Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: p+dvl7S4HMcv9uIdJP2/CXCVOQVzQ2E1tZ3KH69b3h4=
Subject key identifier: 16:A1:0A:C6:08:C3:87:0F:DF:56:50:38:48:7D:89:28:50:E4:56:AA
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019E20FF6D827AED400E42FA39052347194B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0D03
Signing time: Wed 13 May 2026 11:01:11 +0000
Manifest this update: Wed 13 May 2026 11:01:11 +0000
Manifest next update: Thu 14 May 2026 11:01:11 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: 5DlGOOAgDMWA8Usag1BcNb6GG6mRI/QcotKAcKDjCDM=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:6d:82:7a:ed:40:0e:42:fa:39:05:23:47:19:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: May 13 11:01:11 2026 GMT
Not After : May 14 11:01:11 2026 GMT
Subject: CN=16a10ac608c3870fdf565038487d892850e456aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:33:8d:8d:b9:a1:aa:13:9c:88:c7:6e:d7:
ca:f3:28:f5:cc:f2:b8:03:2e:19:fb:3c:03:93:e3:
c4:cb:74:57:18:3b:7c:a0:bf:b9:4e:b4:de:45:bb:
7a:13:af:6a:9f:71:2a:87:00:56:ef:bd:0f:08:2e:
56:f4:9b:fb:57:2e:62:b6:9c:67:22:c2:95:a7:c9:
ce:2f:98:c3:dc:f5:6e:d0:20:f4:d9:4f:0f:c6:61:
30:6b:88:4a:c3:da:fe:4b:5a:0d:64:6a:b7:50:17:
89:04:d7:80:bb:f8:cb:0e:b0:21:e0:0c:43:e6:8e:
0d:24:c4:f5:21:75:ad:4e:7d:58:5c:27:6b:15:7c:
f9:54:43:cb:6c:e4:e3:49:ed:bb:a0:b0:85:14:a6:
d3:a0:14:89:59:1e:4c:b9:60:c4:80:f7:38:60:24:
a0:dd:1b:cc:6d:64:d7:87:cc:da:bb:f9:0d:bf:31:
f6:94:b3:cf:75:60:42:71:5b:67:76:9c:0b:39:4b:
d0:b4:34:8e:24:84:72:7e:39:75:af:52:c8:2c:4e:
60:9a:e5:23:9a:54:d0:fc:b3:40:b2:de:1a:ba:54:
6c:9e:dc:39:c9:7f:5f:7b:32:08:f9:eb:ab:40:8a:
a9:de:6d:fd:df:fa:28:8c:c8:cf:b3:7f:1e:67:03:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:0A:C6:08:C3:87:0F:DF:56:50:38:48:7D:89:28:50:E4:56:AA
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:54:e1:65:95:53:5a:d2:dc:c1:97:dc:3f:8c:db:57:51:5a:
24:7c:41:48:6b:4b:6e:d9:ff:98:78:80:81:cb:23:ad:bb:db:
35:e7:8c:15:5d:df:29:28:35:2b:e8:b8:2a:2d:89:3c:06:c1:
ef:2c:bd:cb:e0:21:a6:3a:3e:66:b1:e9:e4:14:af:30:f3:95:
b9:8e:45:9b:17:93:1f:69:b3:af:b5:66:60:be:ff:a1:89:b4:
cf:37:1c:78:0c:d8:4d:43:65:94:3c:5d:41:56:ae:5c:14:e1:
31:29:63:22:a6:a4:56:0b:53:a1:2d:6f:25:2b:a4:6e:8a:09:
c4:65:08:e4:2f:e8:44:3e:40:e6:92:31:ac:05:ab:bc:d5:71:
cb:d7:dc:8c:3f:e9:b9:20:3e:00:b3:30:48:c4:60:7e:23:be:
8a:9f:72:1d:b3:8d:05:66:3e:a3:22:ad:c2:18:dd:5b:06:f9:
cd:b1:bb:99:7a:8f:f4:6d:54:93:07:57:8a:bd:23:b1:7b:ec:
bd:cb:ca:91:d5:4f:71:2d:86:b5:f2:35:0a:ff:fe:18:71:66:
f8:4b:59:55:b9:91:7d:50:ac:aa:dd:5c:48:4f:87:a7:68:f3:
6b:3c:f9:9d:33:18:92:6c:4f:31:fc:fb:9a:34:e4:79:b4:e2:
73:31:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:47 2026 by rpki-client