Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: yGKhVPTzb2KkVpla2KpNkA8fOszJibjS8Z0HRbE4mHA=
Subject key identifier: 3B:70:CB:84:7C:9D:DC:62:EB:DD:B1:6C:20:36:02:F3:1F:7E:AF:DF
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 019E1DFDFAEE59E318F1D61FC2B1B6CA4061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: 058E
Signing time: Tue 12 May 2026 21:00:44 +0000
Manifest this update: Tue 12 May 2026 21:00:44 +0000
Manifest next update: Wed 13 May 2026 21:00:44 +0000
Files and hashes: 1: 5sjVZOffDC3SdMXl3xj-LISTTRA.roa (hash: NgYO+E9uip8I6LBuV26/SjtRZiAA/mIEsqO23fxRKZo=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: oWL/7eOm5K66QpWmB0bl3t1Z6moRjojWrGgfSi8bIqw=)
3: UZ8MoagtWKlsIsRGsjso-iozLGw.roa (hash: dnetz1uWniSUYV1OlTPjy0Ix9dXrnsa95CDJdNzqlUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:fa:ee:59:e3:18:f1:d6:1f:c2:b1:b6:ca:40:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: May 12 21:00:44 2026 GMT
Not After : May 13 21:00:44 2026 GMT
Subject: CN=3b70cb847c9ddc62ebddb16c203602f31f7eafdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:65:15:b7:dd:2c:85:4a:b1:32:1e:f5:7b:
28:53:18:84:52:f8:30:d7:3f:37:bf:43:bb:f6:39:
4e:98:41:cd:a4:96:b8:fa:da:05:fa:b1:d3:13:1a:
12:e5:7c:dd:b3:60:b3:6f:2a:c7:c9:94:2d:5d:08:
af:90:67:4b:50:b4:ee:a8:47:c2:59:aa:cf:01:c5:
40:31:8e:ac:10:ca:39:a4:a2:4d:74:87:7d:0b:92:
c7:38:2f:60:c5:a6:fd:c6:d5:dc:b3:68:98:3b:7c:
4c:f1:5c:21:61:2b:b2:e6:7a:9b:9d:8b:62:c2:c0:
67:66:fd:8a:f1:95:ee:85:a2:84:bf:06:b2:c3:e0:
6b:32:5a:da:f9:77:3c:a7:3f:28:3e:44:cf:65:81:
2c:d4:cd:af:eb:9b:a1:1e:a8:1a:c9:36:3c:5b:96:
ea:f8:9e:4f:c3:91:d5:a6:e3:85:c4:fd:1e:39:9d:
44:35:6c:32:98:61:77:31:3e:6c:d0:81:b9:40:77:
eb:4f:d9:ed:57:4e:51:ee:6a:24:08:76:74:4c:73:
b1:82:82:7c:44:6f:61:9e:12:dc:0d:b3:17:b9:ad:
b1:db:06:e0:0b:1e:95:f1:b7:c1:92:e8:22:8b:85:
19:2c:2d:d9:0a:7e:b8:a5:9e:76:b3:a5:72:20:07:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:CB:84:7C:9D:DC:62:EB:DD:B1:6C:20:36:02:F3:1F:7E:AF:DF
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:30:3a:f0:3a:e1:c1:f4:e7:e5:1d:28:b2:14:31:ee:f1:01:
68:ed:e9:99:29:2f:72:2b:34:d2:2a:4d:45:32:db:42:eb:9b:
1d:e6:f2:41:09:59:c7:c3:41:3b:90:c1:d8:e5:bb:46:7c:cf:
fd:4f:de:a5:34:01:14:d4:9a:77:2e:64:4c:42:63:43:e0:8d:
fa:05:ec:83:1c:97:7f:c9:34:8f:34:b2:37:f4:66:9d:d1:89:
32:89:11:c6:ea:b9:c6:93:aa:77:7a:53:ef:e0:ba:7a:e7:62:
5d:ae:b1:47:4c:4e:56:9e:c3:94:86:9f:62:1d:79:88:5a:dc:
1a:e8:96:d3:e3:73:c4:8e:fe:21:5e:28:1c:36:a2:33:e2:81:
39:06:00:3f:b1:0d:ac:db:a4:fb:d5:80:7a:08:86:24:02:8a:
ae:f8:73:65:53:d9:53:40:68:9b:be:12:f6:cc:51:be:96:eb:
e1:17:5d:b1:be:69:cf:72:d6:23:dd:64:c9:c7:14:08:4b:c5:
92:af:f5:fc:c6:ed:da:55:08:73:ee:e3:0b:dc:ba:93:2e:5b:
78:d9:b3:fa:9a:90:5b:71:07:d6:ed:90:c8:dd:09:e4:a0:cb:
e0:7a:80:be:25:12:d7:e1:b3:13:5a:c2:bf:fb:d9:2e:06:29:
b6:99:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:23 2026 by rpki-client