f2:73:37:ed:13:39:bc:ce:60:67:b2:ff:dc:b9:
e1:ff:8b:0a:11:3e:8c:4d:bd:4a:31:49:fc:17:61:22:15:ff:
cf:5b:09:ae:e2:01:c4:61:58:3e:2b:c2:3b:12:65:9a:27:c7:
00:8f:bd:d9:f0:54:ec:ee:b2:21:63:15:cc:40:2d:5c:21:fd:
c0:32:b8:8d:7b:0b:95:6a:40:fc:4e:9f:93:e7:b1:e3:26:e6:
1c:14:b5:a3:48:7e:1c:b8:6b:ff:c0:cc:d4:b8:7f:a0:e1:5e:
2d:b7:74:b4:52:97:b4:6e:13:79:6c:54:2a:7e:22:06:24:20:
c5:96:73:4f:44:93:58:38:f8:6e:28:df:42:23:02:b9:b0:47:
bc:4c:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 14:07:53 2026 by rpki-client