Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: Qdr4dG+0yg1VKfZZdYx2chAZvP9ku/BdLZRX4Q1PqCU=
Subject key identifier: D8:77:EE:81:0A:83:4B:05:B3:3F:D8:0B:E3:F3:BA:E2:39:AA:53:9C
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 019E1EA31D4F796A54EB31E9F4AE988A48B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 13E0
Signing time: Wed 13 May 2026 00:01:06 +0000
Manifest this update: Wed 13 May 2026 00:01:06 +0000
Manifest next update: Thu 14 May 2026 00:01:06 +0000
Files and hashes: 1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=)
2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: pFtmsUkxM8RrUszNbQYK2CPfze8ogRSnhWL/nHm3tWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:1d:4f:79:6a:54:eb:31:e9:f4:ae:98:8a:48:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: May 13 00:01:06 2026 GMT
Not After : May 14 00:01:06 2026 GMT
Subject: CN=d877ee810a834b05b33fd80be3f3bae239aa539c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:eb:24:77:27:79:c9:1a:78:12:0c:c8:a6:
a0:c1:13:63:88:1e:4b:c4:9b:bf:39:21:2f:30:93:
33:7d:13:c1:6b:9e:92:31:92:c0:51:6a:9b:f2:2d:
13:55:5c:8a:52:7a:a7:5e:6f:ac:d4:f5:d3:a5:d9:
ae:f3:d9:45:fa:ca:b6:e6:9f:8c:2a:ed:86:25:31:
29:ad:d6:3e:bb:87:08:85:66:1b:a8:a4:8b:16:0b:
cd:76:51:5a:3b:75:f6:c3:29:fd:ac:f6:f5:1e:94:
b6:0e:ac:c8:0f:f6:21:44:ae:a5:5a:47:bf:d1:e9:
77:4a:fd:43:26:53:f8:f6:b9:16:4d:15:21:a0:cc:
2d:6b:ba:57:49:ac:db:d7:c3:c3:bd:0b:f5:b7:71:
8b:bc:90:a1:e4:1c:29:dd:6e:0d:6e:4d:fb:7b:e9:
40:36:d4:d1:9d:93:81:ed:49:99:f2:c9:47:e6:a9:
a2:43:d6:0e:1c:08:b4:8b:10:63:e1:f4:a8:90:ac:
95:2c:cc:72:a0:70:3c:3d:c6:d9:ca:cb:1b:c5:83:
81:d1:10:6d:76:23:9f:6b:63:bd:ca:c5:3a:4a:71:
de:35:d0:fb:d8:9b:c1:f1:23:62:4d:c1:88:0d:f8:
a4:d2:f5:dd:43:11:e0:45:cc:a9:3f:dc:99:22:53:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:77:EE:81:0A:83:4B:05:B3:3F:D8:0B:E3:F3:BA:E2:39:AA:53:9C
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e2:80:31:34:f3:ed:a5:29:d5:7e:fe:e9:36:1d:39:da:89:
66:63:55:f3:06:9d:7e:72:ee:24:54:00:62:2d:aa:80:10:77:
5c:d9:54:48:71:7a:a2:b3:85:be:02:f0:69:35:2f:73:29:bb:
85:5a:1b:75:c9:86:db:a3:6a:fa:f5:f8:05:12:37:55:b3:55:
08:e7:73:ca:c3:0e:dc:03:7a:a4:2c:6c:8c:ef:59:1c:ae:ba:
d7:78:10:50:35:5e:95:07:3b:3a:87:46:a2:8f:c1:03:ee:61:
b1:d5:aa:6d:0c:29:07:54:fe:49:78:70:e7:26:4a:7f:ef:48:
cd:c6:47:28:af:b6:b8:f6:3d:af:f6:ad:8d:75:5a:03:6e:79:
14:ef:3b:bb:66:2e:42:26:a9:48:21:fd:57:ba:c5:38:f8:2f:
87:8a:4f:bb:bd:aa:38:df:bb:49:71:aa:c6:f0:36:a4:08:a0:
25:e6:9b:25:cc:6e:10:c9:64:e8:d5:a1:41:03:32:7c:6a:60:
11:d7:95:69:1b:01:80:cd:1a:4b:55:b7:39:6d:4c:90:00:0f:
ad:ca:c0:ce:cf:c7:eb:de:7e:1c:fc:f4:9d:2f:d7:f0:33:1e:
6d:e7:37:88:31:e2:52:52:a0:5d:b1:4c:e5:02:52:b0:24:ce:
8f:86:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:32 2026 by rpki-client