Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: EBWIhvT+VxHr4uDxAXuchvRAZdFiydwx2w5s/6Yvem0=
Subject key identifier: AA:D6:7F:56:F0:40:81:9A:48:32:C3:9C:91:E1:F2:31:F7:D9:AC:62
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019E1EA36B571C2555ED198946304941981F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1755
Signing time: Wed 13 May 2026 00:01:26 +0000
Manifest this update: Wed 13 May 2026 00:01:26 +0000
Manifest next update: Thu 14 May 2026 00:01:26 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: NMB8BPzwIg0Xt2KWB5H1Cfk3hQsbbmd6WrzfIK7b8KQ=)
2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:6b:57:1c:25:55:ed:19:89:46:30:49:41:98:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: May 13 00:01:26 2026 GMT
Not After : May 14 00:01:26 2026 GMT
Subject: CN=aad67f56f040819a4832c39c91e1f231f7d9ac62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:c8:14:72:f7:eb:cc:52:ce:69:4e:1f:ab:
02:75:57:7e:f4:f5:f6:c4:a4:44:b7:96:f0:19:68:
50:41:c7:6d:cf:08:0a:54:20:f1:12:c4:c7:2d:b3:
a1:24:e9:46:40:7c:d8:af:82:f8:fe:0f:b5:38:2a:
79:be:fc:b9:09:58:4d:0d:c6:35:0c:9d:aa:10:36:
c4:b2:d5:23:4d:09:98:20:f8:9c:5d:da:8c:14:81:
fa:61:b8:5f:e6:65:1c:32:0d:37:f2:a5:85:48:ce:
d4:6f:ce:97:99:3f:51:09:73:4e:b2:08:77:9c:45:
6d:cd:a7:03:ab:0f:3d:ce:5c:ab:d3:3d:ab:d3:72:
48:54:f4:25:ca:18:d6:64:12:3c:fe:e9:9e:70:ba:
73:37:3e:06:d0:fb:22:1f:c9:6c:83:6c:f7:ff:c7:
47:09:aa:dc:dd:fd:b7:f1:bf:81:68:5f:05:20:95:
10:ef:24:c9:93:0f:c3:02:41:20:a1:ee:29:6e:b6:
9a:0b:a9:e1:35:05:d5:d2:c1:81:f9:71:15:29:c8:
df:23:52:e6:66:37:e9:8d:44:8b:66:83:60:bf:76:
0e:7a:68:35:97:03:a0:e5:ed:1e:db:6d:9a:9b:3d:
27:05:7e:c4:28:26:1b:54:e4:7c:0e:27:df:7c:c9:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:7F:56:F0:40:81:9A:48:32:C3:9C:91:E1:F2:31:F7:D9:AC:62
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2f:c4:2c:ab:84:65:ed:85:b7:0a:e5:97:08:6f:89:89:a6:
39:08:db:ea:89:26:bc:52:b6:4d:1b:42:8e:cd:ff:47:be:36:
8f:49:b7:70:7f:cb:69:c9:08:10:20:84:db:7f:ae:9a:6c:9d:
96:b0:0e:d9:81:71:64:27:3d:f9:bb:e2:17:dc:d2:7a:1b:b9:
4e:3c:c7:2f:7c:18:53:ef:6d:fe:49:68:0d:07:f1:25:fa:b6:
10:9a:c6:19:68:79:45:6b:8f:97:15:88:dc:b2:a5:49:e3:8c:
ad:76:31:48:53:5c:3b:2a:ac:48:3c:bc:1f:43:b0:1a:ed:14:
6a:f6:c1:17:76:b2:6b:5e:67:11:d2:25:d9:3d:26:f6:af:d7:
3a:18:83:37:c1:f0:f6:cf:ca:57:4d:b8:a4:c5:07:f7:bd:22:
67:27:8f:c7:57:ff:c2:ed:a1:7e:0d:0d:b6:ee:db:81:aa:81:
d8:b5:d6:f2:85:f8:24:e3:e8:25:48:57:77:84:3b:c4:35:7f:
14:a7:8d:12:db:bb:b3:d7:de:66:d8:e7:10:07:32:55:68:d5:
03:ea:50:54:df:e0:22:60:15:41:dd:6d:74:37:29:6c:47:be:
e6:92:11:1d:fe:c9:ed:72:9a:9f:e8:1d:45:e1:47:de:db:a9:
94:7e:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:55:18 2026 by rpki-client