Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: +Z58OQdNLOFOXMFj21xOjvMQO7Z/FsnBMlcNaXwLxg4=
Subject key identifier: 34:03:07:5B:4A:E8:94:EB:86:A3:55:EF:5C:16:3F:33:A8:43:AD:A4
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 019E20241D025DF27F8D3917400E542FD45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 0993
Signing time: Wed 13 May 2026 07:01:38 +0000
Manifest this update: Wed 13 May 2026 07:01:38 +0000
Manifest next update: Thu 14 May 2026 07:01:38 +0000
Files and hashes: 1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: JooNnBvYR8pp1c6j3ChxdU6E6V8ouJo6KYYX7cjEQZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:1d:02:5d:f2:7f:8d:39:17:40:0e:54:2f:d4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: May 13 07:01:38 2026 GMT
Not After : May 14 07:01:38 2026 GMT
Subject: CN=3403075b4ae894eb86a355ef5c163f33a843ada4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:34:e0:69:23:47:f3:b0:62:9f:ee:a5:53:
e0:ed:fc:a6:ca:af:99:8c:08:08:5f:16:ae:88:31:
36:80:22:65:0d:1a:cd:20:8f:06:f7:39:df:3a:81:
1a:79:10:ca:a6:ff:2a:d8:8f:88:24:25:e1:2e:30:
ff:6e:6f:29:74:28:f4:4d:26:1b:96:50:b7:35:2d:
9a:04:12:47:15:8b:48:9f:17:51:fc:ed:ba:3a:96:
4a:1b:4f:be:40:28:4e:c8:14:cb:7b:1e:9c:bc:93:
46:53:03:26:62:fa:5a:98:ae:c5:0e:8d:34:ee:11:
b2:7c:d0:2e:9e:1a:eb:f7:0a:48:5d:2c:c8:1c:fd:
f9:24:5a:bb:c3:f6:2c:24:bf:8c:35:4a:0a:4e:da:
c4:4e:a9:e9:20:bc:7b:2f:26:ea:bf:a4:f8:03:e9:
94:ef:b2:02:10:d4:a3:5d:29:8f:40:0b:c5:c0:8d:
f0:c0:9c:c7:ed:06:1f:fa:3d:26:85:19:a5:0e:dc:
03:f4:d0:55:a8:98:c7:b1:93:94:64:1b:41:f9:7b:
80:30:68:5a:1c:9f:58:e4:84:7f:4c:9a:09:ac:2d:
8d:1d:34:79:17:a4:c6:69:fa:d8:f1:da:b2:9d:cf:
32:39:04:74:b4:e5:d4:aa:2f:d5:3d:0a:41:5c:8b:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:07:5B:4A:E8:94:EB:86:A3:55:EF:5C:16:3F:33:A8:43:AD:A4
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:40:49:17:e0:d2:14:77:d6:0f:21:a7:51:52:2e:b5:7e:a5:
c2:66:c9:7f:62:a6:6f:40:5c:dd:d7:f3:8d:51:ee:96:31:45:
71:86:29:1d:89:67:c3:c5:21:f5:a2:d7:51:0f:b3:22:62:c5:
96:1d:57:3f:38:b6:a1:27:8b:e9:6b:c7:1e:17:3b:32:30:6b:
d7:34:42:ca:6b:7e:f0:7e:8e:f6:a7:35:79:aa:34:f4:91:a1:
c9:63:80:08:b4:72:8f:8e:f1:3c:5a:87:32:ab:59:5f:6c:37:
4b:6f:14:02:41:e1:72:f8:f1:5f:61:3a:57:85:54:24:80:d0:
03:ec:34:15:94:3d:b2:9a:7c:73:25:5f:12:36:d5:a1:b3:6b:
9c:75:35:37:5c:bb:f7:11:25:67:6b:11:cd:3c:75:75:56:60:
85:5f:af:a4:0b:0d:6b:98:0b:39:fd:ea:00:4c:a2:b4:5a:ab:
ef:32:62:22:ab:59:21:4b:04:ad:ce:52:8a:b3:68:b2:30:78:
fc:f0:b6:8e:4d:c7:62:7a:83:21:d3:74:ea:81:7b:9b:c6:90:
92:58:0a:f7:dc:9c:f0:5f:2d:a7:41:67:ba:3c:58:14:37:0d:
32:06:8d:c0:cd:7b:ac:85:b8:39:ce:ab:a2:bc:88:fd:a5:24:
d6:e1:f4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:19 2026 by rpki-client