Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: ryuwt8rVTvUqFPn6sUfxzQkp4+PoZ4DmJ+H3IohMPDw=
Subject key identifier: F0:81:10:07:38:BA:AA:6E:13:D9:5F:2A:F7:F8:0A:C4:43:03:5B:76
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019E1D9003FF467DD739B36244B6725DFED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 190E
Signing time: Tue 12 May 2026 19:00:37 +0000
Manifest this update: Tue 12 May 2026 19:00:37 +0000
Manifest next update: Wed 13 May 2026 19:00:37 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: ksy5wiJFQCk6GldFdakgPObT8HzwuPKk0R7Q2LCrc+o=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:03:ff:46:7d:d7:39:b3:62:44:b6:72:5d:fe:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: May 12 19:00:37 2026 GMT
Not After : May 13 19:00:37 2026 GMT
Subject: CN=f081100738baaa6e13d95f2af7f80ac443035b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:61:75:87:55:24:56:8c:57:44:11:12:15:
e1:9d:af:de:33:ee:81:fa:e8:4e:5b:82:56:bb:3e:
2a:88:9b:30:9c:78:c2:b8:03:a6:e4:0c:6e:00:f3:
83:12:56:c7:2b:a1:3e:20:28:57:6d:b3:83:25:23:
5d:a6:8b:fd:f3:a1:69:3c:19:f6:d0:bd:67:76:15:
ce:a5:b4:2f:bb:fb:ca:4a:d9:be:bf:5c:a8:9d:a1:
e0:22:47:2a:4f:14:77:1a:2c:2c:2f:29:12:89:36:
03:bc:9f:cb:4a:00:df:9e:e3:6c:bb:28:5f:f7:6d:
b2:15:6b:33:b5:f5:47:14:26:92:c6:36:ee:0d:a9:
8b:cd:ef:3b:eb:76:8a:8e:6b:fe:28:25:33:98:15:
10:d0:b1:a0:3d:c5:4f:a8:80:39:cd:a8:76:38:e2:
c4:46:c2:85:21:16:84:45:bd:e4:fd:e2:d2:bc:21:
66:dd:db:64:34:b2:9c:bd:5c:17:fb:c5:5b:86:8a:
ef:07:35:7c:40:3c:8c:7a:c9:cc:a5:d6:ab:f7:64:
00:2d:4b:0d:fa:d0:2f:6d:e6:db:0c:67:24:16:04:
5c:78:ec:49:6f:2f:b7:b6:4b:5e:7e:6d:97:35:7e:
08:ea:e3:81:20:fc:b1:81:45:cb:f6:95:68:c6:2c:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:10:07:38:BA:AA:6E:13:D9:5F:2A:F7:F8:0A:C4:43:03:5B:76
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f8:27:34:c3:23:4e:79:ec:8e:d0:f3:a6:71:69:e6:65:db:
e5:c6:e4:04:9e:32:c8:16:ff:77:fb:46:7e:21:1f:c1:db:16:
42:48:35:b5:ac:23:fe:59:6a:d0:24:2b:36:25:d0:40:33:02:
81:53:22:a9:d0:ca:b6:49:e8:2c:7a:c5:97:10:2f:16:32:d6:
31:f3:dc:8f:8c:39:b5:af:85:94:e9:4f:76:9e:09:8d:a7:17:
72:1a:d4:2a:25:9c:84:34:ef:79:61:cb:88:7d:18:29:52:7f:
3a:2e:a3:43:49:ab:7b:f1:b2:64:a3:e1:38:d5:87:3c:23:c9:
ce:f9:98:87:0e:04:d4:de:f7:fb:65:a3:6b:25:0f:90:72:69:
53:43:e4:f4:6b:04:83:3d:c6:ec:5f:7b:c7:b7:55:d0:77:2e:
1e:0c:4c:fc:21:46:dc:a8:19:a3:ab:e7:a4:a0:ba:7e:88:fe:
d0:f0:eb:57:54:05:3c:72:81:d2:8f:60:0a:d2:85:fc:4f:4c:
0b:d2:2f:6d:d1:86:79:34:51:a9:e1:9e:2b:fe:8e:7b:2b:c4:
89:d6:65:cf:f2:49:06:5c:e8:b7:d7:b0:36:0d:50:91:b2:bb:
b2:08:bb:ec:de:3d:0b:aa:11:2e:3e:0f:6f:b1:7a:01:9d:b8:
92:86:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:13 2026 by rpki-client