Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: QUblfArxR5NXrqJj4TH5TqNey/SnyJvinLvpySfiXt8=
Subject key identifier: 28:3D:F0:74:A8:EF:45:8B:3B:D5:55:FE:AB:08:A5:59:F0:84:4B:CC
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 019E1D593F7DC1E8A97D5999D87181C9708E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 18:00:48 +0000
Manifest this update: Tue 12 May 2026 18:00:48 +0000
Manifest next update: Wed 13 May 2026 18:00:48 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: W7+nxNtEhTD838F3FgJpuzNTo8hlnNE6PsBIi0CUisk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:3f:7d:c1:e8:a9:7d:59:99:d8:71:81:c9:70:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: May 12 18:00:48 2026 GMT
Not After : May 13 18:00:48 2026 GMT
Subject: CN=283df074a8ef458b3bd555feab08a559f0844bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:bb:5a:7e:4a:a4:86:10:a1:8b:54:01:2f:
3e:21:c1:bc:8b:aa:24:46:be:2f:25:b5:73:a1:2f:
a2:ea:17:94:0a:4d:e8:f5:5c:7b:97:46:41:6b:0b:
45:3d:51:5e:80:aa:cc:93:7d:49:10:0d:22:28:95:
d1:0f:b5:9d:b2:1a:3f:5b:0d:c0:92:5d:55:cc:13:
2b:89:de:7e:6f:ef:e4:73:58:a3:8f:44:db:42:95:
1c:2a:59:e3:fc:a6:94:a5:eb:6d:2a:e6:ee:05:48:
57:77:90:8f:ab:1f:04:72:d4:ee:b1:15:4d:44:1a:
ab:6a:4a:fa:e2:60:dc:70:d9:20:db:e3:91:59:d8:
67:17:11:dc:99:1f:d9:78:fa:04:19:b7:c8:00:45:
9a:6d:2c:0e:98:29:d9:73:cd:21:a0:ec:c2:7a:7e:
eb:1f:d7:38:46:0d:bc:20:1a:59:32:9e:22:e8:e7:
4c:62:ca:9b:62:e6:a9:44:cc:fa:01:34:d1:e0:9c:
00:e8:86:99:3b:2c:33:e3:ed:70:5e:1a:89:84:f6:
fb:aa:12:bb:de:68:28:2e:de:c8:c7:19:86:a9:c3:
0b:31:6f:c4:80:f2:f0:50:1a:f0:ab:7d:48:64:b9:
46:bb:f6:8f:b0:a2:a5:da:63:91:5f:88:e7:97:a7:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3D:F0:74:A8:EF:45:8B:3B:D5:55:FE:AB:08:A5:59:F0:84:4B:CC
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6c:a5:91:e3:ce:db:8c:25:f1:38:31:ac:c2:79:5a:97:bb:
5b:e0:44:d2:05:e6:91:3e:b7:17:66:92:6e:83:0b:b2:5e:7d:
4d:b2:df:0d:80:c2:9b:1e:5a:88:d6:58:a5:e6:cd:8f:de:d1:
e0:c2:1e:0d:0d:13:5e:27:38:7e:1d:05:a0:f7:94:2c:06:55:
4c:00:96:3b:85:9a:76:7c:0f:cf:ff:e0:ae:dd:1f:1a:c2:c6:
0e:dc:81:15:f0:a4:a6:c8:b3:47:b4:65:16:9b:71:ec:07:b0:
e9:a7:24:fa:59:9c:29:d1:04:9e:68:98:f2:fc:0c:45:a5:dc:
f4:05:a2:a0:90:e8:09:d7:21:15:7a:6f:b0:70:47:07:f9:40:
a1:fc:a7:2d:09:5e:63:a5:89:e1:de:14:a9:d8:8f:a3:89:da:
16:6c:be:a5:40:3e:ae:17:4d:a6:c1:b4:e1:94:70:14:00:87:
c1:a8:3d:9f:e3:4b:03:20:89:a3:4b:c0:45:26:4f:c4:70:8b:
c3:b7:67:5e:9f:04:73:d5:d8:01:3f:46:43:38:90:f5:44:9b:
fb:f6:a0:b1:fd:60:5c:e1:43:a0:23:50:aa:47:4c:4d:a4:d7:
18:71:da:c2:f3:ac:ff:37:63:90:8b:33:35:0e:a2:bc:07:d1:
9c:2d:45:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:18 2026 by rpki-client