Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: 3RBXASmdsRjFzgjJLtYsKHo1rO4Yh6lW8y/D5aUqbJI=
Subject key identifier: 82:9D:3E:2C:F9:DE:70:F4:CA:A6:69:8C:13:08:F5:9C:C3:53:3F:34
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 019E2023F167C95EA8684AEEADA84F91DED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 14A3
Signing time: Wed 13 May 2026 07:01:26 +0000
Manifest this update: Wed 13 May 2026 07:01:26 +0000
Manifest next update: Thu 14 May 2026 07:01:26 +0000
Files and hashes: 1: 3FimOljJosTayAtjbZa6x1Z1MXs.roa (hash: MeEGr+necOtlrJoGJSW1/wG4DV94jp5QrV4hS1BQHCg=)
2: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (hash: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: Vq6C2ovM7faFaXX/Qq4wMsTKqwBj/CNJOnJErJMC8lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:f1:67:c9:5e:a8:68:4a:ee:ad:a8:4f:91:de:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: May 13 07:01:26 2026 GMT
Not After : May 14 07:01:26 2026 GMT
Subject: CN=829d3e2cf9de70f4caa6698c1308f59cc3533f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:05:6b:46:77:ad:bb:cb:f2:e2:ba:7a:25:
ab:93:3f:93:1f:70:36:5a:7a:71:86:6a:ba:74:11:
6b:bb:7b:9a:92:2a:54:fd:6c:7c:91:df:f0:32:d3:
0d:ca:88:b7:f6:3f:c1:fa:80:df:40:96:20:65:64:
dc:b2:a7:80:5f:92:e8:fe:d9:a0:5c:33:bd:9e:41:
00:1e:66:c6:84:cc:a1:63:d7:96:9f:f0:fd:70:b1:
ba:14:08:47:27:22:a8:f0:9a:13:d7:85:e3:be:7b:
72:6b:89:e3:7d:53:51:2a:bb:fd:30:b3:25:6d:53:
fb:d5:ce:c7:74:ee:d7:1c:88:de:89:f7:a5:0c:4c:
cd:50:21:d8:36:00:fa:21:aa:69:42:39:57:c0:cd:
2a:a9:b0:00:54:a0:99:10:81:b2:53:3a:17:d0:91:
10:b6:57:0b:2d:28:b1:21:b3:c9:44:14:d1:b7:eb:
35:5d:2c:9e:c6:03:c2:81:db:72:1c:67:2e:39:f8:
07:b8:f1:a9:f7:b1:fe:40:4b:4e:33:80:c3:ee:bc:
98:ac:1c:74:c1:83:18:d9:7a:7a:b7:2a:3f:41:6b:
de:1f:84:59:2b:55:df:e7:29:81:08:0e:e1:b3:8a:
37:ae:f5:b7:da:73:2c:2c:06:7b:5b:22:ec:5d:d6:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:3E:2C:F9:DE:70:F4:CA:A6:69:8C:13:08:F5:9C:C3:53:3F:34
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f1:86:c4:53:bc:28:38:47:68:23:c8:5d:58:b7:fe:dc:ad:
ea:5a:07:a3:7c:ee:90:71:a1:c0:25:f0:03:5f:a0:52:1f:a4:
50:ba:11:24:a4:36:14:e9:d9:51:ee:a7:12:12:b8:53:6e:78:
80:40:ed:80:bf:02:aa:68:21:30:9d:73:8a:f4:c4:8b:bc:f7:
96:8d:69:00:c5:8f:ea:94:3b:f2:75:e5:58:78:df:40:f0:01:
8a:7b:8d:ae:0e:d9:5f:ac:13:b7:0f:78:9d:5a:25:67:1f:9f:
c5:86:27:dc:c7:7d:e9:58:07:0d:3a:a4:5b:e3:88:cd:f8:0a:
fc:9f:64:f8:96:33:88:25:ac:af:9e:40:33:65:82:05:31:12:
37:65:22:c2:d0:c7:10:6f:27:d9:ca:dd:64:5e:57:05:02:7b:
f9:07:45:24:b2:99:65:7a:ef:03:d4:3f:bb:87:57:12:88:23:
58:a3:a4:38:f5:ac:eb:4d:59:35:f3:bd:1a:f8:fb:b0:43:93:
2d:71:dd:28:33:18:02:84:62:7f:bf:05:39:a5:d4:ff:5f:f6:
2d:88:bb:d4:f5:7b:2e:d5:f2:9d:0b:05:67:80:fe:85:80:d2:
39:7d:8f:06:a9:a2:15:a0:ff:e7:02:7b:16:a4:23:4f:bb:27:
10:e5:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:58 2026 by rpki-client