Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: C6k1/SL1S71nWYh5SOabTI3SnrFfbIq+n/lV4Ndv7HY=
Subject key identifier: 20:E8:4A:5E:F8:EB:03:4C:EB:9E:4E:EE:A1:69:F4:E9:F9:A1:A7:27
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 019E1E6C9BBDF723514E6D3CD5BA44CEC852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 23:01:34 +0000
Manifest this update: Tue 12 May 2026 23:01:34 +0000
Manifest next update: Wed 13 May 2026 23:01:34 +0000
Files and hashes: 1: VQMozEw5e5cFbAbax7TNnFtChpk.roa (hash: kcI4JK6ZQqSjrwXa7nCut12JkcTP0x/T3dN3B6kDSUw=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: e7/LrD96AGs+6k5yX+yb9Zaww7zAX0SK0cdniprXicM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:9b:bd:f7:23:51:4e:6d:3c:d5:ba:44:ce:c8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: May 12 23:01:34 2026 GMT
Not After : May 13 23:01:34 2026 GMT
Subject: CN=20e84a5ef8eb034ceb9e4eeea169f4e9f9a1a727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:3c:19:24:c9:0a:ab:7d:dc:c3:d4:99:d8:
85:5e:03:bf:f8:f3:91:bd:68:ae:dc:98:aa:68:58:
5b:c9:2d:a0:1a:aa:fd:65:5a:c7:a7:ac:32:eb:fa:
1e:59:39:f2:1a:64:02:f6:e2:77:3f:d1:31:ea:12:
81:9e:bc:3d:33:8d:46:c7:de:cb:b7:61:a5:ba:2c:
38:eb:bb:3b:d4:dd:97:0b:56:8e:ae:1c:de:c9:fb:
a4:93:46:55:a0:d4:b5:50:94:52:58:0b:97:0b:f7:
cd:5e:e1:cc:60:3e:de:1e:b6:0b:84:75:b4:26:3b:
d0:b2:27:48:86:f3:9d:89:70:31:39:a6:04:6c:33:
11:9b:02:4e:1b:cb:c6:e8:d5:07:7a:44:db:76:0b:
5e:17:2f:02:61:f8:68:f7:24:9c:03:64:e8:83:8c:
d9:2d:52:c2:1c:0e:26:d6:6f:71:ee:03:c0:0a:2f:
45:a6:01:b9:d5:b0:ce:98:d4:8d:71:8b:19:8b:c1:
ec:a4:cf:2b:c5:11:e0:4b:f5:dc:a2:88:b5:9a:95:
6a:04:2b:53:5d:a4:e7:b0:34:4a:00:5b:07:8f:6c:
5b:8f:05:4e:f2:0f:74:c8:5f:a6:72:53:20:79:75:
64:ce:d7:0b:ec:99:0a:c5:04:cd:31:30:39:46:cf:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:4A:5E:F8:EB:03:4C:EB:9E:4E:EE:A1:69:F4:E9:F9:A1:A7:27
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:9b:d3:d5:f7:2d:36:be:83:a8:31:e8:9c:bb:4e:cc:cd:dc:
01:d7:0d:dc:94:c6:26:99:9e:ef:c1:a9:a8:33:07:c0:82:c7:
3c:72:e8:08:ed:41:86:5e:f0:90:ef:51:a8:e6:3b:e3:68:7b:
e8:4b:1c:2e:c6:93:c1:e1:a3:cf:d2:94:38:c6:04:59:a0:2f:
d1:7d:f5:55:50:56:f3:58:60:4a:e1:6d:b3:90:27:0c:fd:7f:
37:62:91:68:58:50:d0:a1:44:c0:9d:77:63:6e:27:84:44:bd:
8f:c7:fd:41:dc:1b:7d:bb:3e:08:d8:69:84:65:5f:63:74:22:
d7:72:39:df:aa:a2:a4:4d:05:7c:2c:4d:86:1c:c0:01:bb:00:
4c:f1:4e:df:d5:fa:67:88:08:f1:60:18:ad:b4:79:9a:2a:80:
3a:82:ff:b9:02:ac:ca:27:52:27:c2:e5:2f:8c:69:e7:c0:83:
75:c0:be:0c:60:a6:7b:36:0a:76:fe:a7:ed:5b:ab:3a:e7:d4:
2f:9c:f6:32:93:1f:07:0b:9e:50:29:ef:e2:ae:c4:ba:36:44:
3a:e6:43:f3:ba:c7:b1:ec:bf:6b:c9:1b:c0:cd:59:2a:75:f3:
47:59:dc:fc:8d:c6:50:8b:45:51:1a:f3:81:67:1f:41:30:5a:
4d:42:ed:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebJu99yNRTm081bpEzshSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZTg5YmMzMDk3NzY4YWNkNjdjMmRkNzQ3ZDNiZTFhZGI3
MmU5OTcwHhcNMjYwNTEyMjMwMTM0WhcNMjYwNTEzMjMwMTM0WjAzMTEwLwYDVQQD
EygyMGU4NGE1ZWY4ZWIwMzRjZWI5ZTRlZWVhMTY5ZjRlOWY5YTFhNzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzc8GSTJCqt93MPUmdiFXgO/+POR
vWiu3JiqaFhbyS2gGqr9ZVrHp6wy6/oeWTnyGmQC9uJ3P9Ex6hKBnrw9M41Gx97L
t2Gluiw467s71N2XC1aOrhzeyfukk0ZVoNS1UJRSWAuXC/fNXuHMYD7eHrYLhHW0
JjvQsidIhvOdiXAxOaYEbDMRmwJOG8vG6NUHekTbdgteFy8CYfho9yScA2Tog4zZ
LVLCHA4m1m9x7gPACi9FpgG51bDOmNSNcYsZi8HspM8rxRHgS/Xcooi1mpVqBCtT
XaTnsDRKAFsHj2xbjwVO8g90yF+mclMgeXVkztcL7JkKxQTNMTA5Rs/kYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDoSl746wNM655O7qFp9On5oacnMB8GA1UdIwQY
MBaAFKrom8MJd2is1nwt10fTvhrbcumXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMt
ZTNkZDc3NjQ4OWExLzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zMmU2NTAtMGNlYy00MjYyLWJjOTMtZTNkZDc3NjQ4OWEx
LzEvcXVpYnd3bDNhS3pXZkMzWFI5Ty1HdHR5NlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4JvT1fct
Nr6DqDHonLtOzM3cAdcN3JTGJpme78GpqDMHwILHPHLoCO1Bhl7wkO9RqOY742h7
6EscLsaTweGjz9KUOMYEWaAv0X31VVBW81hgSuFts5AnDP1/N2KRaFhQ0KFEwJ13
Y24nhES9j8f9Qdwbfbs+CNhphGVfY3Qi13I536qipE0FfCxNhhzAAbsATPFO39X6
Z4gI8WAYrbR5miqAOoL/uQKsyidSJ8LlL4xp58CDdcC+DGCmezYKdv6n7VurOufU
L5z2MpMfBwueUCnv4q7EujZEOuZD87rHsey/a8kbwM1ZKnXzR1nc/I3GUItFURrz
gWcfQTBaTULtnw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:42:43 2026 by rpki-client