Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: J6Cc0MnRbYnbevOvVqjXU1BiCf/9YjxWRN6XbNe79kA=
Subject key identifier: BD:65:A3:EB:A0:16:05:AD:03:C3:82:C8:23:5F:BF:1D:C4:DD:97:B9
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 019E1E6C90DD2A858FEAC3A7F0187D6F759D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 23:01:31 +0000
Manifest this update: Tue 12 May 2026 23:01:31 +0000
Manifest next update: Wed 13 May 2026 23:01:31 +0000
Files and hashes: 1: 17NcvApuNSXy7j6b0yleIlW66rE.roa (hash: ELqpc8rB+esi/WJGkFsbXdMD1AmM+2FxKPDU9lOV9eY=)
2: M_-1yevGXxmg89kgZZwEjkECaGQ.roa (hash: Vo4/wHw48EoLaCQHDcS1MW43X+9bXlGsuQH6qGMPLug=)
3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: 4wj94SVHAg/I5Bw2H/JqjvJy79oamTF4IGEwSaplcr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:90:dd:2a:85:8f:ea:c3:a7:f0:18:7d:6f:75:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: May 12 23:01:31 2026 GMT
Not After : May 13 23:01:31 2026 GMT
Subject: CN=bd65a3eba01605ad03c382c8235fbf1dc4dd97b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:76:50:2f:34:c0:9d:9c:06:79:cd:0c:b7:
a4:e4:91:b6:da:d0:8e:d4:cf:30:2b:73:00:53:64:
f7:86:0d:23:8f:92:2c:4d:3d:35:b3:51:77:5f:30:
1d:17:ae:fe:25:d4:c8:6f:7e:bb:a7:29:12:a4:92:
45:d7:3f:e6:2c:3f:b9:02:33:fb:83:04:fd:8f:45:
1c:06:9f:7e:54:70:21:e8:54:e4:1c:15:d9:43:18:
0e:3b:2e:8c:0a:f8:6f:70:f7:4d:c1:e1:ba:03:b0:
7d:3c:fe:61:66:93:b3:98:da:ad:ef:f4:eb:ae:f1:
07:43:30:ed:38:18:db:7e:c8:e6:14:42:01:79:d2:
b1:12:4c:c6:c0:38:4c:22:f0:c6:04:a1:3a:ac:56:
c4:c1:9a:c3:a7:5e:a8:77:bd:0b:0a:57:a3:8e:04:
43:12:69:4f:f0:08:58:29:00:db:7a:dc:b4:97:54:
64:d6:78:be:35:4f:4d:ea:c7:41:27:ab:c2:89:68:
a3:d6:2f:1b:30:1f:ae:31:0e:c4:31:c7:16:dd:61:
0c:6d:3b:fb:d9:52:91:cb:64:7a:9e:60:88:7b:d1:
70:81:8b:f0:b0:d4:70:5a:d6:60:bb:3f:06:77:83:
3c:bf:f1:07:54:ce:b1:7e:09:93:04:f5:08:1b:59:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:A3:EB:A0:16:05:AD:03:C3:82:C8:23:5F:BF:1D:C4:DD:97:B9
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8e:47:38:67:ef:92:54:b5:d8:94:91:fd:98:b8:18:0a:b0:
b1:1a:1a:ae:ab:65:c4:ca:e7:af:7b:62:f3:35:8e:0a:04:90:
b9:35:73:03:cd:68:da:4c:de:e3:78:b2:7f:c7:59:84:22:0b:
68:8a:2d:44:92:42:d8:98:0d:58:ac:b3:c4:70:53:b1:2e:66:
a7:ea:86:b4:1a:2b:3d:93:b3:27:ec:f7:1b:1d:8a:53:b2:c1:
47:d0:32:9f:3d:1e:41:84:cb:d7:53:ff:87:ac:3e:01:52:1a:
90:25:eb:fd:19:19:e8:ad:56:4a:80:90:93:01:71:bb:92:6b:
8c:e9:59:b3:b3:e9:83:08:90:19:8e:6d:f6:cf:3f:cd:db:5e:
f8:98:40:8f:79:ae:dd:bb:4f:58:73:b8:66:54:8f:c9:bf:f7:
28:f5:b4:37:f4:a6:cb:27:84:80:76:51:e9:59:da:e9:1d:62:
84:d2:07:34:ad:5d:23:db:c1:71:0a:9e:7e:ba:27:a0:f3:d6:
a7:df:80:28:3c:ef:4b:54:04:37:a1:9f:51:50:b4:0f:88:6b:
40:ca:d3:0e:b9:c5:ae:c9:e7:7b:42:6b:69:e0:a1:be:95:fe:
2c:18:f6:84:ff:8c:4f:4e:81:3c:5a:d5:41:da:de:0c:78:0a:
0b:a0:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:53 2026 by rpki-client