Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File: Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier: X7WrqwFeZdUL1uWS+yNrLPX4G2RPkJmOZtKiCcTY8Qw=
Subject key identifier: 39:D6:3B:7B:4D:25:BA:6A:F8:04:32:34:00:E8:CD:E2:71:FB:52:6F
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019E1ED9E707F94C4658C9AB8446B4FAA579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number: 0CF2
Signing time: Wed 13 May 2026 01:00:57 +0000
Manifest this update: Wed 13 May 2026 01:00:57 +0000
Manifest next update: Thu 14 May 2026 01:00:57 +0000
Files and hashes: 1: CzW4u1rrcKCYl0G03vqU8cBXz94.roa (hash: /yz/XIWJQxzaieHj+TVvT11gZyxGejhib5PYK9y3aXc=)
2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: 4Hl9KbiFdnBjNhGMKNxEoiBf9l4jF3CN7G8r3f0kb2k=)
3: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:e7:07:f9:4c:46:58:c9:ab:84:46:b4:fa:a5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: May 13 01:00:57 2026 GMT
Not After : May 14 01:00:57 2026 GMT
Subject: CN=39d63b7b4d25ba6af804323400e8cde271fb526f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:5e:53:fc:d4:06:44:ca:94:8c:1e:28:4c:
69:75:f6:08:89:a4:38:f9:2e:83:55:36:31:f1:b9:
f2:6f:44:07:60:d8:72:78:a0:e2:ec:9a:3a:b8:d7:
55:24:3d:ef:33:1b:f6:ee:cb:97:ec:8e:e6:58:a1:
35:df:74:49:1f:49:5f:f9:bf:6a:3b:71:e8:29:90:
7e:af:48:26:b2:32:41:18:24:ed:97:9c:8a:15:d5:
2a:59:31:f7:81:5a:63:69:56:65:a2:c0:7b:02:28:
9d:3e:11:42:f7:76:0a:6b:9d:b7:d5:a6:1a:87:4f:
69:bf:bb:75:1b:fe:0d:e6:b9:6a:9d:34:dd:3f:2b:
62:1c:d0:2a:57:e9:40:b5:d6:95:6c:1f:c9:5a:24:
00:64:0b:ff:a5:39:08:5d:cd:a1:73:b2:b6:d5:53:
04:4a:04:bb:34:39:8a:56:23:a4:4c:2d:99:31:09:
c9:a0:3a:00:08:b9:8b:7f:c1:a0:c3:dd:b0:d0:e7:
19:e6:6f:83:2c:0e:4b:63:ad:be:be:78:7d:db:78:
27:20:31:d6:89:b7:ee:04:82:a7:5d:e0:fd:aa:c8:
0e:4a:a6:44:5a:5a:71:73:ee:c2:1b:90:72:bb:ab:
88:65:b1:eb:4f:f4:02:a5:8a:22:49:e5:1d:f9:0f:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:3B:7B:4D:25:BA:6A:F8:04:32:34:00:E8:CD:E2:71:FB:52:6F
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5f:00:e9:98:3b:53:7c:0f:ae:7f:95:a8:a6:83:1c:b8:23:
f7:49:68:01:95:10:56:38:6f:22:cc:2f:f1:e3:c5:1f:66:03:
41:46:97:d8:e8:d6:5d:f8:ae:3c:cd:bc:96:76:c3:fd:08:92:
65:af:bf:d7:45:54:c4:b0:4f:ff:bc:78:0d:3e:6b:21:c3:7a:
da:ec:60:e7:00:84:c7:21:8a:f2:9d:57:f5:7a:8c:f9:1b:27:
57:b3:fb:f8:4b:25:aa:83:e6:25:10:e7:b7:c2:fa:58:6b:a3:
db:99:b2:cb:15:a6:6f:96:07:16:07:a7:78:02:3e:aa:c1:5f:
58:f2:ce:9e:0e:30:d1:dd:e1:d2:28:ba:ed:3c:2c:f9:03:42:
5e:52:7b:56:31:0a:92:76:5d:43:24:d9:0a:73:80:ed:80:1e:
5c:25:11:e3:1b:fa:06:54:ef:b1:58:8e:31:62:f4:f3:6e:69:
4c:10:2f:1b:84:a8:5e:9b:80:d5:d0:e6:f9:07:56:8f:76:91:
f1:be:c2:b0:65:d0:37:13:83:07:ab:b5:87:10:6d:ee:85:df:
ff:6b:20:bb:c8:e5:d8:44:f8:44:80:49:b2:42:2c:9c:9a:03:
92:d6:af:5f:3a:06:c5:66:f4:17:c9:ac:fb:b7:03:85:dc:53:
ca:c4:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:51 2026 by rpki-client