Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: T71WY+2DolI8fRTu1GrAuJsWekJkhfvB1NHyFhOadv4=
Subject key identifier: B0:09:55:EB:E7:92:83:22:AF:9F:D9:5A:40:E7:DB:4C:75:E0:85:F9
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 019E1F10F31FF94B745B14AB7701E5A9745B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1556
Signing time: Wed 13 May 2026 02:01:04 +0000
Manifest this update: Wed 13 May 2026 02:01:04 +0000
Manifest next update: Thu 14 May 2026 02:01:04 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: 9D8H9BpIIQfVGYy0coO4lC1O74kZwY5tVV2Gngmg4bc=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:f3:1f:f9:4b:74:5b:14:ab:77:01:e5:a9:74:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: May 13 02:01:04 2026 GMT
Not After : May 14 02:01:04 2026 GMT
Subject: CN=b00955ebe7928322af9fd95a40e7db4c75e085f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:81:68:5c:ff:c2:30:08:09:62:a2:d7:6c:
28:92:48:24:b5:9a:ae:72:4e:a7:a0:3a:b3:93:1d:
16:c2:bc:0f:bb:54:cd:d6:a8:92:96:0e:11:99:be:
c3:db:dc:f6:b9:5a:3b:93:47:67:d8:3c:98:cb:34:
f7:0c:20:07:b9:18:bf:07:5a:ed:69:29:00:04:e5:
24:65:e9:b3:90:0a:c4:fd:00:db:da:81:82:6a:13:
02:1c:38:65:9e:8f:0f:8c:39:ec:c4:d4:69:47:c2:
d6:5d:7e:e6:ea:de:b7:38:e2:2e:db:d4:ca:76:08:
90:34:ad:e3:7c:ed:c5:fe:77:4c:5f:e3:ab:1f:75:
88:61:01:0c:0a:67:8b:78:d5:d7:38:58:f0:54:0c:
8e:e5:35:31:33:b3:1e:5d:3f:12:36:db:67:6b:35:
61:4f:ab:19:1b:be:36:38:a8:88:b5:4f:c9:1a:cc:
15:cd:da:88:af:be:69:07:63:07:cb:52:b4:36:d3:
21:78:4c:62:ca:11:d5:7a:fe:d0:e2:40:e9:ef:6e:
98:39:e3:55:d6:ef:2c:6f:07:06:33:c9:b6:af:0a:
a4:7f:01:24:24:21:5a:95:70:e1:eb:1e:c3:22:b5:
0f:fb:92:36:6d:d9:1b:8e:d6:9a:46:11:f8:13:bd:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:55:EB:E7:92:83:22:AF:9F:D9:5A:40:E7:DB:4C:75:E0:85:F9
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9b:82:77:e9:ce:df:fe:ce:e6:7e:b2:dd:1b:6d:22:c9:1d:
b8:fa:15:51:a0:63:5e:e7:96:8d:38:79:3d:f9:ad:fd:c0:a6:
45:d2:70:08:1a:de:f0:e6:cf:89:49:a5:b6:0f:e8:fc:ba:b9:
26:5f:f2:87:d0:a3:db:d1:36:12:d4:5b:e8:6a:72:62:30:69:
ba:83:3f:68:32:32:01:3c:00:21:79:e6:0b:b9:3f:36:a5:21:
03:61:ed:7a:77:c0:08:ba:ed:20:cb:6e:8b:0b:6c:bf:79:8c:
a7:32:f4:89:19:7c:a2:20:bf:b7:2f:3d:49:af:76:10:76:13:
46:1b:26:2c:1f:8c:73:b7:6f:bd:06:c9:ff:9f:e2:1e:8b:30:
2b:09:1b:ea:63:b1:b6:aa:c3:73:5e:32:10:4b:a0:0d:c7:eb:
d3:ae:d9:02:a0:11:34:b8:89:64:50:30:67:59:57:a7:2f:07:
fd:1d:68:5d:f3:c7:f2:80:ce:43:b8:83:d1:fa:8e:4e:2e:20:
a8:b0:69:69:23:89:51:47:57:a5:00:43:a2:34:83:56:16:9a:
02:7f:bc:5a:dc:fe:70:87:02:76:f1:95:9e:63:bb:cd:e1:c7:
89:da:1d:2a:bd:fd:fc:f2:97:fc:46:8a:26:4a:1f:19:22:14:
eb:b4:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:57 2026 by rpki-client